Automotive Cybersecurity: Industry Requirements
The automotive industry is moving towards connected vehicles and smart mobility, spurring a new concern - cyber-attacks1. By 2023, we will see 192 million connected cars1. Thus, efforts to ensure cybersecurity along the automotive supply chain are significant. Experts predict that vehicle software code will soar to 300 million lines by 2030. This reality opens up vehicles to cyberattacks, putting both the cars and their entire ecosystem at risk1. To address these threats, cybersecurity regulations are crucial. They aim to prevent potential car losses estimated at $24 billion by 2023.
An Upstream Security report in H1 2023 highlighted a significant increase in data breaches and server attacks compared to the year before1. In June 2020, the WP.29 Cybersecurity regulations were set forth1. The European Union then made these measures compulsory for all new cars in the EU starting July 20221. These WP.29 rules integrate GDPR on data protection and other guidelines proposed by the Article 29 Working Party. They also aim to coordinate vehicle standards globally through the UNECE WP.291.
A study by IBM found that 62% of consumers would choose one brand over another based on security and privacy1. The EU, South Korea, and Japan support the WP.29 regulations1. Collectively, in 2018, these regions manufactured 32 million vehicles1. The goal is for people to prioritize cybersecurity in their car buying decisions much like they do with features like air conditioning or heated seats1. Improved cybersecurity could lead to quicker innovation and the creation of new automotive industry business models1.
Key Takeaways
- The automotive industry is seeing a rise in cyber threats due to more connected vehicles.
- New regulations, like the WP.29 guidelines, are in place to combat this trend.
- More and more, consumers are thinking about cybersecurity when making a purchase.
- Strong cybersecurity can be a driving force for new innovations and business prospects in the automotive sector.
- Fulfilling industry standards and regulations is a must to lower the risk of cyber threats.
The Importance of Automotive Cybersecurity Regulations
The car world is getting more connected. Big auto-maker names and their suppliers, alongside smart mobility groups, are joining forces to create awesome tech. But, with every new tech comes more risk of cyberattacks. These attacks target connected cars and their tech, which are packed with millions of lines of code. This high coding makes cars easier targets for bugs and flaws2.
Connected cars are particularly at risk. They can talk to each other on the road and interact with outside systems. That opens up more chances for hackers to find ways in. And these hackers are always looking for new weaknesses in the ever-evolving car tech world2.
The Rise of Connected Vehicles and Cybersecurity Threats
There's a lot of code in today's cars, about 100 million lines of it. This amount is expected to grow by 20303. To compare, a passenger plane has 15 million lines, and a typical computer system has around 40 million. This shows cars are very exposed to cyber risks because they're packed with so much complex code3.
The more code a car has, the more open it is to cyber harms. This means, more code in cars makes them key targets for cyber-attacks. So, better cyber defenses are really vital3.
The Role of Governmental Bodies and Independent Regulators
Due to these cyber dangers, governments and independent watchdogs are pushing for better cybersecurity. They want auto companies and their tech partners to put stronger safety measures in place. The UNECE has come up with WP.29 to help in this effort2.
The WP.29's R155 rule is a key part of improving car security. It's now obligatory for new car models. This rule requires having clear strategies on how to deal with cyber risks. It also includes standards that cover the whole life of a car, from design to when it's used3.
ISO/SAE 21434 is another key guide. It helps companies manage cybersecurity well, matching with ISO26262. This ISO guide talks about the steps needed at different levels to fight off cyber risks3.
AUTOSAR, a set of industry rules, has added new cybersecurity steps. These steps focus on fighting off cyber-attacks on car systems directly. They show how the car industry is adapting to the growing cyber-raids threat3.
Now, across the globe, governments are setting new rules to protect cars from cyber dangers. To beat these threats, car makers should work with the government. They need to join hands and set common standards that make cars safer from cyber risks2.
"The complexity of modern cars and the amount of code involved greatly increase the likelihood of cyber-attacks, thus the need for advanced cybersecurity measures."
Cybersecurity services requirements in the automobile industry
The automotive industry is adding more tech and connectivity. This means there's a big need for strong cybersecurity services. With connected cars, there are more risks. So, governments and groups are stepping in to protect us4.
UNECE WP.29 CSMS Regulation
In June 2020, the UNECE's WP.29 put out two new rules for car cybersecurity4. They focus on keeping vehicles safe from cyber threats. These rules say how cars should be designed, how to spot and deal with threats, and how to update software safely4.
By early 2021, these rules will be finished and will affect 54 countries4. Car makers in these places must meet these new standards for their vehicles to be approved4.
A total of 64 countries, including Russia since 1987, have agreed to follow these cybersecurity rules5. Starting July 2024, every new vehicle must pass tests to show it meets these cybersecurity standards5.
Building cars involves many players. There are the car makers, their first and second-tier suppliers, and the companies that provide services. Each group faces its own cybersecurity issues. Together, they need to protect cars, parts, and the ways they communicate5.
Today's cars are complex, with many ways to connect. But these connections also make them vulnerable to cyber attacks5. If hackers get in, they could steal data, mess with the car's functions, or even cause harm5.
Because of these risks, officials are pushing for better cybersecurity in the auto industry. They're asking car makers and suppliers to do more to stop cyber attacks. They're warning that a big attack could cost the industry a lot by 20234.
"The UNECE includes 56 member states and is actively involved in the development of regulations related to automotive cybersecurity."4
As cars get more connected, protecting them becomes crucial. Following rules like the UNECE WP.29 CSMS is key to keeping cars safe from cyber threats465.
Conclusion
The automotive world is turning more and more to connected cars and smart transport solutions. This makes the need for strong7 automotive cybersecurity vital. Organizations like UNECE's WP.29 have made rules, including the CSMS regulation, to fight the rising threats8. These rules are aimed at making sure cybersecurity is built into every step of making a car, not overlooked. They want to make sure cars stay safe and secure.
Falling in line with these rules helps car makers and suppliers keep their businesses safe and honest in the fast-moving world of connected cars8. More and more people are interested in7 automotive cybersecurity because they see the risks. Key standards and rules, like ISO/SAE 21434 and UN Regulation No. 155 (UN R155), are pushing for better cybersecurity in cars. But as cars get more software-focused (SDVs), they face newer challenges in keeping these cars from digital threats. To deal with this, car makers and suppliers need to learn from the IT world and use the latest in car cybersecurity knowledge.
The future looks bright for the7 automotive cybersecurity market, reaching an estimated value of $13.9 billion USD by 2030. This shows how following these rules and standards is crucial yet benefits car makers and suppliers too in the connected car areas8. Making7 automotive cybersecurity a top goal can help the whole industry. It can make customers feel more at ease and prepare everyone for the smart mobility future.
FAQ
What is the threat of cyber-attacks on the automotive industry?
The move to connected vehicles brings the risk of cyber-attacks. By 2030, cars may have 300 million lines of code. This opens many chances for attacks, not just on cars but their whole system. Creating cybersecurity rules is crucial. They help prevent the expected spike in cyber-attacks on cars, saving the industry up to $24 billion by 2023.
How are governmental bodies and independent regulators responding to the cybersecurity threats in the automotive industry?
Global and independent groups push for better cybersecurity from car makers and component suppliers. The UNECE board, linked to the UN, set new rules for car safety. This includes making cars and their cyber protections meet specific global standards.
What are the key requirements of the UNECE WP.29 CSMS regulation?
The UNECE's new rules ask for 4 key steps: to manage cyber risks, design cars safely, react to attacks, and update software securely. These steps help keep cars safe from cyber harm. The full rules are set to come out in 2021. Once out, 54 countries will follow them. Car makers must then meet tough standards for their cars' cyber safety and updates.
How can automotive manufacturers and suppliers benefit from complying with cybersecurity regulations?
Following cybersecurity rules helps car industry players in many ways. It protects customers and keeps businesses safe. Plus, it shows the market they are trustworthy in the connected car world. Meeting these rules makes sure safety and security are key from designing to selling cars.
Source Links
- A single automotive cyber security standard at last: WP.29 - https://www.thalesgroup.com/en/worldwide-digital-identity-and-security/iot/magazine/single-automotive-cyber-security-standard-last
- The Importance of Automotive Cybersecurity: Safeguarding Vehicles in the Digital Age | Institute of Data - https://www.institutedata.com/us/blog/automotive-cybersecurity/
- Cybersecurity in Automotive: Current Trends, Regulations, and Future Paths - rinf.tech - https://www.rinf.tech/cybersecurity-in-automotive-current-trends-regulations-future-paths/
- Automotive Cybersecurity Standards and Regulations - https://upstream.auto/automotive-cybersecurity-standards-and-regulations/
- Cybersecurity in the automotive industry: Ensuring compliance with UNECE regulations | Kaspersky ICS CERT - https://ics-cert.kaspersky.com/publications/reports/2024/02/07/cybersecurity-in-the-automotive-industry-ensuring-compliance-with-unece-regulations/
- Vehicle Cybersecurity | NHTSA - https://www.nhtsa.gov/research/vehicle-cybersecurity
- Automotive Cybersecurity: Preventing Vulnerabilities in Car Software | Perforce Software - https://www.perforce.com/blog/kw/automotive-cybersecurity
- Curbing Automotive Cybersecurity Attacks - https://semiengineering.com/curbing-automotive-cybersecurity-attacks/
