On January 13 the EU Agency for Network and Information Security (ENISA) published the study “Cyber security and the resilience of smart cars”, which identifies good practices and recommendations to ensure the security of smart cars against cyber threats.
The objective of the study was to identify good practices that ensure the security of smart cars against cyber threats, highlighting that smart cars’ security shall also guarantee safety.
- Recall of 1.4 million Chrysler vehicles in the US ‘just the beginning’ for cyber security dangers for vehicles on the road
- NXP and NTU Singapore launch ‘Smart Mobility Test Bed’ to accelerate the introduction of life-saving vehicle communications
- How The Cloud Will Transform Cars Into Smart Devices
The study lists the sensitive assets present in smart cars, as well as the corresponding threats, risks, mitigation factors and possible security measures to implement.
The impact of smart car cyber-attacks has far-reaching consequences in terms of safety. The risk to the driver, their passengers and other users of the road makes it a matter of national and European interest. For this purpose, the following recommendations have been developed:
Recommendations for smart car manufacturers, tiers and aftermarket vendors:
- Improve cyber security in smart cars
- Improve information sharing amongst industry actors
- Improve exchanges with security researchers and third parties
Recommendation for smart car manufacturers, tiers, aftermarket vendors and insurance companies:
- Clarify liability among industry actors
Recommendation for industry groups and associations:
- Achieve consensus on technical standards for good practices
- Define an independent third-party evaluation scheme
Recommendation for industry groups and associations and security companies:
- Build tools for security analysis
ENISA’s future work in the field aims to enhance the security and resilience of road transport in Europe together with all relevant key stakeholders and agencies.
ENISA is assisting EU Member States and the European Commission by providing expertise and advice, as well as developing and facilitating the exchange of good practices, with the ultimate goal of enabling higher levels of security for Europe’s road transport infrastructure.