As vehicles turn into human-transporting computers, more specific attention to the issue of long-term secure operation is needed. In order to prevent cyber-attacks on the fleet, monitoring the internal state of the individual vehicles’ IT-infrastructure is required. In this paper we provide a suggestion on how vehicles could be managed over the course of their lifetime. Establishment of an Automotive Cyber Defense Center is a key factor of ensuring the secure operation of the vehicle fleet by an OEM. Within this paper we demonstrate why establishing such a center is necessary, what kind of security operations it needs to perform and what stakeholders are involved in ensuring secure operation of public road transport. Since Cyber Defense Centers and the required technology are well-established in classical IT-infrastructure, we propose an architecture for the automotive domain which uses these technologies, highlighting the gaps in transitioning from operating a network to operation of a vehicle fleet. The most important difference being the distributed, inhomogeneous and nomadic nature of a vehicle fleet. In order to overcome this gap we provide an exemplary implementation, which aims to make security relevant information available for usage within a Cyber Defense Center, using IoT-technology.
Establishing an Automotive Cyber Defense Center
2019
659 KB
Miscellaneous
Electronic Resource
English
Israel's cyber bureau funds defense of cyber networks
Online Contents | 2014
|Implementing Cyber Defense at JPL
NTRS | 2015
|Cyber defense lessons for flight software
NTRS | 2016
|Automotive Cyber Security Best Practices
Springer Verlag | 2016
|