The transition from hardware-centric cars to complex, connected software-defined vehicles introduces new capabilities and challenges.
The UNECE R155 regulation mandates a certified cybersecurity management system (CSMS) for all new vehicles, impacting the entire supply chain.
Vehicle cybersecurity must be maintained for over a decade, requiring continuous monitoring, incident response, and robust over-the-air update capabilities.
Volkswagen's security technology kit uses a secure service-oriented architecture (SOA) with TLS to protect in-vehicle communication between ECUs.
The standardized On-Board Diagnostics (OBD) port creates a significant physical vulnerability, comparable to an unsecured USB port on a laptop.
Several real-world examples, including CAN injection, key fob brute-forcing, and relay attacks, demonstrate common vehicle vulnerabilities.
Ultra-wideband (UWB) technology prevents relay attacks by measuring signal time-of-flight, representing a paradigm shift towards proactive, long-term cybersecurity management.
The discussion covers securing legacy systems like CAN bus, the role of open standards like AUTOSAR, and the importance of domain separation in future vehicle architectures.
37:32Martin Schmiedecker
27:32Jasmin Azemović
41:03Joachim Werner
1:54:28Kurt Eder
58:59Davor Frkat
29:47Thomas Chauchefoin & Paul Gerste
1:58:48Thomas Konrad
21:49Reinhard Kugler
.gif?w=240&auto=compress,format)
.png?w=240&auto=compress,format)
Jobs that call for the skills explored in this talk.
Avantgarde Experts GmbH
Rolls-Royce Deutschland Ltd & Co. KG
Siemens AG
Manndeckung GmbH
Schozach-Bottwartal GVV, Germany
Green Tech Valley Cluster GmbH