One of the biggest objections to driverless cars is the idea that hackers will be able to break into them and cause crashes.
Asides from the obvious riposte – what motivation would drive enough people to make this a real ongoing issue? – it is the sort of thing that people are scared of, so the fear needs to be dealt with.
Apparently auto-makers aren’t really up to snuff when it comes to protecting against hacks:
It’s scary business. Security experts say that automakers have so far failed to adequately protect these systems, leaving them vulnerable to hacks by attackers looking to steal cars, eavesdrop on conversations, or even harm passengers by causing vehicles to crash.
“You can definitely kill people,” said John Bumgarner, chief technology officer of the U.S. Cyber Consequences Unit, a non-profit organization that helps companies analyze the potential for targeted computer attacks on their networks and products.
Bruce Snell, a McAfee executive who oversees his company’s research on car security at the Beaverton, Oregon garage, said automakers are fairly concerned about the potential cyber attacks because of the frightening repercussions.
“If your laptop crashes you’ll have a bad day, but if your car crashes that could be life threatening,” he said. “I don’t think people need to panic now. But the future is really scary.”
This paragraph is scary:
For instance, they came up with a combination attack dubbed “Self Destruct”. It starts when a 60-second timer pops up on a car’s digital dashboard and starts counting down. When it reaches zero the virus can simultaneously shut off the car’s lights, lock its doors, kill the engine and release or slam on the brakes.
One motivated person is enough to cause these issues. That being said, the flaws have been known for years in many current cars yet car hacking incidents seem to be incredibly rare.
For me, the most obvious protection against these types of attacks is to have the car completely disconnected from any particular inputs, most especially such as V2V which is going to be incredibly vulnerable unless the system is designed by some of the world’s best computer security experts.
The above attack was launchable through the cd player. Why would you have a cd player and the brakes using the same computer system?? This seems like madness. I would have the entertainment and car control systems completely separated.
It’s impossible to completely blind the car to all inputs, however. If you want to tell the car where you want to go, you’re going to have to put that information in somehow.
An interesting challenge for Google and friends. Google, it should be noted, has had a fantastic history in terms of their own data security. They are obviously stacked with experts in this and their technological base should give them a huge advance on other OEMs in this area.
Thanks Paul Godsmark for sending this in.