+ Publier publicitaire GRATUIT !
Stats d'annonce: Dernier 24h - 59, actuel - 989, total - 105750

Risk of Cyber-Threats May Increase as Cars Load up on Computers, Active Controls

14 Septembre 2014 - Autoblog

Risk of Cyber-Threats May Increase as Cars Load up on Computers, Active Controls

Features in many new cars that are widely seen as the first steps toward a self-driving future may also making cars more susceptible to cyber crime, according to a recent study.

New technologies like park assist, adaptive cruise control and collision prevention are some of the first to hold an active role in driving. But because these features are specifically designed to, at times, exert control over a vehicle, it may be easier for hackers to write codes that carry nefarious intent, a first-of-its-kind study recently found.

"Attacks are likely easier in their presence than in their absence," wrote Chris Valasek and Dr. Charlie Miller, the authors of the report, A Survey Of Remote Automotive Attack Surfaces.

There's been no documented cyber attack on an automobile in the United States. But as automakers have rushed in recent years to add software that essentially turns cars into mobile computers, the industry and federal regulators have paid more attention to the potential consequences of a vehicular security breach. On Tuesday, David Friedman, administrator of the National Highway Traffic Safety Administration, asked automakers to collaborate on ways to thwart cyber threats.

Valasek and Miller, who presented their study last month at a convention of hackers, security analysts and researchers in Las Vegas, NV, offer the first public look at the underpinnings of the network architectures that govern how all these new components are connected.

Their conclusions on 21 individual vehicles are interesting on their own merits; indeed, lists of "most hackable" and "least hackable" cars spawned the initial wave of headlines sparked by the study. What's more notable, in retrospect, is its overall undercurrent. In response to consumer demand for infotainment and advanced safety features alike, automakers are adding software and computer components to cars at a rapid pace. At least for now, much of this technology leaves more questions than answers.

 

 

"Transparency in the auto industry isn't that great," said Valasek, who paired with Miller (both interviewed in the video above) on earlier research in which they demonstrated how to manipulate critical control functions on a Ford Escape and Toyota Prius. "It's still, 'Let's keep this a secret.' ... When we originally did it, it was, 'Don't worry, we have super-secret stuff to protect you.' Right now, we get the impression that they (automakers) may be working on it."

Valasek is the director of vehicle security research at IOActive, a computer security company. Miller is a former National Security Administration computer security researcher who now works for Twitter.

In their previous research, the pair had a physical connection to the two cars, and sat in the rear seats while they manipulated brakes, steering and throttle inputs. Their current research is significantly different, Valasek emphasized, in that they didn't physically examine the cars; they conducted an overview of the networks based on mechanic's information collected from each manufacturer. They chose the cars involved in the recent study, in part, depending on whether they had access to that information.

Automakers have routinely been tight-lipped about their efforts to address cyber threats. Chrysler executives, whose 2014 Jeep Cherokee was named the "most hackable" vehicle in the study and whose '14 Dodge Viper was the "least hackable," declined to discuss the findings. In a written statement, a spokesperson said, "Chrysler will endeavor to verify these claims and, if warranted, we will remediate them."

At the root of the challenge for Chrysler and others: manufacturers have expanded the number of electronic control units that govern these features, which run the gamut from seat-belt tensioners, to airbags, to brakes. The number of ECUs on cars has exploded. For example, the 2010 Range Rover contained 41. The '14 Range Rover contains 98 ECUs, according to the study. There were 23 ECUs on the 2006 Toyota Prius; there are 40 on the latest model.

 

 

Each ECU is its own miniature computer that comes with a unique set of tasks and vulnerabilities. So the more ECUs on the car, the more risk increases. And the entire system is only as strong as the weakest link.

"They have different costs, but all of them need to be secure," said Walter Buga, CEO of Arynga, a San Diego-based company that makes software for vehicles. "You can have everything super-secure, but one part can compromise everything in the car, including safety."

Researchers from the University of Washington and Cal-San Diego were the first to successfully discover these breaches. In a landmark 2010 study, they found it was possible to hack a car either via physical or wireless access by targeting certain components that sought external signals.

Not every automotive cyber attack is the same. Scenarios can range from mischief, like eavesdropping on a conversation via a telematics unit, to a major attack like injecting malicious code that tampers with brake, throttle and steering control.

 

The former might only require an attacker gaining remote access to a vehicle with a wireless signal that targets a responding ECU. But the more dangerous scenarios would require at least one more step – injecting malicious code into the internal network in an attempt to influence safety-critical ECUs. Because the newer ECUs have roles in actively controlling some functions, "we assume those with advanced computer controlled features are more susceptible since they are designed to take physical actions based on messages received on the internal network," the study says.

Next Problem: Web Browsers In Cars

Increasingly, Valasek and Miller believe the telematics units that control infotainment are the biggest cyber threats, even if they don't necessarily reside on one of these networks.

"We consider it to be the holy grail because of its range," Valasek tells Autoblog. "Because if you have cellular communication in your car and there was to be an issue – not that we've found any yet – you have the range of almost anywhere, because they're designed to work with the infrastructure we have. That range makes it the holy grail, as opposed to something like Bluetooth."

Those risks are growing. Telematics units control many of the systems that interact with drivers, like touchscreens, radios and GPS units. In some cases, automakers are adding web browsers to these infotainment packages, hoping to lure buyers who want a car to function like their other Internet-connected devices. The problem: hackers have long known web browsers; the technology is relatively new to automakers.

"We've proven we can't write a secure web browser," Valasek said. "So I wouldn't say we're capable of writing the perfect software for an automobile."

 

Nouvelles par Tags

2011 models2012 models3D printing458 italia6-series coupeA1A2ABC Automobileabc motorsabu dhabiaccidentaccidentsaccordACIMacuraAcura NSXadidasADSUadvertisingafricaagalegaAIair pollutionairbagairbagsairbusairportAlan GanooAlbionalcotestalfaalfa romeoalgeriaalibabaAllemangeAllied MotorsAlmaalpineAmauryamazonamendesamphibiousandroidAnil BachooAnse-la-Raieappappleappointmentsappsapriliaarabiaargentinaarielarnold schwarzeneggerarsenalArtashok leylandasiaastonaston martinAston Martin ZagatoauctionaudiAudi E-TronAudi Q3Audi Q7Audi Q8Audi R8Audi RS7audit reportaustraliaAustralian Grand Prixaustriaautoauto industryauto shanghaiauto showauto-écoleautonomous carautonomus carAutopilotautopont de Decaenautopont Decaenautoroute M1aventadorawardsAxessBABagatellebahrain grand prixBAIBaie-du-TombeaubajabajajBalaclavaBambousBangkok International Motor ShowBangkok Motor ShowBangladeshBarklybatmobilebatterybattlebeachbeachesBeau-BassinBeau-ChampBeau-VallonBeaux SongesBeaux-SongesbeetleBeijing Auto ShowBeijing Motor ShowBel-AirBel-Air-Rivière-SècheBel-EtangBel-Ombrebelgian grand prixBelgiumBell VillageBell-VillageBelle-MareBelle-RoseBelvédèreBenellibentleyBentley BentaygaBentley Continentalbernie ecclestonebetamaxbetamax casebicyclebicyclesbikebikesbiodieselBlackBerryBlue-BaybmwBMW 3 SeriesBMW 4 SeriesBMW 8 seriesBMW i4BMW i8BMW ix3BMW M2BMW M3BMW M4bmw m5BMW X2bmw x3BMW X4BMW X5BMW x6BMW x7BMW z4boatboatsboeingBogota Auto ShowBois-MarchandBois-Marchand accidentBois-PignoletBois-RougeBologna Motor ShowBon-Accueilbondboschboston dynamicsBPObrabusbrakesBramsthanbrazilbrexitbribebribesbridgebridgestonebrioBrisée-VerdièreBritish Grand PrixbudgetbugattiBugatti ChironBugatti La Voiture Noirebugatti veyronbuggybuickburnoutbusbusesbuyingbydcadillaccalebassescamaroCamp ChapelonCamp-ChapelonCamp-de-MasqueCamp-DiableCamp-LevieuxCanadacanadian grand prixCandosCanotCap-Malheureuxcaporal Chooluncarcar buying tipscar dealercar dealerscar firecar importcar industrycar loancar marketCar Of The Yearcar rentcar rentalcar salecar salescar servicecar sharingcar showcar theftcar washcar washingcarbon fibercarburantsCarlos GhosnCarPlaycarscartingcascavelleCaudanCCIDCCTVCEBcelebretiescelebritiescentre de fitnessCentres De Fitnesscertificat de fitnesscertificats de fitnessCESChamarelChamp de MarsChamp-de-MarsChebelChemin-GrenierChengdu Motor ShowcherychevroletChevrolet CamaroChevrolet ColoradoChevrolet CorvetteChicago Auto ShowchinaCHINESE GRAND PRIXChris EvanschryslerCité VallijeecitroenCitroen Berlingocitroen c3Citroen C4civicclassicclassic carclassic carsclassicsClémenciacode de la routecollectioncommercialcomparisonconceptconceptsConfinementConstanceconsumer reportsContract buscontraventionsconvertiblecoromandelCoronaviruscorruptioncorvetteCottagecour suprêmeCourtCourtscouvre-feuCOVID-19CPBcr-vcrashcrash testcrash testsCristiano Ronaldocrossovercrowdfundingcruise shipCubaCupraCurepipecurfewcustom bikecustom carcustomsCUVCWACyberciteCybertruckcyclonedaciadaihatsudaimlerdakardakar rallydartzdash camdashcamdatsunde tomasodealersdéconfinementdecongestion routiereDelhi Auto ExpodeloreandesignDetroitDetroit Auto Showdéviationdéviationsdéviations routièresdieseldiesel bandiesel scandaldieselgateDimple RaghooDIVADIYDLCdodgedodge demonDonald TrumpDPPdragdrag battledrag racedrag racingdriftdriftingdriver licensedriverless cardrivers licensedrivingdriving licensedriving schooldriving schoolsdriving testdriving tipsdronedronesdrug racedrugsdrunk drivingdsDubaiDubai Motor ShowducatiDysonD’EpinayearthquakeEbayebeneEbène Car ParkecoecologyeconomyÉcroignardEducationEICMAelecticelectionselectricelectric scooterelon muskemissionsEmmanuel Macronengen motor showengineenginesEOCescroquerieethanoletios livaEUEuropeeveventsexamens de conduiteexcès de vitesseexpofacebookfailfakefake policeFast And Furiousfaux coupons de parkingfaux permisfaux permis de conduireFCAfeeder busfeeder busesfermetureFernando Alonsoferrariferrari 812ferrari f40Ferrari Portofinoferrari romaferryFHTAFIAfiatfiestafilmsfinancesfinefinesfinlandFireFirefightersfishersfishingfiskerfitness centerFlacqFlic-en-FlacfloodFloodsFlorealflying carflying taxiFond-du-SacFootballForbachForbach accidentforce indiafordFord BroncoFord F-150ford fiestaford focusFord GTFord mustangFord Mustang Mach-EFord Rangerforest-sideformula Eformula1forza motorsportFrancefrankfurtfrankfurt motor showfraudFSCfuelfuel economy scandalfuel pricefuel stationfuel stationsfunnyfutureGaikindo Indonesia International Auto ShowGaikindo Indonesia International Motor Showgamesgare de Rose-HillGare du Nordgare VictoriagasgeargeelygenesisGeneva Auto Showgeneva motor showgerman grand prixGermanygirlsgmgodzillagolfgolf carGoodlandsgoodwoodGoodwood Festival of Speedgooglegoogle glassgoogle mapsGoProgovernmentgpsgran turismogrand tourgrand-baieGrand-BassinGrand-BoisGrand-GaubeGrande-RivièreGrande-Rivière-Nord-Ouestgreat wallgreecegreengreen energygrnoGros-BoisGros-CaillouxGRSE accidentGTAGymkhanahackershakershamannharley davidsonharley-davidsonHatchbackhealthcarehellcatHennesseyHenriettaHermitageherohertzhighlandshistoryhit and runhitachiholdenHollandHollywoodhondaHonda AccordHonda BrioHonda Cityhonda civicHonda Civic type rhonda cr-vHonda Ehonda fitHonda HR-Vhonda jazzhonda monkeyHonda PassportHonda s2000Honda s660Honda VezelHong Konghorse racinghorsepower falsifyingHospitalhospitalshot rodhot wheelshotelhotelshoverbikehoverboardhow toHuayrahummerHummer H1Hummer H2humorhungarian grand prixhurricaneHusqvarnahybridhydrogenhypercarhypercarshyundaiHyundai CretaHyundai ElantraHyundai i20hyundai ioniqHyundai KonaHyundai Santa Cruzhyundai Santa Fehyundai sonataHyundai TucsonHyundai VelosterHyundai Venuei3i40ICACiframacIIHSillegal racesillegal racingillegal rallyillegal taxiillegal transportIMCimportindiaIndia Auto ExpoIndian Motorcycleindian motorcyclesIndian OilindicaIndonesiaIndonesia International Motor Showindonesia motor showinfinitiInfinityinfotainmentinfrastructureinsuranceInsurance Industry Compensation FundintelinteriorinteriorsiPadiphoneiranirelandIRPisraelisuzuIsuzu D-maxIsuzu MU-Xitaliaitalian grand prixItalyjaguarJaguar Land Roverjamesjames bondJames MayJan Palach stationjapanjapaneese carsjapanese carjapanese carsJapanese Grand PrixJawajazzJDMjeepJeep CherokeeJeep CompassJeep GladiatorJeep Grand CherokeeJeep Grand WagoneerJeep Renegadejeep wranglerJeremy ClarksonjettaJin FeijobjobsJohn DeerekartkawasakiKawasaki Ninjakei carken blockKenyakhankiaKia CeedKia ForteKia NiroKia Optimakia picantoKia SorentoKia SportageKia Stingerkia TellurideKoenigseggkoreaKoshik ReesaulKTMKTM DukeLALA Auto ShowLa Brasseriela butteLa ChaumièreLa FloraLa GauletteLa MarieLa PrairieLa Tour KoenigLa VigieladaLallmatielamborghiniLamborghini Aventadorlamborghini diablolamborghini gallardolamborghini huracanLamborghini SiánLamborghini UruslanciaLancia Stratoslandland cruiserland roverLand Rover DefenderLand Rover DiscoveryLarsen & ToubroLaventurelawlawslazarethLe HochetLe MornelealLebanonLeevy Frivetlegolewis hamiltonlexuslicenselicense platelight metrolimousinelincolnlink roadLionel MessiLockdownlondonLos Angeles Auto Showlotuslow cost carLRTluxuryluxury carluxury carsL’AmitiéL’AventureL’EscalierM1m2m3macondemad maxMadagascarmaha shivaratreeMahebourgmahindramaintenancemalaysiamanmansorymanual transmissionmanufacturingMapoumapsMare d’AlbertMare-aux-VacoasMare-d’Albertmarketmarketingmartinmarutimaruti suzukiMaruti SwiftMaruti Wagon RmaseratiMatt LeBlancMauricioMauritiansmauritiusmaybachmazdamazda 3Mazda 6Mazda BT-50Mazda MiataMazda Mx-30Mazda Mx-5Mazda RX-7mazda3McLarenMcLaren 720smecedesMELmercedesMercedes AMGMercedes E63Mercedes G-ClassMercedes G63Mercedes GLEMercedes S-ClassMercedes X-classMercedes-MaybachMESmetroMetro Expressmexican grand prixmexicoMGmichael schumachermichelinMicrosoftMidlandsminimini cooperminivanMission ImpossibleMITDmitsubishiMitsubishi DelicaMitsubishi EclipseMitsubishi EvolutionMitsubishi L200mitsubishi lancerMitsubishi MirageMitsubishi OutlanderMitsubishi PajeroMitsubishi TritonMitsubishi XpandermitsubushimitsuokaMMMMokamonacomonaco grand prixMont-ChoisyMont-RochesMontagne-BlancheMontagne-LongueMontagne-OrymontebelloMontebello accidentMontée Smontereymoose testmoparMorcellement St AndrémorganMorneMoroccomotoMoto Guzzimoto-écoleMotoClub Racing TeammotorMotor Racing Clubmotor showMotor Vehicle LicenceMotor vehicle test centremotorcyclemotorcyclesmotorsportmotorsportsmotosportmoviemoviesMPAmpvMRAMRCmugenmuscle carMusicmustangmv agustamv augustaMV TrochetiaMVDAMVLNADA Auto ShowNandanee SoornackNando BodhananonasanascarNational Coast Guardnavigationnavigation systemnavigation systemsNavin RamgoolamNCGNDUNepalnetherlandsnew carnew york auto shownew zealandnfsNHTSANigerianikolanissanissanNissan 370ZNissan 400Znissan altimaNissan AriyaNissan FrontierNissan GT-RNissan GT-R50Nissan JukeNissan KicksNissan LeafNissan Leaf NismoNissan MaximaNissan MicraNissan navaraNissan NoteNissan PatrolNissan QashqaiNissan RogueNissan SentraNissan SkylineNissan TerraNissan TitanNissan X-trailNissan ZNissan Z ProtonorwayNouvelle-FranceNTANTCNTLANürburgringoff-roadoffroadoil spillOlympic GamesOnline Renewal of Motor Vehicle LicenceopelOpel Corsapaganipagani huayraPagani ZondaPaillesPakistanPalmarPamplemoussespanasonicpapamobileParisparis motor showparkingparliamentPebble Beachpenaltiespenalty pointsPereyberepermis de conduireperoduapetit raffrayPetit-RaffrayPetite-RivièrepetrolPetrol Retailers AssociationpeugeotPeugeot 2008Peugeot 208Peugeot 3008Peugeot 5008peugeot 508PhilippinesPhoenixPhœnixpickuppickupspininfarinapirelliPitonPlace de l’ImmigrationPlace D’ArmesPlaine MagnienPlaine VertePlaine-des-PapayesPlaine-des-RochesPlaine-LauzunPlaine-MagnienPlaine-VerteplayboyPNQPointe d’EsnyPointe-aux-PimentsPointe-aux-SablespolandpolarispolestarpolicepoliticspollutionpompiersPomponettepontPont ColvillePont-BlancPont-FerpontiacpopemobilePor Louisporscheporsche 911Porsche BoxsterPorsche CayennePorsche MacanPorsche TaycanporsheportPort LouisPort-LouisPoste-de-FlacqPoste-LafayettePoudre-d’Or-HamletPPCPPPprankPravind JugnauthpricepricespriusproguardprotestsprotonPSApublic transportpublict transportQ3qorosQuartier MilitaireQuartier-MilitaireQuatre Bornesquatre-bornesr8RaceracingrainrallyrallyeRallye Eiffelrallye illégalrallye motoramrangerange roverratingsRDArecallrecallsrecordrecordsred bullred bull car park driftRed CrossreduitrenaultRenault ClioRenault Kwidrenault meganeRenault TwingoRenault TwizyrenderingRenewal of Motor Vehicle Licencerent a carrepairreplicarestorationretroReunionRezvaniRHTRiambelRichard DuvalRichard HammondRiche TerreRiche-TerreRichelieurickshawrimacRimac C_TwoRing RoadrioRipaillesRiviere-des-AnguillesRivière-du-PosteRiviere-du-RempartRiviere-Noireroadroad accidentroad accidentsroad closedroad closureroad rules & regualtionsroad rules & regulationsroad safetyRoad TaxRoad Traffic (Amendment) BillRoad Traffic ActRoad Traffic Amendment ActRoad Traffic Amendment BillRoad Traffic Billroadsroads safetyrobberyrobotrobotsroche-boisRoche-TerreRodrigo DuterteRodriguesrolls-roycerolls-royce cullinanromeorond-point de Beau-BassinRose BelleRose Hillrose-belleRose-HillroverRoyal EinfieldRoyal EnfieldRoyal Enfield Continental GTRRSRSURuben RacingRue Jemmapesrue VandermeerschrumoursRussiaRussian Grand PrixrvsaabSafe Citysafetysafety ratingsafety ratingssafety testsafety testsSaint-PierreSainte-Croixsalesamsungsamusao paulo auto showSao Paulo Motor Showsaudisaudi arabiascamscandalscaniaschool busschool vanscooterscootersseatsebastian vettelSebastopolsecond hand carsecond hand carssecond hand cars importsécurité routièreself driving carself-drivingself-driving carself-driving carsSEMASEMA showSeoul Motor Showservice stationservice stationsShanghaishanghai motor showShehzad SooraballyshelbyShellshowsingaporeSingapore Grand Prixsir GaëtanskodaSlovakiasmartSMFsnakeSobrinho caseSodnacsoftwareSohail Sesungkursolar energySolidarity GrantSolitudesonysorezesoreze accidentSouillacsoulsound systemssouthsouth africasouth koreaSpace XspaceXspainSpanish Grand Prixspare partsspeed cameraspeed camerasspeed limitspeedboatspeedingsportSportscarspy shotssri lankassang yongSsangYongSSC TuatarassuSt-JeanSt-Jean roadSt-JulienSt-LouisSt-Paulst-pierreStanleystar warsstartupstation-servicestations-servicestatisticsSTCste croixSte-Croixstreet racingstrikestudysubaruSubaru BRZSubaru ImprezaSudhir SesungkursudySunshine AutosupecarssupercarssuperyachtsuprcarssurfboardsurveySUVsuzukiSuzuki BurgmanSuzuki ErtigaSuzuki HayabusaSuzuki IgnisSuzuki IntruderSuzuki JimnySuzuki S-CrossSuzuki SwiftSuzuki Swift Sportsuzuki vitaraSuzuki Wagon RSuzuki XbeeSwedenswiftSwitzerlandTATaiwantakatatamarintankTanzaniaTarisa Resorttatatata motorstaxtax fraudtaxestaxiTBStechnlogytechnolgytechnologytenderTerre-RougeTerre-Rouge–Verdunteslatesla model 3tesla model stest drivetestsThai Motor ExpoThai Motor ShowthailandThailand International Motor ExpoThe Grand TourThe ValetheftThierry Henryticket pricetipstiresTMRSUtokyoTokyo Auto Salontokyo motor showtoptop geartotalTotal Mauritiustourismtourism authoritytoyotaToyota 86Toyota AlphardToyota AvalonToyota Aygotoyota C-HRtoyota camryToyota CenturyToyota CH-Rtoyota corollaToyota FortunerToyota GR YarisToyota HiaceToyota HighlanderToyota HiluxToyota Land CruiserToyota MiraiToyota PriusToyota RAV4Toyota RushToyota Siennatoyota supraToyota TacomaToyota TJ CruiserToyota TundraToyota Venzatoyota yaristoystoytatractortrafficTraffic BranchtrailerTranquebartransformersTransinvesttransporttransport policeTravaux routierstrendsTrianontricksTriolettriumphTrois-BoutiquesTrou d’Eau DouceTrou-aux-BichesTrou-d'Eau-DouceTrou-d’Eau-DouceTrou-Fanfarontrucktruckstsunamitug of wartuningtuniningTurfTurkeytvsTyacktyresUAEuberUBIWUBSukukraineunionsUnited StatesuomuralUrban TerminalUSUSAused carused car importused carsvacanciesVacoasVacoas-PhoenixvalettaVallée des PrêtresVallée-des-PrêtresVallee-PitotValtonvanvarma caseVeer Luchoomunvehicle inspectionVehiclesvelostervenezuelaVerdunVictoria Bus StationVictoria stationVictoria Urban TerminalvideoVienna Auto ShowvietnamVintagevintage carvintage carsVipervivo energyVivo Energy Mauritiusvoitures reconditionnéesvolvolkswagenVolkswagen BeetleVolkswagen GolfVolkswagen ID.4volvovwvw beetleVW Buggyvw golfVW ID.3VW JettaVW passatvw polovw t-crossWakashiowaymoWeatherwheelsWolmarWootonWork Access PermitWorldyachtyachtsyamahayariszagato
Vendez Votre Auto