WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
WeAreDevelopers LIVE • Apr 27, 2023

Automotive Security Challenges: A Supplier's View

Davor Frkat

Attackers are disguising CAN bus exploits as emergency jump-starters to compromise software-defined vehicles. Discover how suppliers secure modern fleets against ransomware without sacrificing strict millisecond latency requirements.

Pause
Mute Enter Fullscreen
#1 about 7 min

Introduction to automotive supplier operations and vehicle systems

How broad manufacturing divisions manage everything from powertrain combustion to central electrical architectures.

#2 about 6 min

Overview of attack surfaces and cybersecurity threats

The transition of vehicles from offline systems to connected environments increases exposure to physical and remote exploitation.

#3 about 3 min

Historical milestones and the evolution of vehicle hacking

How early engine tuning evolved into massive remote vulnerabilities demonstrating complete control over safety critically components.

#4 about 6 min

Recent examples of local manipulation and physical bus attacks

Physical access techniques allow attackers to bypass security boundaries by directly injecting malicious packets into internal networks.

#5 about 5 min

Managing hardware limitations and long vehicle lifespans

Extending software support for decades introduces severe challenges for cryptographic performance and resource constrained environments.

#6 about 4 min

Securing onboard communications and defending against fault injection

Implementing multi-supplier message authentication requires complex synchronization to mitigate latency variations and hardware glitching techniques.

#7 about 3 min

Adapting to consolidated controllers and modern network architectures

Transitioning to fewer centralized computing units necessitates containerization and deterministic Ethernet alongside traditional automotive protocols.

#8 about 4 min

Evaluating software complexity and predicting emerging threat models

Exponential growth in codebase sizes demands rigorous static analysis and expands the operational scope for potential ransomware incidents.

#9 about 2 min

Navigating the complexities of cryptographic key management

Distributing and rotating production keys across manufacturer ecosystems requires a resilient public key infrastructure.

#10 about 3 min

Preserving legacy software builds and managing continuous updates

Delivering over-the-air firmware updates to aging architectures demands strict preservation of development toolchains to prevent accidental bricking.

#11 about 2 min

Balancing security architectures with right to repair legislation

Ensuring end users can modify hardware without exposing underlying key management workflows requires robust interface authorization.

#12 about 3 min

Preparing vehicle lifecycles for post quantum cryptography

Long production lifespans require immediate planning to transition embedded hardware accelerators before current cryptographic primitives fail.

#13 about 1 min

Leveraging penetration testing and vulnerability disclosure programs

Engaging independent security researchers through structured bounties provides external validation for complex proprietary components.

#14 about 5 min

Implementing automotive cybersecurity frameworks and compliance standards

Following specific international methodologies mandates continuous risk assessment controls across the entire manufacturing supply chain.

#15 about 5 min

Forensics and novel threat models in autonomous driving systems

Investigating algorithmic failures in self-driving cars requires tamper-proof telemetry data to distinguish physical compromise from software malfunctions.

#16 about 9 min

Addressing questions on artificial intelligence and usability trade-offs

Industry professionals discuss how generative models impact deep debugging workflows and the necessity of seamless consumer authentication.

Matching moments

1:35 min

Navigating impending automotive security regulations and compliance

Martin Schmiedecker · LIVE

4:36 min

Developer challenges in securing modern connected vehicles

Martin Schmiedecker · LIVE

11:26 min

Identifying system risks and collaborative ecosystem legal challenges

Hans-Jürgen Eidler · LIVE

1:23 min

Adapting industry practices for long-term vehicle software security

Henning Harbs · World Congress 2023

3:50 min

Managing cybersecurity risks throughout the entire vehicle lifecycle

Henning Harbs · World Congress 2023

5:14 min

Approaching vehicle connectivity, offline telemetry, and software cybersecurity

Denis Grahovac · World Congress 2021

More from WeAreDevelopers LIVE

WeAreDevelopers LIVE - Tech Education in Two Languages thumbnail
1:00:18
3 days ago

WeAreDevelopers LIVE - Tech Education in Two Languages

Daniel Cranney, Roxy Rodriguez-Becker

WeAreDevelopers LIVE - Playing in Production thumbnail
1:06:40
10 days ago

WeAreDevelopers LIVE - Playing in Production

Andrew MacLean, Daniel Cranney, Christian Heilmann

WeAreDevelopers LIVE - Is CSS Catching Up to Flash? thumbnail
1:03:33
24 days ago

WeAreDevelopers LIVE - Is CSS Catching Up to Flash?

Chris Heilmann, Daniel Cranney, Bramus Van Damme

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along thumbnail
1:21:17
about 1 month ago

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along

Chris Heilmann, Daniel Cranney, Krzysztof Cieślak

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak thumbnail
4:23
about 1 month ago

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak

Chris Heilmann, Daniel Cranney

WeAreDevelopers LIVE - Open Source Agent Toolkits thumbnail
1:00:38
about 1 month ago

WeAreDevelopers LIVE - Open Source Agent Toolkits

Chris Heilmann, Daniel Cranney, Eddie Jaoude

Upcoming sessions on this topic

Open session

Supply Chain Security for the Everyday Engineer

  • Pradumna Saraf

    Kestra Technologies

    Quality Assurance Engineer

Open session

Autopsy of an Autonomous Incident: When the Agent Made It Worse

  • Navin Pai

    StackGen

    Director of Engineering

Open session

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

  • Vikram Vaswani

    Consultant

Open session

How is SWE & EM roles are changing in the age of AI

  • Amol Sharma

    Stripe

    Engineering Manager

Open session

Shipping MCP to Real Users: Scaling, Auth, and the PII Leak You Didn't See Coming

  • Hadar Geva

    Myop

    CTO & Co-founder

Open session

From Prompt Engineering to Harness Engineering: Building Observable and Governed GenAI Systems

  • Lakshmi Devi Prakash

    JPMorgan Chase

    VP, Applied AI/ML Lead

Related videos

Cybersecurity for Software Defined Vehicles thumbnail
22:09
World Congress 2023 • about 3 years ago

Cybersecurity for Software Defined Vehicles

Henning Harbs

Cyber Security: Small, and Large! thumbnail
37:32
LIVE • about 5 years ago

Cyber Security: Small, and Large!

Martin Schmiedecker

On developing smartphones on wheels thumbnail
1:51:43
LIVE • almost 5 years ago

On developing smartphones on wheels

Hans-Jürgen Eidler

The future of automotive mobility: Upcoming E/E architectures, V2X and its challenges thumbnail
1:47:33
LIVE • over 4 years ago

The future of automotive mobility: Upcoming E/E architectures, V2X and its challenges

Georg Kühberger, Manuel Pascual

A Hitchhikers Guide to Container Security - Automotive Edition 2024 thumbnail
21:49
World Congress 2024 • about 2 years ago

A Hitchhikers Guide to Container Security - Automotive Edition 2024

Reinhard

Car's are Technology on Wheels - Impact of Software and IT Competence in Automotive thumbnail
21:47
World Congress 2023 • almost 3 years ago

Car's are Technology on Wheels - Impact of Software and IT Competence in Automotive

Rahima Yakoob

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.