WEBVTT

1
00:00:03.150 --> 00:00:07.550
<00:00:03.150>Thank <00:00:03.277>you <00:00:03.404>for <00:00:03.531>joining <00:00:03.659>this <00:00:03.786>talk <00:00:03.913>here <00:00:04.040>on <00:00:04.168>the <00:00:04.295>Friday <00:00:04.422>afternoon <00:00:04.550>and

2
00:00:07.770 --> 00:00:11.510
<00:00:07.770>having <00:00:07.909>you <00:00:08.049>here. <00:00:08.189>It's <00:00:08.330>very <00:00:08.469>nice. <00:00:08.610>So <00:00:08.750>welcome <00:00:08.889>to <00:00:09.030>my <00:00:09.170>speech.

3
00:00:14.860 --> 00:00:19.350
<00:00:14.860>Welcome <00:00:15.000>to <00:00:15.139>my <00:00:15.280>speech <00:00:15.420>to <00:00:15.559>about <00:00:15.700>cybersecurity <00:00:15.840>for <00:00:15.979>software <00:00:16.119>defined <00:00:16.259>vehicles.

4
00:00:19.770 --> 00:00:20.870
<00:00:19.770>During <00:00:20.265>this <00:00:20.760>session,

5
00:00:21.050 --> 00:00:24.310
<00:00:21.050>you <00:00:21.205>will <00:00:21.361>hear <00:00:21.516>about <00:00:21.672>our <00:00:21.827>challenges <00:00:21.983>for <00:00:22.138>the <00:00:22.294>automotive <00:00:22.450>industry,

6
00:00:24.730 --> 00:00:28.590
<00:00:24.730>and <00:00:24.885>I <00:00:25.041>will <00:00:25.196>present <00:00:25.352>some <00:00:25.507>solutions <00:00:25.663>and <00:00:25.818>some <00:00:25.974>few <00:00:26.130>examples.

7
00:00:29.010 --> 00:00:33.150
<00:00:29.010>You <00:00:29.150>will <00:00:29.290>see <00:00:29.430>which <00:00:29.570>vulnerabilities <00:00:29.710>are <00:00:29.850>already <00:00:29.990>existing <00:00:30.130>today. <00:00:30.270>And <00:00:30.410>finally,

8
00:00:33.430 --> 00:00:35.190
<00:00:33.430>I <00:00:33.663>will <00:00:33.896>give <00:00:34.130>an <00:00:34.363>outlook <00:00:34.596>with <00:00:34.830>challenge.

9
00:00:35.370 --> 00:00:37.950
<00:00:35.370>The <00:00:35.544>challenges <00:00:35.720>need <00:00:35.894>to <00:00:36.070>be <00:00:36.245>solved <00:00:36.419>for <00:00:36.595>the <00:00:36.769>future.

10
00:00:43.530 --> 00:00:43.890
Dig,

11
00:00:43.890 --> 00:00:48.550
<00:00:43.890>digitalization <00:00:44.065>and <00:00:44.240>electrification <00:00:44.415>are <00:00:44.590>accelerating <00:00:44.765>the <00:00:44.940>transformation <00:00:45.115>of <00:00:45.290>the

12
00:00:48.550 --> 00:00:49.550
<00:00:48.550>automotive <00:00:49.449>industry.

13
00:00:49.890 --> 00:00:54.670
<00:00:49.890>The <00:00:50.045>evolution <00:00:50.201>from <00:00:50.356>hardware <00:00:50.512>defined <00:00:50.667>to <00:00:50.823>software-defined <00:00:50.978>vehicles <00:00:51.134>required <00:00:51.290>new

14
00:00:54.700 --> 00:00:59.550
<00:00:54.700>architectures <00:00:54.840>and <00:00:54.980>leads <00:00:55.120>to <00:00:55.260>increasing <00:00:55.400>complexity <00:00:55.540>of <00:00:55.680>so <00:00:55.820>software <00:00:55.960>to <00:00:56.100>ensure

15
00:00:59.990 --> 00:01:03.350
<00:00:59.990>seamless <00:01:00.130>development <00:01:00.270>and, <00:01:00.410>uh, <00:01:00.550>deployment <00:01:00.690>from <00:01:00.830>the <00:01:00.970>cloud <00:01:01.110>to <00:01:01.250>the <00:01:01.390>car.

16
00:01:06.470 --> 00:01:09.730
<00:01:06.470>As <00:01:06.703>cars <00:01:06.936>are <00:01:07.170>already <00:01:07.403>becoming <00:01:07.636>more <00:01:07.870>intelligent,

17
00:01:09.880 --> 00:01:14.570
<00:01:09.880>more <00:01:10.020>connected <00:01:10.160>software <00:01:10.300>will <00:01:10.440>play <00:01:10.580>an <00:01:10.720>increasing <00:01:10.860>role <00:01:11.000>in <00:01:11.140>both <00:01:11.280>the

18
00:01:14.590 --> 00:01:15.890
<00:01:14.590>design <00:01:14.980>and <00:01:15.370>the <00:01:15.760>evolution.

19
00:01:16.550 --> 00:01:20.890
<00:01:16.550>The <00:01:16.690>increased <00:01:16.830>capability <00:01:16.970>of <00:01:17.110>new <00:01:17.250>electronic <00:01:17.390>devices <00:01:17.530>opened <00:01:17.670>up <00:01:17.810>new <00:01:17.950>applications

20
00:01:20.890 --> 00:01:25.050
<00:01:20.890>within <00:01:21.045>the <00:01:21.201>vehicle <00:01:21.356>and <00:01:21.512>a <00:01:21.667>lock <00:01:21.823>brake <00:01:21.978>systems, <00:01:22.134>fuel <00:01:22.290>injection,

21
00:01:25.150 --> 00:01:30.040
<00:01:25.150>and <00:01:25.325>improved <00:01:25.500>automatic <00:01:25.675>transmissions <00:01:25.850>where <00:01:26.025>enabled <00:01:26.200>by <00:01:26.375>a <00:01:26.550>synergy

22
00:01:30.230 --> 00:01:32.800
<00:01:30.230>between <00:01:30.580>hardware, <00:01:30.930>software, <00:01:31.280>and <00:01:31.630>mechanic.

23
00:01:34.010 --> 00:01:35.830
<00:01:34.009>Modern <00:01:34.359>cars <00:01:34.710>have <00:01:35.059>up <00:01:35.410>have,

24
00:01:36.180 --> 00:01:40.070
<00:01:36.180>have <00:01:36.307>a <00:01:36.434>control <00:01:36.561>unit <00:01:36.689>between <00:01:36.816>70 <00:01:36.943>and <00:01:37.070>a <00:01:37.198>hundred <00:01:37.325>in <00:01:37.452>the <00:01:37.580>cars,

25
00:01:40.810 --> 00:01:44.680
<00:01:40.810>and <00:01:40.950>with <00:01:41.090>software <00:01:41.230>code <00:01:41.370>with <00:01:41.510>a <00:01:41.650>hundred <00:01:41.790>million <00:01:41.930>lines <00:01:42.070>of <00:01:42.210>code.

26
00:01:46.000 --> 00:01:50.620
<00:01:46.000>The <00:01:46.140>next <00:01:46.280>step <00:01:46.420>will <00:01:46.560>be <00:01:46.700>a <00:01:46.840>high-performance <00:01:46.980>computing <00:01:47.120>platform, <00:01:47.260>which <00:01:47.400>will,

27
00:01:50.670 --> 00:01:55.260
<00:01:50.670>which <00:01:50.845>will <00:01:51.020>enable <00:01:51.195>significantly <00:01:51.370>more <00:01:51.545>computing <00:01:51.720>power <00:01:51.895>to <00:01:52.070>be

28
00:01:55.260 --> 00:01:57.140
<00:01:55.259>integrated <00:01:55.539>into <00:01:55.820>an <00:01:56.100>E <00:01:56.380>C <00:01:56.660>U,

29
00:02:01.510 --> 00:02:05.020
<00:02:01.510>being <00:02:01.665>able <00:02:01.821>to <00:02:01.976>remotely <00:02:02.132>upgrade <00:02:02.287>the <00:02:02.443>car <00:02:02.598>via <00:02:02.754>the <00:02:02.910>cloud.

30
00:02:05.280 --> 00:02:09.940
<00:02:05.280>The <00:02:05.435>software-defined <00:02:05.591>vehicle <00:02:05.746>bring <00:02:05.902>an <00:02:06.057>advantage <00:02:06.213>in <00:02:06.368>terms <00:02:06.524>of <00:02:06.680>security,

31
00:02:10.280 --> 00:02:13.060
<00:02:10.280>but <00:02:10.419>also <00:02:10.560>in <00:02:10.699>terms <00:02:10.840>of <00:02:10.979>the <00:02:11.120>value <00:02:11.260>of <00:02:11.400>the <00:02:11.540>vehicle <00:02:11.680>itself.

32
00:02:13.700 --> 00:02:18.460
<00:02:13.700>Connectivity <00:02:13.855>opens <00:02:14.011>up <00:02:14.166>new <00:02:14.322>opportunities <00:02:14.477>to <00:02:14.633>develop <00:02:14.788>and <00:02:14.944>improve <00:02:15.100>vehicles

33
00:02:18.800 --> 00:02:23.220
<00:02:18.800>and <00:02:18.955>mobility <00:02:19.111>services, <00:02:19.266>which <00:02:19.422>makes <00:02:19.577>mobility <00:02:19.733>more <00:02:19.888>safe, <00:02:20.044>more <00:02:20.200>efficient,

34
00:02:23.290 --> 00:02:26.500
<00:02:23.290>more <00:02:23.570>convenient <00:02:23.850>by <00:02:24.130>seamlessly <00:02:24.410>connecting <00:02:24.690>users,

35
00:02:26.740 --> 00:02:29.140
<00:02:26.740>vehicles <00:02:27.020>and <00:02:27.300>services <00:02:27.580>Over <00:02:27.860>the <00:02:28.140>internet,

36
00:02:29.370 --> 00:02:34.260
<00:02:29.370>drivers <00:02:29.525>are <00:02:29.681>also <00:02:29.836>getting <00:02:29.992>fascinating <00:02:30.147>experience <00:02:30.303>and <00:02:30.458>ultimately <00:02:30.614>will <00:02:30.770>have

37
00:02:34.260 --> 00:02:35.620
<00:02:34.260>more <00:02:34.566>fun <00:02:34.872>behind <00:02:35.178>the <00:02:35.484>wheel.

38
00:02:40.010 --> 00:02:44.490
<00:02:40.010>Remember, <00:02:40.126>to <00:02:40.243>lock <00:02:40.359>your <00:02:40.476>car <00:02:40.593>is <00:02:40.709>no <00:02:40.826>longer <00:02:40.943>sufficient <00:02:41.060>to <00:02:41.176>protect <00:02:41.293>the <00:02:41.410>vehicle.

39
00:02:45.710 --> 00:02:50.090
<00:02:45.710>Our <00:02:45.850>cars <00:02:45.990>are <00:02:46.130>connected <00:02:46.270>to <00:02:46.410>the <00:02:46.550>internet <00:02:46.690>and <00:02:46.830>vehicle <00:02:46.970>to <00:02:47.110>infrastructure

40
00:02:50.530 --> 00:02:54.930
<00:02:50.530>realizes <00:02:50.763>wireless <00:02:50.996>communication <00:02:51.230>between <00:02:51.463>vehicles <00:02:51.696>and <00:02:51.930>road

41
00:02:54.930 --> 00:02:55.763
infrastructure.

42
00:02:56.500 --> 00:03:01.200
<00:02:56.500>The <00:02:56.627>cybersecurity <00:02:56.754>challenge <00:02:56.881>might <00:02:57.009>heavily <00:02:57.136>impact <00:02:57.263>the <00:02:57.390>success <00:02:57.518>of <00:02:57.645>a <00:02:57.772>connected <00:02:57.900>and

43
00:03:01.210 --> 00:03:06.120
<00:03:01.210>autonomous <00:03:01.365>cars. <00:03:01.521>There's <00:03:01.676>a <00:03:01.832>potential <00:03:01.987>for <00:03:02.143>hackers <00:03:02.298>to <00:03:02.454>take <00:03:02.610>control.

44
00:03:06.220 --> 00:03:10.790
<00:03:06.220>The <00:03:06.420>vehicle's <00:03:06.620>operation <00:03:06.820>connected <00:03:07.020>and <00:03:07.220>software-defined <00:03:07.420>vehicles <00:03:07.620>will

45
00:03:11.110 --> 00:03:15.550
<00:03:11.110>continue <00:03:11.237>to <00:03:11.364>expose <00:03:11.491>new <00:03:11.619>attacks, <00:03:11.746>attack <00:03:11.873>vectors <00:03:12.000>to <00:03:12.128>hack <00:03:12.255>and <00:03:12.382>to <00:03:12.510>exploit.

46
00:03:16.290 --> 00:03:20.390
<00:03:16.290>One <00:03:16.406>of <00:03:16.523>the <00:03:16.640>most <00:03:16.756>recent <00:03:16.873>regulation <00:03:16.989>is <00:03:17.106>the <00:03:17.223>U <00:03:17.340>N <00:03:17.456>E <00:03:17.573>C <00:03:17.690>regulation

47
00:03:20.390 --> 00:03:24.390
<00:03:20.390>155 <00:03:20.623>concerning <00:03:20.856>the <00:03:21.089>approval <00:03:21.323>of <00:03:21.556>vehicle <00:03:21.790>types.

48
00:03:24.820 --> 00:03:28.510
<00:03:24.820>With <00:03:25.019>regards <00:03:25.220>of <00:03:25.420>cybersecurity <00:03:25.620>and <00:03:25.820>cybersecurity <00:03:26.019>management <00:03:26.220>system,

49
00:03:33.020 --> 00:03:37.880
<00:03:33.020>the <00:03:33.147>automotive <00:03:33.274>industry <00:03:33.401>has <00:03:33.529>learned <00:03:33.656>that <00:03:33.783>they <00:03:33.910>must <00:03:34.038>meet <00:03:34.165>the <00:03:34.292>consumer <00:03:34.420>demands

50
00:03:37.880 --> 00:03:39.200
<00:03:37.880>for <00:03:38.474>enhanced <00:03:39.067>experience.

51
00:03:40.470 --> 00:03:45.470
<00:03:40.470>Every <00:03:40.609>breakthrough <00:03:40.750>in <00:03:40.890>digital <00:03:41.030>automotive <00:03:41.170>technology <00:03:41.310>comes <00:03:41.450>with <00:03:41.590>a <00:03:41.730>security <00:03:41.870>risk.

52
00:03:46.280 --> 00:03:48.820
<00:03:46.280>The <00:03:46.513>benefits <00:03:46.746>for <00:03:46.980>the <00:03:47.213>customers <00:03:47.446>are <00:03:47.680>numerous.

53
00:03:49.340 --> 00:03:53.100
<00:03:49.340>Connectivity <00:03:49.620>offers <00:03:49.900>streaming <00:03:50.180>media, <00:03:50.460>wifi <00:03:50.740>access,

54
00:03:53.580 --> 00:03:55.540
<00:03:53.579>improved <00:03:54.046>media <00:03:54.513>entertainment <00:03:54.980>systems,

55
00:03:56.240 --> 00:04:00.820
<00:03:56.240>the <00:03:56.395>ability <00:03:56.551>to <00:03:56.706>remotely <00:03:56.862>control <00:03:57.017>the <00:03:57.173>vehicle <00:03:57.328>by <00:03:57.484>using <00:03:57.640>mobile

56
00:04:00.930 --> 00:04:05.820
<00:04:00.930>application <00:04:01.070>phone <00:04:01.210>applications <00:04:01.350>such <00:04:01.490>as <00:04:01.630>locking <00:04:01.770>and <00:04:01.910>unlocking <00:04:02.050>the <00:04:02.190>car <00:04:02.330>vehicle

57
00:04:05.960 --> 00:04:06.820
<00:04:05.960>to <00:04:06.733>infrastructure,

58
00:04:07.380 --> 00:04:11.700
<00:04:07.380>communication <00:04:07.519>and <00:04:07.660>communication <00:04:07.799>for <00:04:07.940>plug <00:04:08.079>and <00:04:08.220>charge <00:04:08.359>for <00:04:08.500>charging <00:04:08.640>the <00:04:08.780>electric

59
00:04:11.730 --> 00:04:13.740
<00:04:11.730>vehicle. <00:04:12.079>Here <00:04:12.429>on <00:04:12.780>this <00:04:13.130>picture,

60
00:04:13.880 --> 00:04:18.620
<00:04:13.880>you <00:04:14.007>see <00:04:14.134>all <00:04:14.261>the <00:04:14.389>different <00:04:14.516>interfaces <00:04:14.643>from <00:04:14.770>the <00:04:14.898>car <00:04:15.025>to <00:04:15.152>other <00:04:15.280>infrastructure

61
00:04:18.680 --> 00:04:21.500
<00:04:18.680>and <00:04:18.855>to <00:04:19.030>the <00:04:19.204>backend <00:04:19.380>and <00:04:19.555>also <00:04:19.730>to <00:04:19.905>consumer <00:04:20.079>devices.

62
00:04:27.030 --> 00:04:31.610
<00:04:27.030>We <00:04:27.146>vehicle <00:04:27.263>manufacturers <00:04:27.380>are <00:04:27.496>not <00:04:27.613>only <00:04:27.729>accountable <00:04:27.846>for <00:04:27.963>the <00:04:28.080>U <00:04:28.196>N <00:04:28.313>E <00:04:28.429>C

63
00:04:31.620 --> 00:04:33.010
<00:04:31.620>regulation <00:04:32.245>for <00:04:32.871>themself,

64
00:04:33.270 --> 00:04:36.850
<00:04:33.270>but <00:04:33.409>also <00:04:33.549>have <00:04:33.690>to <00:04:33.830>prove <00:04:33.969>that <00:04:34.109>the <00:04:34.250>suppliers <00:04:34.390>comply <00:04:34.530>as <00:04:34.669>well.

65
00:04:37.880 --> 00:04:42.290
<00:04:37.880>They <00:04:38.020>all <00:04:38.159>need <00:04:38.300>to <00:04:38.440>collect <00:04:38.580>and <00:04:38.719>verify <00:04:38.860>the <00:04:39.000>information <00:04:39.140>from <00:04:39.280>suppliers,

66
00:04:42.430 --> 00:04:46.450
<00:04:42.430>and <00:04:42.557>they <00:04:42.684>have <00:04:42.811>to <00:04:42.939>demonstrate <00:04:43.066>that <00:04:43.193>risks <00:04:43.320>have <00:04:43.448>been <00:04:43.575>identified <00:04:43.702>and <00:04:43.830>managed

67
00:04:47.520 --> 00:04:48.353
<00:04:47.520>to <00:04:47.894>do <00:04:48.269>this.

68
00:04:48.500 --> 00:04:53.340
<00:04:48.500>Possible <00:04:48.675>threats <00:04:48.850>are <00:04:49.025>analyzed <00:04:49.200>and <00:04:49.375>preemptive <00:04:49.550>countermeasures <00:04:49.725>are <00:04:49.900>installed

69
00:04:53.340 --> 00:04:55.540
<00:04:53.340>in <00:04:53.620>hardware <00:04:53.900>and <00:04:54.180>software. <00:04:54.460>For <00:04:54.740>example,

70
00:04:55.550 --> 00:05:00.500
<00:04:55.550>protective <00:04:55.750>measures <00:04:55.950>against <00:04:56.150>software <00:04:56.350>manipulation <00:04:56.550>and <00:04:56.750>unauthorized <00:04:56.950>communication

71
00:05:00.500 --> 00:05:01.460
<00:05:00.500>in <00:05:00.788>the <00:05:01.075>vehicle <00:05:01.364>network.

72
00:05:05.400 --> 00:05:10.290
<00:05:05.400>Cybersecurity <00:05:05.507>is <00:05:05.615>binding <00:05:05.723>in <00:05:05.830>U <00:05:05.938>N <00:05:06.046>E <00:05:06.153>C <00:05:06.261>countries <00:05:06.369>for <00:05:06.476>all <00:05:06.584>new <00:05:06.692>type <00:05:06.799>vehicles

73
00:05:10.780 --> 00:05:12.690
<00:05:10.780>since <00:05:11.479>July, <00:05:12.179>2022,

74
00:05:13.190 --> 00:05:17.930
<00:05:13.190>and <00:05:13.330>will <00:05:13.469>be <00:05:13.610>mandatory <00:05:13.750>for <00:05:13.890>all <00:05:14.030>vehicles <00:05:14.170>produced <00:05:14.310>from <00:05:14.450>July, <00:05:14.590>2024

75
00:05:18.000 --> 00:05:22.250
<00:05:18.000>onwards. <00:05:18.200>So <00:05:18.400>up <00:05:18.600>from <00:05:18.800>this <00:05:19.000>date <00:05:19.200>on, <00:05:19.400>no,

76
00:05:22.550 --> 00:05:26.970
<00:05:22.550>no <00:05:22.725>car <00:05:22.900>can <00:05:23.075>be <00:05:23.250>approved <00:05:23.425>without <00:05:23.600>having <00:05:23.775>security, <00:05:23.950>uh,

77
00:05:27.510 --> 00:05:32.490
<00:05:27.510>in <00:05:27.610>the <00:05:27.710>car. <00:05:27.810>The <00:05:27.909>criteria <00:05:28.010>for <00:05:28.110>C <00:05:28.210>M <00:05:28.310>S <00:05:28.409>C <00:05:28.510>S <00:05:28.610>M <00:05:28.710>S <00:05:28.810>are <00:05:28.909>extensive.

78
00:05:33.190 --> 00:05:36.610
<00:05:33.190>No <00:05:33.345>part <00:05:33.501>of <00:05:33.656>the <00:05:33.812>car <00:05:33.967>can <00:05:34.123>be <00:05:34.278>left <00:05:34.434>out. <00:05:34.590>Documentation,

79
00:05:37.390 --> 00:05:42.050
<00:05:37.390>implementation <00:05:37.530>and <00:05:37.669>testing <00:05:37.810>can <00:05:37.950>be <00:05:38.090>assessed <00:05:38.229>by <00:05:38.370>the <00:05:38.510>type <00:05:38.650>of <00:05:38.789>approval

80
00:05:42.240 --> 00:05:44.930
<00:05:42.240>authorities <00:05:42.520>like <00:05:42.800>in <00:05:43.080>German. <00:05:43.360>The <00:05:43.640>KA

81
00:05:51.160 --> 00:05:54.090
<00:05:51.159>cybersecurity <00:05:51.315>does <00:05:51.471>not <00:05:51.626>stop <00:05:51.782>at <00:05:51.937>the <00:05:52.093>protection <00:05:52.248>of <00:05:52.404>the <00:05:52.559>vehicle.

82
00:05:55.020 --> 00:05:57.480
<00:05:55.020>Vehicles <00:05:55.219>are <00:05:55.419>often <00:05:55.620>driven <00:05:55.820>for <00:05:56.020>10, <00:05:56.219>10 <00:05:56.419>years,

83
00:05:57.580 --> 00:06:02.240
<00:05:57.580>or <00:05:57.735>even <00:05:57.891>longer <00:05:58.046>requirement <00:05:58.202>requiring <00:05:58.357>maintenance <00:05:58.513>over <00:05:58.668>a <00:05:58.824>long <00:05:58.979>period.

84
00:06:03.070 --> 00:06:08.000
<00:06:03.070>This <00:06:03.197>makes <00:06:03.324>them <00:06:03.451>more <00:06:03.579>to <00:06:03.706>vessels <00:06:03.833>or <00:06:03.960>aircraft <00:06:04.088>which <00:06:04.215>see <00:06:04.342>software <00:06:04.469>updates

85
00:06:08.190 --> 00:06:12.000
<00:06:08.190>also <00:06:08.297>for <00:06:08.405>a <00:06:08.513>longer <00:06:08.620>period <00:06:08.728>than <00:06:08.836>those <00:06:08.943>for <00:06:09.051>consumer <00:06:09.159>products <00:06:09.266>such <00:06:09.374>as <00:06:09.482>PC <00:06:09.590>or

86
00:06:12.000 --> 00:06:16.000
<00:06:12.000>smartphones <00:06:12.280>tablets <00:06:12.560>or <00:06:12.840>smart <00:06:13.120>appliance. <00:06:13.400>Rather,

87
00:06:16.030 --> 00:06:20.760
<00:06:16.030>it's <00:06:16.169>paramount <00:06:16.309>that <00:06:16.450>security <00:06:16.590>must <00:06:16.729>be <00:06:16.869>managed <00:06:17.010>over <00:06:17.150>the <00:06:17.289>entire <00:06:17.429>vehicle

88
00:06:20.830 --> 00:06:25.600
<00:06:20.830>lifecycle <00:06:21.063>from <00:06:21.296>design <00:06:21.530>to <00:06:21.763>manufacturing <00:06:21.996>and <00:06:22.229>even

89
00:06:25.600 --> 00:06:26.560
<00:06:25.600>when <00:06:25.816>it's <00:06:26.032>on <00:06:26.248>the <00:06:26.464>road.

90
00:06:32.050 --> 00:06:32.883
However,

91
00:06:33.330 --> 00:06:38.220
<00:06:33.330>this <00:06:33.437>does <00:06:33.545>not <00:06:33.653>work <00:06:33.760>that <00:06:33.868>the <00:06:33.976>risk <00:06:34.083>of <00:06:34.191>cybersecurity <00:06:34.299>after <00:06:34.406>a <00:06:34.514>vehicle <00:06:34.622>has <00:06:34.729>left

92
00:06:38.240 --> 00:06:38.600
<00:06:38.240>the <00:06:38.564>pro.

93
00:06:38.600 --> 00:06:43.420
<00:06:38.600>The <00:06:38.740>factory <00:06:38.880>regulators <00:06:39.020>searching <00:06:39.160>for <00:06:39.300>vulnerabilities <00:06:39.440>can <00:06:39.580>help <00:06:39.720>to <00:06:39.860>detect <00:06:40.000>new

94
00:06:43.420 --> 00:06:47.730
<00:06:43.420>threats <00:06:43.560>as <00:06:43.700>they <00:06:43.840>emerge <00:06:43.980>in <00:06:44.120>the <00:06:44.260>future. <00:06:44.400>In <00:06:44.540>choosing <00:06:44.680>detection <00:06:44.820>systems,

95
00:06:48.600 --> 00:06:53.190
<00:06:48.600>we'll <00:06:48.707>be <00:06:48.815>able <00:06:48.923>to <00:06:49.030>identify <00:06:49.138>threats <00:06:49.246>directly <00:06:49.353>in <00:06:49.461>the <00:06:49.569>vehicle <00:06:49.676>and <00:06:49.784>can <00:06:49.892>report <00:06:50.000>them

96
00:06:53.530 --> 00:06:55.910
<00:06:53.530>to <00:06:53.880>the <00:06:54.229>vehicle. <00:06:54.580>Operations <00:06:54.929>center

97
00:06:57.460 --> 00:07:01.150
<00:06:57.460>OEMs <00:06:57.599>will <00:06:57.739>have <00:06:57.880>to <00:06:58.020>response <00:06:58.159>to <00:06:58.299>security <00:06:58.440>incidents <00:06:58.580>as <00:06:58.719>they <00:06:58.859>occur.

98
00:07:01.720 --> 00:07:06.590
<00:07:01.720>These <00:07:01.860>incidents <00:07:02.000>could <00:07:02.140>be <00:07:02.280>everything <00:07:02.420>from <00:07:02.560>a <00:07:02.700>new <00:07:02.840>or <00:07:02.980>potential <00:07:03.120>vulnerability

99
00:07:07.330 --> 00:07:09.830
<00:07:07.330>or <00:07:07.505>to <00:07:07.680>even <00:07:07.854>an <00:07:08.030>actual <00:07:08.205>attack <00:07:08.380>in <00:07:08.555>the <00:07:08.729>vehicle.

100
00:07:10.880 --> 00:07:15.590
<00:07:10.880>Automotive <00:07:11.035>players <00:07:11.191>will <00:07:11.346>need <00:07:11.502>new <00:07:11.657>organizational <00:07:11.813>and <00:07:11.968>procedural <00:07:12.124>and <00:07:12.280>technical

101
00:07:15.590 --> 00:07:20.510
<00:07:15.590>capabilities <00:07:15.745>and <00:07:15.901>respond <00:07:16.056>to <00:07:16.212>cybersecurity <00:07:16.367>events <00:07:16.523>in <00:07:16.678>and <00:07:16.834>around <00:07:16.989>the

102
00:07:20.510 --> 00:07:21.343
vehicle.

103
00:07:25.460 --> 00:07:29.340
<00:07:25.460>A <00:07:25.615>proper <00:07:25.771>implemented <00:07:25.926>process <00:07:26.082>for <00:07:26.237>an <00:07:26.393>automotive <00:07:26.548>cybersecurity <00:07:26.704>incident <00:07:26.859>response

104
00:07:29.340 --> 00:07:32.020
<00:07:29.340>across <00:07:29.573>the <00:07:29.806>entire <00:07:30.039>supply <00:07:30.273>chain <00:07:30.506>is <00:07:30.739>required.

105
00:07:32.990 --> 00:07:37.740
<00:07:32.990>Cyber <00:07:33.165>vulnerabilities <00:07:33.340>and <00:07:33.515>attacks <00:07:33.690>impact <00:07:33.865>the <00:07:34.040>entire <00:07:34.215>supply <00:07:34.390>chain,

106
00:07:38.500 --> 00:07:42.980
<00:07:38.500>jeopardizing <00:07:38.627>trust <00:07:38.754>and <00:07:38.881>safety <00:07:39.009>and <00:07:39.136>required <00:07:39.263>all <00:07:39.390>stakeholders <00:07:39.518>to <00:07:39.645>be <00:07:39.772>proactive <00:07:39.900>in

107
00:07:42.980 --> 00:07:47.900
<00:07:42.980>analyzing <00:07:43.155>risks, <00:07:43.330>monitoring <00:07:43.505>and <00:07:43.680>respond <00:07:43.855>effect <00:07:44.030>effectively <00:07:44.205>to <00:07:44.380>attacks.

108
00:07:49.200 --> 00:07:54.100
<00:07:49.200>The <00:07:49.327>industry <00:07:49.454>will <00:07:49.581>adapt <00:07:49.709>new <00:07:49.836>long <00:07:49.963>life <00:07:50.090>vehicle <00:07:50.218>operating <00:07:50.345>systems <00:07:50.472>and <00:07:50.599>solid

109
00:07:54.460 --> 00:07:58.580
<00:07:54.460>software <00:07:54.635>architecture <00:07:54.810>to <00:07:54.984>master <00:07:55.159>this <00:07:55.335>complexity <00:07:55.510>and <00:07:55.685>do <00:07:55.859>it.

110
00:07:58.580 --> 00:08:01.940
<00:07:58.580>Being <00:07:58.735>able <00:07:58.891>to <00:07:59.046>provide <00:07:59.202>new <00:07:59.357>software <00:07:59.513>releases <00:07:59.668>over <00:07:59.824>many <00:07:59.979>years,

111
00:08:07.440 --> 00:08:08.273
nope,

112
00:08:11.620 --> 00:08:15.760
<00:08:11.620>At <00:08:11.760>the <00:08:11.900>end's <00:08:12.040>responses <00:08:12.180>can <00:08:12.320>be <00:08:12.460>initiated <00:08:12.600>after, <00:08:12.740>uh, <00:08:12.880>for <00:08:13.020>example,

113
00:08:15.760 --> 00:08:20.440
<00:08:15.760>with <00:08:15.900>an <00:08:16.039>over <00:08:16.180>air <00:08:16.320>update <00:08:16.460>updating <00:08:16.599>software <00:08:16.740>many <00:08:16.880>years <00:08:17.020>after <00:08:17.159>the

114
00:08:20.760 --> 00:08:23.400
<00:08:20.760>original <00:08:21.110>development <00:08:21.460>is <00:08:21.810>very <00:08:22.159>challenging.

115
00:08:24.630 --> 00:08:29.070
<00:08:24.630>Forecast <00:08:24.785>security <00:08:24.941>updates <00:08:25.096>are <00:08:25.252>even <00:08:25.407>more <00:08:25.563>important <00:08:25.718>since <00:08:25.874>attacks <00:08:26.030>could,

116
00:08:29.530 --> 00:08:34.140
<00:08:29.530>uh, <00:08:29.685>put <00:08:29.841>diverse <00:08:29.996>or <00:08:30.152>ence <00:08:30.307>or <00:08:30.463>others <00:08:30.618>at <00:08:30.774>risk <00:08:30.929>forecast.

117
00:08:34.500 --> 00:08:38.580
<00:08:34.500>Security <00:08:34.674>updates <00:08:34.850>are <00:08:35.025>becoming <00:08:35.200>aware. <00:08:35.375>Uh, <00:08:35.549>we <00:08:35.725>have <00:08:35.900>to,

118
00:08:38.950 --> 00:08:41.020
<00:08:38.950>after <00:08:39.300>becoming <00:08:39.650>aware <00:08:40.000>about <00:08:40.350>vulnerabilities,

119
00:08:41.400 --> 00:08:44.340
<00:08:41.400>the <00:08:41.600>fix <00:08:41.799>will <00:08:42.000>be <00:08:42.199>provided <00:08:42.400>with <00:08:42.600>software <00:08:42.799>updates.

120
00:08:44.800 --> 00:08:49.380
<00:08:44.800>But <00:08:44.939>depending <00:08:45.079>on <00:08:45.219>the <00:08:45.359>affected <00:08:45.500>car <00:08:45.640>model <00:08:45.780>or <00:08:45.920>the <00:08:46.060>electronic <00:08:46.199>architecture,

121
00:08:50.040 --> 00:08:54.690
<00:08:50.040>the <00:08:50.180>ability <00:08:50.319>to <00:08:50.459>provide <00:08:50.599>software <00:08:50.740>updates <00:08:50.880>over <00:08:51.020>the <00:08:51.160>air <00:08:51.300>require <00:08:51.439>maybe

122
00:08:54.710 --> 00:08:56.240
<00:08:54.710>visits <00:08:55.398>to <00:08:56.087>dealerships.

123
00:09:02.320 --> 00:09:07.270
<00:09:02.320>Automotive <00:09:02.495>security <00:09:02.670>can <00:09:02.845>be <00:09:03.020>divided <00:09:03.195>into <00:09:03.370>two <00:09:03.545>main <00:09:03.720>categories.

124
00:09:08.170 --> 00:09:13.030
<00:09:08.170>Remote <00:09:08.325>attacks <00:09:08.481>have <00:09:08.636>the <00:09:08.792>potential <00:09:08.947>to <00:09:09.103>impact <00:09:09.258>multiple <00:09:09.414>vehicles <00:09:09.569>simultaneously.

125
00:09:13.330 --> 00:09:17.110
<00:09:13.330>For <00:09:13.530>example, <00:09:13.730>via <00:09:13.930>wifi, <00:09:14.130>Bluetooth <00:09:14.330>or <00:09:14.530>mobile <00:09:14.730>networks.

126
00:09:18.380 --> 00:09:23.100
<00:09:18.380>Physical <00:09:18.507>tempering <00:09:18.634>requires <00:09:18.761>an <00:09:18.889>attacker <00:09:19.016>to <00:09:19.143>have <00:09:19.270>direct <00:09:19.398>access <00:09:19.525>to <00:09:19.652>the <00:09:19.780>target

127
00:09:23.100 --> 00:09:26.790
<00:09:23.100>vehicle <00:09:23.380>by <00:09:23.660>seamlessly <00:09:23.940>into <00:09:24.220>connecting <00:09:24.500>users,

128
00:09:26.950 --> 00:09:29.470
<00:09:26.950>vehicles <00:09:27.230>and <00:09:27.510>services <00:09:27.790>over <00:09:28.070>the <00:09:28.350>internet.

129
00:09:30.000 --> 00:09:34.310
<00:09:30.000>Cyber <00:09:30.140>criminals <00:09:30.280>can <00:09:30.420>take <00:09:30.560>control <00:09:30.700>remotely <00:09:30.840>from <00:09:30.980>anywhere <00:09:31.120>on <00:09:31.260>the <00:09:31.400>globe.

130
00:09:41.420 --> 00:09:43.240
<00:09:41.420>In <00:09:41.699>order <00:09:41.979>to <00:09:42.260>address <00:09:42.540>this <00:09:42.819>challenge,

131
00:09:43.920 --> 00:09:46.600
<00:09:43.920>Volkswagen <00:09:44.153>has <00:09:44.386>developed <00:09:44.620>a <00:09:44.853>security <00:09:45.086>technology <00:09:45.319>kit.

132
00:09:47.140 --> 00:09:51.040
<00:09:47.140>The <00:09:47.267>purpose <00:09:47.394>of <00:09:47.521>this <00:09:47.649>kit <00:09:47.776>is <00:09:47.903>to <00:09:48.030>introduce <00:09:48.158>to <00:09:48.285>network <00:09:48.412>vehicle <00:09:48.540>systems,

133
00:09:51.440 --> 00:09:54.200
<00:09:51.440>offering <00:09:51.615>the <00:09:51.790>highest <00:09:51.965>level <00:09:52.140>of <00:09:52.315>protection <00:09:52.490>in <00:09:52.665>the <00:09:52.840>vehicle,

134
00:09:54.200 --> 00:09:58.060
<00:09:54.200>network <00:09:54.433>protection <00:09:54.666>through <00:09:54.900>our <00:09:55.133>authentic <00:09:55.366>can <00:09:55.600>messages,

135
00:09:58.730 --> 00:10:03.460
<00:09:58.730>intrusion <00:09:58.930>detection <00:09:59.130>system, <00:09:59.330>authentic <00:09:59.530>and <00:09:59.730>authorized <00:09:59.930>service, <00:10:00.130>communication,

136
00:10:04.010 --> 00:10:08.620
<00:10:04.010>vehicle <00:10:04.165>key <00:10:04.321>management, <00:10:04.476>provi <00:10:04.632>provisioning, <00:10:04.787>cryptographic <00:10:04.943>keys <00:10:05.098>in <00:10:05.254>the <00:10:05.410>car,

137
00:10:09.620 --> 00:10:12.860
<00:10:09.620>software <00:10:09.795>integrity <00:10:09.970>protection, <00:10:10.145>and <00:10:10.320>flash <00:10:10.495>data <00:10:10.670>security. <00:10:10.845>For <00:10:11.020>example,

138
00:10:13.990 --> 00:10:18.720
<00:10:13.990>many <00:10:14.117>ECUs <00:10:14.244>have <00:10:14.371>already <00:10:14.499>a <00:10:14.626>hardware <00:10:14.753>secure <00:10:14.880>model <00:10:15.008>in <00:10:15.135>which <00:10:15.262>the <00:10:15.390>cryptographic

139
00:10:18.870 --> 00:10:20.760
<00:10:18.870>keys <00:10:19.220>can <00:10:19.570>be <00:10:19.920>stored <00:10:20.270>securely.

140
00:10:22.020 --> 00:10:26.690
<00:10:22.020>These <00:10:22.175>keys <00:10:22.331>are <00:10:22.486>injected <00:10:22.642>during <00:10:22.797>manufacturing <00:10:22.953>through <00:10:23.108>the <00:10:23.264>vehicle <00:10:23.420>key

141
00:10:26.690 --> 00:10:27.523
management

142
00:10:33.230 --> 00:10:37.610
<00:10:33.230>For <00:10:33.370>the <00:10:33.510>communication. <00:10:33.650>The <00:10:33.790>issues <00:10:33.930>are <00:10:34.070>connected <00:10:34.210>via <00:10:34.350>the <00:10:34.490>incar <00:10:34.630>ethernet.

143
00:10:38.600 --> 00:10:43.300
<00:10:38.600>The <00:10:38.755>issue <00:10:38.911>need <00:10:39.066>the <00:10:39.222>issues <00:10:39.377>communicate <00:10:39.533>via <00:10:39.688>with <00:10:39.844>other <00:10:40.000>via

144
00:10:43.620 --> 00:10:46.340
<00:10:43.620>services <00:10:43.775>to <00:10:43.931>show, <00:10:44.086>for <00:10:44.242>example, <00:10:44.397>the <00:10:44.553>distance <00:10:44.708>on <00:10:44.864>the <00:10:45.020>display.

145
00:10:47.660 --> 00:10:51.310
<00:10:47.660>Each <00:10:47.860>issue <00:10:48.060>can <00:10:48.260>provide <00:10:48.459>service <00:10:48.660>and <00:10:48.860>consume <00:10:49.060>services.

146
00:10:52.530 --> 00:10:56.510
<00:10:52.530>The <00:10:52.685>challenge <00:10:52.841>is <00:10:52.996>that <00:10:53.152>an <00:10:53.307>attacker <00:10:53.463>can <00:10:53.618>easily <00:10:53.774>provide <00:10:53.930>new,

147
00:10:56.510 --> 00:10:57.590
<00:10:56.510>arbitrary <00:10:57.482>services,

148
00:10:58.090 --> 00:11:02.710
<00:10:58.090>can <00:10:58.290>use <00:10:58.490>arbitrary <00:10:58.690>services <00:10:58.890>or <00:10:59.090>modify <00:10:59.290>service <00:10:59.490>communication.

149
00:11:04.880 --> 00:11:08.940
<00:11:04.880>For <00:11:05.035>this <00:11:05.191>purpose, <00:11:05.346>we've <00:11:05.502>got <00:11:05.657>the <00:11:05.813>secure <00:11:05.968>service <00:11:06.124>orientated <00:11:06.280>communication.

150
00:11:09.730 --> 00:11:13.980
<00:11:09.730>This <00:11:09.870>adds <00:11:10.010>an <00:11:10.150>additional <00:11:10.290>security <00:11:10.430>layer <00:11:10.570>on <00:11:10.710>the <00:11:10.850>service <00:11:10.990>orientated <00:11:11.130>architecture.

151
00:11:14.960 --> 00:11:17.290
<00:11:14.960>Each <00:11:15.426>application <00:11:15.893>requires <00:11:16.360>a,

152
00:11:17.290 --> 00:11:21.770
<00:11:17.290>so <00:11:17.464>a <00:11:17.640>manifest <00:11:17.814>with <00:11:17.990>co <00:11:18.165>corresponding <00:11:18.339>capabilities, <00:11:18.515>oh, <00:11:18.689>sorry.

153
00:11:24.740 --> 00:11:26.710
<00:11:24.740>Each <00:11:24.973>application <00:11:25.206>requires <00:11:25.440>a <00:11:25.673>sign, <00:11:25.906>so <00:11:26.140>number,

154
00:11:26.710 --> 00:11:30.030
<00:11:26.710>amount <00:11:26.885>of <00:11:27.060>corresponding <00:11:27.235>capabilities, <00:11:27.410>which <00:11:27.585>service <00:11:27.760>can <00:11:27.935>be <00:11:28.110>offered,

155
00:11:30.080 --> 00:11:32.350
<00:11:30.080>which <00:11:30.430>service <00:11:30.780>can <00:11:31.130>be <00:11:31.480>consumed

156
00:11:34.760 --> 00:11:37.870
<00:11:34.760>after <00:11:34.960>the <00:11:35.160>first <00:11:35.360>startup <00:11:35.560>manifest <00:11:35.760>will <00:11:35.960>be <00:11:36.160>exchanged.

157
00:11:37.870 --> 00:11:42.070
<00:11:37.870>And <00:11:37.997>each <00:11:38.124>O <00:11:38.251>C <00:11:38.379>U <00:11:38.506>knows <00:11:38.633>the <00:11:38.760>capabilities <00:11:38.888>of <00:11:39.015>each <00:11:39.142>other. <00:11:39.270>Issues.

158
00:11:43.250 --> 00:11:47.790
<00:11:43.250>The <00:11:43.405>policy <00:11:43.561>enforcer <00:11:43.716>checks <00:11:43.872>allowed <00:11:44.027>connections <00:11:44.183>based <00:11:44.338>on <00:11:44.494>the <00:11:44.650>SOA

159
00:11:48.030 --> 00:11:52.870
<00:11:48.030>manifests <00:11:48.204>and <00:11:48.380>for <00:11:48.555>authentic <00:11:48.730>and <00:11:48.905>confidential <00:11:49.079>communication <00:11:49.255>channels. <00:11:49.430>Also,

160
00:11:53.120 --> 00:11:54.000
<00:11:53.120>t <00:11:53.318>l <00:11:53.516>s <00:11:53.714>is <00:11:53.912>used.

161
00:12:00.920 --> 00:12:05.420
<00:12:00.920>The <00:12:01.047>onboard <00:12:01.174>diagnostic <00:12:01.301>socket <00:12:01.429>is <00:12:01.556>a <00:12:01.683>standard <00:12:01.810>connector <00:12:01.938>used <00:12:02.065>at <00:12:02.192>the <00:12:02.319>workshop.

162
00:12:07.120 --> 00:12:11.740
<00:12:07.120>Access <00:12:07.260>to <00:12:07.400>vehicle <00:12:07.540>repair <00:12:07.680>must <00:12:07.820>be <00:12:07.960>easy <00:12:08.100>for <00:12:08.240>independent <00:12:08.380>repair <00:12:08.520>workshops

163
00:12:12.320 --> 00:12:17.210
<00:12:12.320>to <00:12:12.553>maintain <00:12:12.786>the <00:12:13.020>vehicle. <00:12:13.253>But <00:12:13.486>for <00:12:13.720>example,

164
00:12:18.400 --> 00:12:21.960
<00:12:18.400>O <00:12:18.600>B <00:12:18.800>D <00:12:19.000>consumer <00:12:19.199>devices <00:12:19.400>for <00:12:19.600>vehicle <00:12:19.800>diagnostic

165
00:12:24.940 --> 00:12:29.800
<00:12:24.940>car <00:12:25.067>manufacturers <00:12:25.194>cannot <00:12:25.321>verify <00:12:25.449>the <00:12:25.576>security <00:12:25.703>of <00:12:25.830>O <00:12:25.958>B <00:12:26.085>D <00:12:26.212>devices <00:12:26.340>and

166
00:12:29.800 --> 00:12:32.820
<00:12:29.800>cannot <00:12:30.079>restrict <00:12:30.359>the <00:12:30.640>usage <00:12:30.920>for <00:12:31.199>heer.

167
00:12:32.850 --> 00:12:35.860
<00:12:32.850>This <00:12:33.025>delivers <00:12:33.200>a <00:12:33.375>potential <00:12:33.550>way <00:12:33.725>to <00:12:33.900>manipulate <00:12:34.075>the <00:12:34.250>car.

168
00:12:37.090 --> 00:12:41.770
<00:12:37.090>Criminals <00:12:37.190>may <00:12:37.290>be <00:12:37.390>able <00:12:37.490>to <00:12:37.590>hack <00:12:37.690>commercially <00:12:37.790>available <00:12:37.890>devices <00:12:37.990>on <00:12:38.090>the <00:12:38.190>O <00:12:38.290>B <00:12:38.390>D <00:12:38.490>port.

169
00:12:42.310 --> 00:12:46.090
<00:12:42.310>You <00:12:42.426>can <00:12:42.543>compare <00:12:42.660>this <00:12:42.776>with <00:12:42.893>the <00:12:43.010>U <00:12:43.126>S <00:12:43.243>B <00:12:43.359>device <00:12:43.476>on <00:12:43.593>your <00:12:43.709>laptop.

170
00:12:46.120 --> 00:12:50.850
<00:12:46.120>They <00:12:46.227>also <00:12:46.335>cannot <00:12:46.443>be <00:12:46.550>sure <00:12:46.658>that <00:12:46.766>there's <00:12:46.873>uh, <00:12:46.981>no <00:12:47.089>risk, <00:12:47.196>uh, <00:12:47.304>coming <00:12:47.412>from <00:12:47.520>this.

171
00:12:56.850 --> 00:13:00.470
<00:12:56.850>The <00:12:57.005>connected <00:12:57.161>and <00:12:57.316>software <00:12:57.472>defined <00:12:57.627>vehicle <00:12:57.783>is <00:12:57.938>changing <00:12:58.094>the <00:12:58.250>automotive,

172
00:13:00.470 --> 00:13:04.710
<00:13:00.470>automotive <00:13:00.645>industry <00:13:00.820>and <00:13:00.995>as <00:13:01.170>delivering <00:13:01.345>enhanced <00:13:01.520>experience <00:13:01.695>for <00:13:01.870>drivers.

173
00:13:05.940 --> 00:13:10.670
<00:13:05.940>Traditional <00:13:06.115>electronic <00:13:06.290>architectures <00:13:06.465>are <00:13:06.640>not <00:13:06.815>very <00:13:06.990>suited <00:13:07.165>for <00:13:07.340>software-defined

174
00:13:10.670 --> 00:13:11.503
vehicles.

175
00:13:11.820 --> 00:13:16.630
<00:13:11.820>Each <00:13:11.947>e <00:13:12.074>u <00:13:12.201>is <00:13:12.329>responsible <00:13:12.456>for <00:13:12.583>controlling <00:13:12.710>vehicle <00:13:12.838>functions <00:13:12.965>like <00:13:13.092>door <00:13:13.220>locks

176
00:13:16.850 --> 00:13:19.710
<00:13:16.850>or <00:13:17.083>power <00:13:17.316>steering, <00:13:17.550>and <00:13:17.783>is <00:13:18.016>running <00:13:18.250>independently,

177
00:13:19.710 --> 00:13:23.310
<00:13:19.710>which <00:13:19.850>is <00:13:19.990>wi <00:13:20.130>with <00:13:20.270>its <00:13:20.410>own <00:13:20.550>data <00:13:20.690>connection <00:13:20.830>and <00:13:20.970>software <00:13:21.110>features.

178
00:13:24.480 --> 00:13:25.620
<00:13:24.480>To <00:13:24.822>tackle <00:13:25.164>this <00:13:25.506>challenge,

179
00:13:26.550 --> 00:13:31.340
<00:13:26.550>automotive <00:13:26.705>manufacturers <00:13:26.861>are <00:13:27.016>turning <00:13:27.172>to <00:13:27.327>domain <00:13:27.483>based <00:13:27.638>software <00:13:27.794>and <00:13:27.949>zoneal

180
00:13:31.350 --> 00:13:34.670
<00:13:31.350>electronic <00:13:31.816>architecture <00:13:32.283>solutions. <00:13:32.750>However,

181
00:13:35.520 --> 00:13:39.870
<00:13:35.520>along <00:13:35.660>with <00:13:35.800>these <00:13:35.939>features <00:13:36.079>comes <00:13:36.220>an <00:13:36.360>increase <00:13:36.500>in <00:13:36.640>software <00:13:36.780>and <00:13:36.920>connectivity

182
00:13:39.870 --> 00:13:40.750
vulnerabilities.

183
00:13:43.710 --> 00:13:47.580
<00:13:43.710>Maybe <00:13:43.885>let's <00:13:44.060>have <00:13:44.235>some <00:13:44.410>look <00:13:44.585>on <00:13:44.760>some <00:13:44.935>known <00:13:45.110>vulnerabilities.

184
00:13:51.790 --> 00:13:56.700
<00:13:51.790>Tesla <00:13:51.917>used <00:13:52.044>a <00:13:52.171>keyless <00:13:52.299>entry <00:13:52.426>system <00:13:52.553>with <00:13:52.680>a <00:13:52.808>relative <00:13:52.935>weak <00:13:53.062>encryption <00:13:53.189>for

185
00:13:56.700 --> 00:14:00.500
<00:13:56.700>the <00:13:56.875>locks. <00:13:57.050>The <00:13:57.225>key <00:13:57.400>fob <00:13:57.575>initiates <00:13:57.750>a <00:13:57.925>cryptographic <00:13:58.100>handshake.

186
00:14:00.680 --> 00:14:05.300
<00:14:00.680>The <00:14:00.787>vehicle <00:14:00.895>sends <00:14:01.003>a <00:14:01.110>40 <00:14:01.218>bit <00:14:01.326>challenge <00:14:01.433>message <00:14:01.541>and <00:14:01.649>the <00:14:01.756>key <00:14:01.864>brute <00:14:01.972>price <00:14:02.079>was

187
00:14:05.300 --> 00:14:10.300
<00:14:05.300>24 <00:14:05.455>bit <00:14:05.611>response. <00:14:05.766>Some <00:14:05.922>researchers <00:14:06.077>picked <00:14:06.233>up <00:14:06.388>single <00:14:06.544>cell <00:14:06.699>challenges,

188
00:14:10.780 --> 00:14:12.260
<00:14:10.780>challenged <00:14:11.223>values <00:14:11.668>and <00:14:12.112>responses,

189
00:14:12.680 --> 00:14:17.100
<00:14:12.680>and <00:14:12.773>they <00:14:12.866>were <00:14:12.959>able <00:14:13.053>within <00:14:13.146>a <00:14:13.239>database <00:14:13.333>to <00:14:13.426>generate <00:14:13.520>a <00:14:13.613>key <00:14:13.706>space <00:14:13.800>to <00:14:13.893>brute <00:14:13.986>force <00:14:14.079>the

190
00:14:17.100 --> 00:14:18.660
<00:14:17.100>answer <00:14:17.380>and <00:14:17.660>to <00:14:17.940>hack <00:14:18.220>the <00:14:18.500>key

191
00:14:23.550 --> 00:14:25.890
<00:14:23.550>New <00:14:23.783>York <00:14:24.016>City <00:14:24.250>shoes, <00:14:24.483>Kia <00:14:24.716>and <00:14:24.949>Hyundai,

192
00:14:26.370 --> 00:14:29.370
<00:14:26.370>claiming <00:14:26.525>that <00:14:26.681>the <00:14:26.836>automaker's <00:14:26.992>vehicles <00:14:27.147>are <00:14:27.303>too <00:14:27.458>easy <00:14:27.614>to <00:14:27.770>steer.

193
00:14:30.200 --> 00:14:33.770
<00:14:30.200>This <00:14:30.327>viral <00:14:30.454>cast <00:14:30.581>theft <00:14:30.709>challenge <00:14:30.836>started <00:14:30.963>in <00:14:31.090>the <00:14:31.218>streets <00:14:31.345>of <00:14:31.472>Mill <00:14:31.600>Marky.

194
00:14:34.430 --> 00:14:38.490
<00:14:34.430>It <00:14:34.512>doesn't <00:14:34.594>take <00:14:34.677>much <00:14:34.759>to <00:14:34.841>rip <00:14:34.924>them <00:14:35.006>off. <00:14:35.088>It's <00:14:35.171>just <00:14:35.253>a <00:14:35.335>screwdriver <00:14:35.418>and <00:14:35.500>a <00:14:35.582>U <00:14:35.665>S <00:14:35.747>B <00:14:35.829>cord.

195
00:14:39.210 --> 00:14:39.910
<00:14:39.210>And <00:14:39.420>by <00:14:39.630>the <00:14:39.839>way,

196
00:14:39.910 --> 00:14:44.510
<00:14:39.910>they <00:14:39.987>use <00:14:40.065>the <00:14:40.143>U <00:14:40.221>S <00:14:40.298>B <00:14:40.376>cord <00:14:40.454>as <00:14:40.532>a <00:14:40.610>mechanic <00:14:40.687>device <00:14:40.765>to <00:14:40.843>turn <00:14:40.921>the <00:14:40.998>key <00:14:41.076>not <00:14:41.154>to <00:14:41.232>have <00:14:41.310>any

197
00:14:44.950 --> 00:14:49.690
<00:14:44.950>software <00:14:45.077>on <00:14:45.204>this <00:14:45.331>state <00:14:45.459>of <00:14:45.586>the <00:14:45.713>art <00:14:45.840>is <00:14:45.968>a <00:14:46.095>challenge <00:14:46.222>response <00:14:46.350>functionality

198
00:14:49.950 --> 00:14:51.560
<00:14:49.950>of <00:14:50.416>an <00:14:50.883>immobilizer <00:14:51.350>function.

199
00:14:57.680 --> 00:15:02.170
<00:14:57.680>Experts <00:14:57.819>have <00:14:57.959>uncovered <00:14:58.099>a <00:14:58.239>security <00:14:58.380>vulnera <00:14:58.520>vulnerability <00:14:58.660>that <00:14:58.800>allows <00:14:58.939>to <00:14:59.079>steal

200
00:15:02.170 --> 00:15:06.570
<00:15:02.170>vehicles <00:15:02.325>using <00:15:02.481>can <00:15:02.636>injection <00:15:02.792>method <00:15:02.947>with <00:15:03.103>programming <00:15:03.258>fake <00:15:03.414>key <00:15:03.569>fobs

201
00:15:06.990 --> 00:15:08.570
<00:15:06.990>to <00:15:07.456>emergency <00:15:07.923>start <00:15:08.390>devices.

202
00:15:09.510 --> 00:15:14.250
<00:15:09.510>The <00:15:09.626>interesting <00:15:09.743>here <00:15:09.860>is <00:15:09.976>that <00:15:10.093>the <00:15:10.210>heck <00:15:10.326>is <00:15:10.443>defined <00:15:10.560>as <00:15:10.676>a <00:15:10.793>emergency <00:15:10.910>start

203
00:15:14.250 --> 00:15:18.050
<00:15:14.250>device <00:15:14.405>and <00:15:14.561>it's <00:15:14.716>included <00:15:14.872>in <00:15:15.027>some <00:15:15.183>J <00:15:15.338>B <00:15:15.494>A <00:15:15.650>loudspeaker,

204
00:15:18.050 --> 00:15:22.460
<00:15:18.050>but <00:15:18.189>with <00:15:18.329>a <00:15:18.469>different <00:15:18.609>electronic <00:15:18.750>inside. <00:15:18.890>Some <00:15:19.030>R <00:15:19.170>four <00:15:19.310>was <00:15:19.449>stolen,

205
00:15:22.600 --> 00:15:24.300
<00:15:22.600>was <00:15:23.066>stolen <00:15:23.533>in <00:15:24.000>21,

206
00:15:24.920 --> 00:15:27.780
<00:15:24.920>and <00:15:25.094>they <00:15:25.270>suffered <00:15:25.444>suspicious <00:15:25.620>damage <00:15:25.795>on <00:15:25.969>its <00:15:26.145>satellite <00:15:26.319>housing.

207
00:15:27.800 --> 00:15:31.680
<00:15:27.800>And <00:15:27.927>in <00:15:28.054>the <00:15:28.181>front <00:15:28.309>wing <00:15:28.436>through <00:15:28.563>this <00:15:28.690>damage <00:15:28.818>in <00:15:28.945>the <00:15:29.072>front <00:15:29.199>wing,

208
00:15:32.500 --> 00:15:37.240
<00:15:32.500>the <00:15:32.616>hackers <00:15:32.733>get <00:15:32.850>access <00:15:32.966>to <00:15:33.083>the <00:15:33.200>in-vehicle <00:15:33.316>network <00:15:33.433>and <00:15:33.550>they <00:15:33.666>were <00:15:33.783>able <00:15:33.900>to

209
00:15:37.340 --> 00:15:42.000
<00:15:37.340>pro <00:15:37.467>program <00:15:37.594>new <00:15:37.721>key <00:15:37.849>fobs <00:15:37.976>into <00:15:38.103>the <00:15:38.230>car <00:15:38.358>as <00:15:38.485>an <00:15:38.612>emergency <00:15:38.740>start

210
00:15:42.000 --> 00:15:42.833
devices.

211
00:15:47.000 --> 00:15:51.530
<00:15:47.000>But <00:15:47.155>definitely <00:15:47.311>also <00:15:47.466>Volkswagen <00:15:47.622>is, <00:15:47.777>uh, <00:15:47.933>has <00:15:48.088>got <00:15:48.244>some <00:15:48.400>hack,

212
00:15:52.600 --> 00:15:54.980
<00:15:52.600>uh, <00:15:52.833>vulnerability <00:15:53.066>was <00:15:53.300>discovered <00:15:53.533>in <00:15:53.766>the <00:15:54.000>script.

213
00:15:54.980 --> 00:15:59.020
<00:15:54.980>This <00:15:55.096>is <00:15:55.213>responsible <00:15:55.330>for <00:15:55.446>updating <00:15:55.563>the <00:15:55.680>software <00:15:55.796>in <00:15:55.913>the <00:15:56.030>guest <00:15:56.146>operating <00:15:56.263>system <00:15:56.380>of

214
00:15:59.020 --> 00:16:01.100
<00:15:59.020>this <00:15:59.486>infotainment <00:15:59.953>uh, <00:16:00.420>module.

215
00:16:01.400 --> 00:16:06.100
<00:16:01.400>The <00:16:01.555>vulnerability <00:16:01.711>is <00:16:01.866>alo <00:16:02.022>exploitable <00:16:02.177>with <00:16:02.333>root <00:16:02.488>privilege <00:16:02.644>and <00:16:02.800>allows

216
00:16:06.170 --> 00:16:10.100
<00:16:06.170>arbitrary <00:16:06.310>code <00:16:06.449>execution <00:16:06.589>in <00:16:06.729>the <00:16:06.870>guest <00:16:07.010>operating <00:16:07.150>system <00:16:07.290>of <00:16:07.430>the <00:16:07.569>entertainment

217
00:16:10.100 --> 00:16:11.420
<00:16:10.100>module <00:16:10.496>of <00:16:10.891>this <00:16:11.288>car.

218
00:16:18.050 --> 00:16:22.230
<00:16:18.050>And <00:16:18.250>2021 <00:16:18.449>remote <00:16:18.650>keyless <00:16:18.849>vehicle <00:16:19.050>thefts <00:16:19.250>accounting <00:16:19.449>for

219
00:16:22.470 --> 00:16:27.110
<00:16:22.470>18% <00:16:22.625>of <00:16:22.781>total <00:16:22.936>incidents <00:16:23.092>and <00:16:23.247>are <00:16:23.403>easy <00:16:23.558>to <00:16:23.714>carry <00:16:23.870>out,

220
00:16:27.520 --> 00:16:31.550
<00:16:27.520>often <00:16:27.647>leaving <00:16:27.774>the <00:16:27.901>police <00:16:28.029>and <00:16:28.156>the <00:16:28.283>insurance, <00:16:28.410>uh, <00:16:28.538>completely <00:16:28.665>in <00:16:28.792>the <00:16:28.920>dark.

221
00:16:34.860 --> 00:16:37.230
<00:16:34.860>Step <00:16:35.060>one, <00:16:35.260>a <00:16:35.460>thief <00:16:35.660>stands <00:16:35.860>near <00:16:36.060>the <00:16:36.260>vehicle,

222
00:16:37.870 --> 00:16:39.950
<00:16:37.870>transmitting <00:16:38.150>a <00:16:38.430>signal <00:16:38.710>to <00:16:38.990>another <00:16:39.270>thief,

223
00:16:39.950 --> 00:16:43.230
<00:16:39.950>which <00:16:40.090>is <00:16:40.230>on <00:16:40.370>the <00:16:40.510>owner's <00:16:40.650>house <00:16:40.790>with <00:16:40.930>a <00:16:41.070>second <00:16:41.210>hacking <00:16:41.350>device.

224
00:16:44.840 --> 00:16:49.490
<00:16:44.840>Then <00:16:44.956>step <00:16:45.073>two <00:16:45.190>next <00:16:45.306>to <00:16:45.423>the <00:16:45.540>house. <00:16:45.656>The <00:16:45.773>other <00:16:45.890>thief <00:16:46.006>holds <00:16:46.123>a <00:16:46.240>device

225
00:16:51.110 --> 00:16:53.810
<00:16:51.110>and <00:16:51.250>tries <00:16:51.390>to <00:16:51.530>lock <00:16:51.670>on <00:16:51.810>the <00:16:51.950>signal <00:16:52.090>of <00:16:52.230>the <00:16:52.370>owner's <00:16:52.510>key,

226
00:16:53.900 --> 00:16:55.370
<00:16:53.900>which <00:16:54.164>is <00:16:54.429>located <00:16:54.693>in <00:16:54.958>the <00:16:55.223>house.

227
00:16:56.330 --> 00:17:01.100
<00:16:56.330>Once <00:16:56.457>locked <00:16:56.584>on <00:16:56.711>this <00:16:56.839>signal <00:16:56.966>it <00:16:57.093>release <00:16:57.220>back <00:16:57.348>to <00:16:57.475>the <00:16:57.602>first <00:16:57.730>C

228
00:17:01.920 --> 00:17:05.260
<00:17:01.920>and <00:17:02.075>transmit <00:17:02.231>the <00:17:02.386>signal <00:17:02.542>from <00:17:02.697>the <00:17:02.853>key <00:17:03.008>to <00:17:03.164>the <00:17:03.319>car.

229
00:17:10.450 --> 00:17:14.870
<00:17:10.450>And <00:17:10.550>the <00:17:10.650>last <00:17:10.750>step <00:17:10.850>is <00:17:10.950>using <00:17:11.050>this <00:17:11.150>relay <00:17:11.250>signal, <00:17:11.350>the <00:17:11.450>C <00:17:11.550>can <00:17:11.650>unlock <00:17:11.750>the <00:17:11.850>car,

230
00:17:14.960 --> 00:17:16.990
<00:17:14.960>start <00:17:15.240>the <00:17:15.520>engine, <00:17:15.800>and <00:17:16.079>drive <00:17:16.360>off.

231
00:17:23.050 --> 00:17:25.820
<00:17:23.050>Ultra <00:17:23.516>wideband <00:17:23.983>provides <00:17:24.450>precise,

232
00:17:25.960 --> 00:17:30.180
<00:17:25.960>secure <00:17:26.067>and <00:17:26.175>real-time <00:17:26.283>local <00:17:26.390>localization <00:17:26.498>for <00:17:26.606>the <00:17:26.713>remote <00:17:26.821>keys <00:17:26.929>and <00:17:27.036>puts <00:17:27.144>an <00:17:27.252>end <00:17:27.360>to

233
00:17:30.180 --> 00:17:31.140
<00:17:30.180>this <00:17:30.612>relay <00:17:31.044>attack.

234
00:17:31.970 --> 00:17:36.390
<00:17:31.970>New <00:17:32.086>car <00:17:32.203>models <00:17:32.320>are <00:17:32.436>using <00:17:32.553>ultra <00:17:32.670>wideband <00:17:32.786>to <00:17:32.903>measure <00:17:33.020>the <00:17:33.136>distance <00:17:33.253>between <00:17:33.370>two

235
00:17:36.390 --> 00:17:39.670
<00:17:36.390>radio <00:17:36.545>transceivers <00:17:36.701>by <00:17:36.856>the <00:17:37.012>time <00:17:37.167>of <00:17:37.323>flight <00:17:37.478>of <00:17:37.634>the <00:17:37.790>signal.

236
00:17:46.600 --> 00:17:47.433
<00:17:46.600>As <00:17:46.974>the <00:17:47.349>conclusion,

237
00:17:47.930 --> 00:17:52.800
<00:17:47.930>cybersecurity <00:17:48.070>has <00:17:48.210>already <00:17:48.350>gained <00:17:48.490>the <00:17:48.630>attention <00:17:48.770>of <00:17:48.910>automotive <00:17:49.050>companies <00:17:49.190>and <00:17:49.330>will

238
00:17:52.800 --> 00:17:54.120
<00:17:52.800>trigger <00:17:53.196>a <00:17:53.591>paradigm <00:17:53.987>shift.

239
00:17:55.410 --> 00:18:00.050
<00:17:55.410>Companies <00:17:55.537>need <00:17:55.664>to <00:17:55.791>start <00:17:55.919>and <00:17:56.046>to <00:17:56.173>manage <00:17:56.300>cybersecurity <00:17:56.428>risks <00:17:56.555>and <00:17:56.682>become <00:17:56.810>compliant

240
00:18:00.050 --> 00:18:04.250
<00:18:00.050>with <00:18:00.177>the <00:18:00.304>U <00:18:00.431>N <00:18:00.559>E <00:18:00.686>C <00:18:00.813>regulations <00:18:00.940>on <00:18:01.068>cybersecurity <00:18:01.195>and <00:18:01.322>software <00:18:01.450>update.

241
00:18:06.240 --> 00:18:10.770
<00:18:06.240>This <00:18:06.415>requires <00:18:06.590>a <00:18:06.765>rethinking <00:18:06.940>of <00:18:07.115>cybersecurity <00:18:07.290>and <00:18:07.465>new <00:18:07.640>working

242
00:18:11.210 --> 00:18:12.690
<00:18:11.210>practices <00:18:11.543>along <00:18:11.876>the <00:18:12.209>value <00:18:12.542>chain.

243
00:18:13.590 --> 00:18:18.490
<00:18:13.590>Cybersecurity <00:18:13.745>will <00:18:13.901>become <00:18:14.056>important <00:18:14.212>in <00:18:14.367>the <00:18:14.523>long <00:18:14.678>run <00:18:14.834>in <00:18:14.990>order

244
00:18:18.550 --> 00:18:21.530
<00:18:18.550>to <00:18:18.830>excel <00:18:19.110>the <00:18:19.389>cybersecurity <00:18:19.669>new <00:18:19.950>processes,

245
00:18:21.530 --> 00:18:25.650
<00:18:21.530>skills <00:18:21.670>and <00:18:21.810>working <00:18:21.950>practices <00:18:22.090>along <00:18:22.230>the <00:18:22.370>value <00:18:22.510>chain <00:18:22.649>will <00:18:22.790>be <00:18:22.930>required.

246
00:18:27.360 --> 00:18:30.490
<00:18:27.360>This <00:18:27.709>includes <00:18:28.060>identifying <00:18:28.409>cyber <00:18:28.760>securist,

247
00:18:31.040 --> 00:18:32.810
<00:18:31.040>designing <00:18:31.740>secure <00:18:32.440>software,

248
00:18:33.080 --> 00:18:36.210
<00:18:33.080>designing <00:18:33.429>secure <00:18:33.780>hardware <00:18:34.129>and <00:18:34.480>architectures,

249
00:18:36.550 --> 00:18:39.450
<00:18:36.550>and <00:18:36.750>developing <00:18:36.950>and <00:18:37.149>testing <00:18:37.350>secure <00:18:37.550>code <00:18:37.750>and <00:18:37.950>chips,

250
00:18:40.250 --> 00:18:44.050
<00:18:40.250>ensuring <00:18:40.425>that <00:18:40.600>issues <00:18:40.775>can <00:18:40.950>be <00:18:41.125>fixed <00:18:41.300>even <00:18:41.475>years, <00:18:41.650>uh,

251
00:18:44.200 --> 00:18:47.930
<00:18:44.200>even <00:18:44.433>years <00:18:44.666>later <00:18:44.900>via <00:18:45.133>and <00:18:45.366>software <00:18:45.600>update.

252
00:18:51.640 --> 00:18:52.473
<00:18:51.640>Thank <00:18:52.389>you.

253
00:19:07.190 --> 00:19:08.023
So

254
00:19:10.330 --> 00:19:14.870
<00:19:10.330>we <00:19:10.457>have <00:19:10.584>a <00:19:10.711>co <00:19:10.839>a <00:19:10.966>couple <00:19:11.093>of <00:19:11.220>questions <00:19:11.348>that <00:19:11.475>we <00:19:11.602>can <00:19:11.730>approach.

255
00:19:15.090 --> 00:19:19.910
<00:19:15.090>One <00:19:15.245>will <00:19:15.401>be <00:19:15.556>will <00:19:15.712>field <00:19:15.867>bus <00:19:16.023>system, <00:19:16.178>like <00:19:16.334>can <00:19:16.490>Lean,

256
00:19:20.260 --> 00:19:24.110
<00:19:20.260>FlexRay, <00:19:20.376>et <00:19:20.493>cetera, <00:19:20.610>still <00:19:20.726>be <00:19:20.843>a <00:19:20.960>thing <00:19:21.076>in <00:19:21.193>your <00:19:21.310>cars? <00:19:21.426>And <00:19:21.543>if <00:19:21.660>so,

257
00:19:24.490 --> 00:19:25.710
<00:19:24.490>how <00:19:24.856>are <00:19:25.222>they <00:19:25.588>secured?

258
00:19:26.460 --> 00:19:29.750
<00:19:26.460>Yeah, <00:19:26.600>we, <00:19:26.740>we <00:19:26.880>have, <00:19:27.020>uh, <00:19:27.160>security <00:19:27.300>solutions <00:19:27.440>for <00:19:27.580>the <00:19:27.720>CAN <00:19:27.860>bus.

259
00:19:30.100 --> 00:19:33.950
<00:19:30.100>It's <00:19:30.255>the <00:19:30.411>called <00:19:30.566>as <00:19:30.722>a <00:19:30.877>SEC <00:19:31.033>C, <00:19:31.188>the <00:19:31.344>secure, <00:19:31.500>uh,

260
00:19:34.230 --> 00:19:36.870
<00:19:34.230>communication <00:19:34.463>on <00:19:34.696>can <00:19:34.930>for <00:19:35.163>line <00:19:35.396>not <00:19:35.630>available,

261
00:19:37.010 --> 00:19:41.350
<00:19:37.010>but <00:19:37.165>we <00:19:37.321>will <00:19:37.476>switch <00:19:37.632>due <00:19:37.787>to <00:19:37.943>higher <00:19:38.098>bandwidth <00:19:38.254>requirements. <00:19:38.410>Uh,

262
00:19:41.420 --> 00:19:45.270
<00:19:41.420>soon <00:19:41.547>on <00:19:41.674>we <00:19:41.801>have <00:19:41.929>it <00:19:42.056>also <00:19:42.183>in <00:19:42.310>we <00:19:42.438>will <00:19:42.565>switch <00:19:42.692>to <00:19:42.820>ethernet.

263
00:19:45.370 --> 00:19:48.830
<00:19:45.370>So <00:19:45.477>we <00:19:45.585>will <00:19:45.693>have <00:19:45.800>in <00:19:45.908>the <00:19:46.016>future <00:19:46.123>ethernet <00:19:46.231>and <00:19:46.339>can <00:19:46.446>communication <00:19:46.554>in <00:19:46.662>the <00:19:46.770>car.

264
00:19:49.770 --> 00:19:51.710
<00:19:49.770>And <00:19:50.050>this <00:19:50.330>will <00:19:50.610>definitely <00:19:50.889>also <00:19:51.170>secured.

265
00:19:52.810 --> 00:19:57.750
<00:19:52.810>Can <00:19:52.937>you <00:19:53.064>comment <00:19:53.191>on <00:19:53.319>whether <00:19:53.446>the <00:19:53.573>infrastructure <00:19:53.700>and <00:19:53.828>interfaces <00:19:53.955>from <00:19:54.082>setting <00:19:54.210>up

266
00:19:57.810 --> 00:20:02.150
<00:19:57.810>the <00:19:57.937>SS <00:19:58.064>s <00:19:58.191>o <00:19:58.319>A <00:19:58.446>are <00:19:58.573>implemented <00:19:58.700>in-house <00:19:58.828>or <00:19:58.955>based <00:19:59.082>on <00:19:59.210>external

267
00:20:02.150 --> 00:20:04.030
<00:20:02.150>potentially <00:20:02.616>open <00:20:03.083>source <00:20:03.550>approaches?

268
00:20:04.820 --> 00:20:05.110
Yeah,

269
00:20:05.110 --> 00:20:09.830
<00:20:05.110>definitely <00:20:05.226>for <00:20:05.343>this <00:20:05.459>service <00:20:05.576>communication <00:20:05.693>we <00:20:05.810>are <00:20:05.926>very <00:20:06.043>close <00:20:06.159>to <00:20:06.276>the <00:20:06.393>Auto <00:20:06.510>Z,

270
00:20:09.830 --> 00:20:13.550
<00:20:09.830>the <00:20:09.970>auto <00:20:10.110>z, <00:20:10.250>a <00:20:10.389>common <00:20:10.530>standard <00:20:10.669>and <00:20:10.810>auto <00:20:10.949>automotive, <00:20:11.090>uh, <00:20:11.230>industry.

271
00:20:14.330 --> 00:20:18.670
<00:20:14.330>And <00:20:14.423>we <00:20:14.516>put <00:20:14.610>the <00:20:14.703>secure <00:20:14.796>ZOA <00:20:14.889>on <00:20:14.983>top <00:20:15.076>on <00:20:15.169>of <00:20:15.263>this <00:20:15.356>because <00:20:15.449>there <00:20:15.543>were <00:20:15.636>some <00:20:15.730>missing

272
00:20:19.190 --> 00:20:23.310
<00:20:19.190>elements <00:20:19.317>for <00:20:19.444>securing <00:20:19.571>the <00:20:19.699>service <00:20:19.826>communications <00:20:19.953>for <00:20:20.080>this. <00:20:20.208>We <00:20:20.335>did <00:20:20.462>it <00:20:20.590>in-house,

273
00:20:23.650 --> 00:20:27.790
<00:20:23.650>but <00:20:23.850>definitely, <00:20:24.050>um, <00:20:24.250>if, <00:20:24.450>uh, <00:20:24.650>standard <00:20:24.850>is <00:20:25.050>available,

274
00:20:27.800 --> 00:20:31.510
<00:20:27.800>definitely <00:20:27.927>we'll <00:20:28.054>use <00:20:28.181>the <00:20:28.309>standards <00:20:28.436>and <00:20:28.563>not <00:20:28.690>develop <00:20:28.818>something <00:20:28.945>on <00:20:29.072>our <00:20:29.200>own.

275
00:20:33.590 --> 00:20:35.480
<00:20:33.590>What <00:20:33.790>if <00:20:33.990>the <00:20:34.189>car <00:20:34.389>is <00:20:34.590>in <00:20:34.790>a <00:20:34.990>fifth,

276
00:20:35.550 --> 00:20:40.320
<00:20:35.550>five <00:20:35.677>meter <00:20:35.804>thin <00:20:35.931>block <00:20:36.059>of <00:20:36.186>aluminum <00:20:36.313>so <00:20:36.440>no <00:20:36.568>signal <00:20:36.695>can <00:20:36.822>enter <00:20:36.950>or

277
00:20:40.320 --> 00:20:41.153
<00:20:40.320>leave <00:20:40.694>the <00:20:41.069>car?

278
00:20:44.310 --> 00:20:46.170
<00:20:44.310>The <00:20:45.710>uh,

279
00:20:49.050 --> 00:20:52.830
<00:20:49.050>Oh, <00:20:49.157>then, <00:20:49.265>then <00:20:49.373>definitely <00:20:49.480>you <00:20:49.588>can <00:20:49.696>also <00:20:49.803>use <00:20:49.911>the <00:20:50.019>car <00:20:50.126>with <00:20:50.234>any <00:20:50.342>re <00:20:50.450>uh,

280
00:20:52.890 --> 00:20:53.870
<00:20:52.890>remote <00:20:53.772>connection.

281
00:20:53.930 --> 00:20:57.790
<00:20:53.930>So <00:20:54.023>I <00:20:54.116>think <00:20:54.210>that <00:20:54.303>this <00:20:54.396>will <00:20:54.490>be <00:20:54.583>definitely <00:20:54.676>also <00:20:54.770>in <00:20:54.863>the <00:20:54.956>future <00:20:55.050>that <00:20:55.143>you <00:20:55.236>can <00:20:55.330>drive

282
00:20:57.810 --> 00:20:59.430
<00:20:57.810>the <00:20:58.043>car, <00:20:58.276>you <00:20:58.510>can <00:20:58.743>access <00:20:58.976>the <00:20:59.210>car,

283
00:20:59.430 --> 00:21:02.590
<00:20:59.430>you <00:20:59.570>can <00:20:59.710>open <00:20:59.850>the <00:20:59.990>car <00:21:00.130>even <00:21:00.270>if <00:21:00.410>it's <00:21:00.550>not <00:21:00.690>online <00:21:00.830>and,

284
00:21:02.690 --> 00:21:05.990
<00:21:02.690>and <00:21:02.830>if <00:21:02.970>it's <00:21:03.110>maybe <00:21:03.250>somewhere <00:21:03.390>in <00:21:03.530>the <00:21:03.670>parking <00:21:03.810>garage <00:21:03.950>or <00:21:04.090>something.

285
00:21:06.050 --> 00:21:10.230
<00:21:06.050>So <00:21:06.149>if <00:21:06.250>this <00:21:06.350>is <00:21:06.450>the, <00:21:06.550>the, <00:21:06.649>the <00:21:06.750>question <00:21:06.850>and <00:21:06.950>definitely <00:21:07.050>if, <00:21:07.149>if <00:21:07.250>you <00:21:07.350>want <00:21:07.450>to,

286
00:21:10.290 --> 00:21:13.990
<00:21:10.290>to <00:21:10.465>track <00:21:10.639>or <00:21:10.815>to <00:21:10.990>secure <00:21:11.165>the <00:21:11.340>car, <00:21:11.514>it's <00:21:11.690>uh,

287
00:21:14.570 --> 00:21:17.870
<00:21:14.570>and <00:21:14.686>you <00:21:14.803>need <00:21:14.919>an <00:21:15.036>online <00:21:15.153>connection, <00:21:15.270>then <00:21:15.386>it's <00:21:15.503>definitely <00:21:15.620>a <00:21:15.736>a <00:21:15.853>risk. <00:21:15.970>Yeah.

288
00:21:18.490 --> 00:21:23.070
<00:21:18.490>Do <00:21:18.630>we <00:21:18.770>still <00:21:18.910>need <00:21:19.050>isolated <00:21:19.190>E <00:21:19.330>C <00:21:19.470>U <00:21:19.610>bus <00:21:19.750>domain <00:21:19.890>infotainment

289
00:21:23.630 --> 00:21:28.270
<00:21:23.630>steering <00:21:23.730>in <00:21:23.830>future <00:21:23.930>or <00:21:24.030>do <00:21:24.130>we <00:21:24.230>expect <00:21:24.330>a <00:21:24.430>unified <00:21:24.530>architecture <00:21:24.630>with <00:21:24.730>fewer <00:21:24.830>A <00:21:24.930>C <00:21:25.030>U

290
00:21:28.600 --> 00:21:31.310
<00:21:28.600>based <00:21:28.879>on <00:21:29.159>a <00:21:29.439>strong <00:21:29.719>cryptography <00:21:30.000>communication?

291
00:21:31.890 --> 00:21:36.430
<00:21:31.890>Yes, <00:21:32.017>de <00:21:32.144>definitely <00:21:32.271>we <00:21:32.399>have <00:21:32.526>good <00:21:32.653>results <00:21:32.780>by <00:21:32.908>separating <00:21:33.035>different <00:21:33.162>domains <00:21:33.290>with

292
00:21:36.430 --> 00:21:37.263
<00:21:36.430>different <00:21:37.179>risks.

293
00:21:37.290 --> 00:21:42.230
<00:21:37.290>So <00:21:37.406>to <00:21:37.523>have <00:21:37.639>a <00:21:37.756>infotainment <00:21:37.873>domain <00:21:37.990>separate <00:21:38.106>with <00:21:38.223>separated <00:21:38.340>from <00:21:38.456>the <00:21:38.573>domain <00:21:38.690>of

294
00:21:42.230 --> 00:21:46.950
<00:21:42.230>driving <00:21:42.405>to <00:21:42.580>be <00:21:42.755>secure <00:21:42.930>that <00:21:43.105>no <00:21:43.280>infotainment <00:21:43.455>unit <00:21:43.630>can

295
00:21:47.100 --> 00:21:51.590
<00:21:47.100>take <00:21:47.240>control <00:21:47.379>about, <00:21:47.520>uh, <00:21:47.659>the, <00:21:47.800>the <00:21:47.939>driver <00:21:48.080>assistance <00:21:48.219>or <00:21:48.360>the <00:21:48.500>steering.

296
00:21:52.370 --> 00:21:55.750
<00:21:52.370>And <00:21:52.497>also <00:21:52.624>in <00:21:52.751>the <00:21:52.879>future <00:21:53.006>we <00:21:53.133>will <00:21:53.260>have, <00:21:53.388>for <00:21:53.515>example, <00:21:53.642>on <00:21:53.770>uh,

297
00:21:55.830 --> 00:22:00.550
<00:21:55.830>ethernet <00:21:55.957>virtual <00:21:56.084>networks <00:21:56.211>so <00:21:56.339>that <00:21:56.466>we <00:21:56.593>have <00:21:56.720>built <00:21:56.848>domains <00:21:56.975>and <00:21:57.102>gateways <00:21:57.230>still

298
00:22:00.970 --> 00:22:01.803
<00:22:00.970>to <00:22:01.344>separate <00:22:01.719>the,

299
00:22:01.890 --> 00:22:05.430
<00:22:01.890>the <00:22:02.017>domains <00:22:02.144>are <00:22:02.271>still <00:22:02.399>one <00:22:02.526>of <00:22:02.653>the <00:22:02.780>protective <00:22:02.908>measures <00:22:03.035>we <00:22:03.162>have <00:22:03.290>here.

300
00:22:05.520 --> 00:22:08.550
<00:22:05.520>These <00:22:05.647>are <00:22:05.774>all <00:22:05.901>the <00:22:06.029>questions <00:22:06.156>that <00:22:06.283>we <00:22:06.410>had. <00:22:06.538>Thank <00:22:06.665>you <00:22:06.792>very <00:22:06.920>much.