+ Publish Ad FREE !
Ads stats: last 24h - 48, actual - 849, total - 102828

Cars Aren't Target for Hackers; They're Gateway to Higher-Profile Attacks

24 February 2015 - Autoblog

Cars Aren't Target for Hackers; They're Gateway to Higher-Profile Attacks

Cyber threats have emerged as a big concern for automakers, as researchers have exposed serious holes in vehicle security that could allow hackers to commandeer cars. Those worries might be small compared to what's ahead.

Cars themselves won't be the end game for hackers in the near future, a leading cyber-security analyst said Tuesday. Instead, they'll be used as mobile gateways to hack more prominent targets.

"My biggest fear is we'll see an example of an attack where a car was used to hack into something else," Dr. Anuja Sonalker, lead scientist and program manager at Battelle, tells Autoblog. "All the pieces are there. It's a matter of time."

She spoke at a conference sponsored by the Center for Automotive Research, at which industry leaders sought answers for these cyber attacks following a spate of high-profile problems that have cropped up in recent months.

So far, vehicle hacks have remained within the realm of white-hat researchers, who have demonstrated the ability to remotely control critical safety functions like steering, braking and acceleration, as well as unlocking doors and overriding driver inputs.

Real-world attacks on cars have not yet occurred, experts say, at least partially because the research is both time-consuming and expensive. It can take months of intricate planning to infiltrate a single car, and for hackers with malicious intent, there's ultimately little incentive.

But Sonalker and others foresee trouble. Security vulnerabilities in today's cars provide hackers with attractive entry points, and the connectivity automakers are rushing into their fleets outfit them with the means to spread their malware elsewhere.

"They're trying to springboard off into launching something bigger," she said. "Nobody is going to hold it against you now that your car is hackable. It's understood that it is. Now it's about how do we protect the ecosystem around it, because if we can't, it's going to lead to large-scale disastrous effects."

New Targets, Same As Old Targets?

Sonalker has studied the problem for the past two-and-a-half years at Battelle, a national nonprofit research and development organization based in Columbus, OH. While white-hat researchers have identified cyber threats in individual industries, she's in a unusual position because she can see how they potentially fit together across fields.

In a modest attack scenario, she believes hackers will use cars as the point of origin to carry out attacks against the same high-reward prey seen in the headlines today. Attacks against the likes of Target, Anthem and Sony will simply be carried out via the connected car.

It's that connectivity that complicates things. Even if automakers design their cars with the best-possible armor, the security measures are often only as useful as the security on the smartphone a driver brings into the car.

"There's a lot of functionality through apps on your phone," said Praveen Narayanan, research manager at Frost & Sullivan. "Today, that's the first point of attack."

For example, if a motorist pairs a smartphone with Bluetooth, researchers believe a hacker could use banking information on the phone to breach security at a banking institution.

While financial motivations may lie at the heart of many cyber attacks, the car does present more malevolent opportunities beyond money.

Targets Range Beyond Vehicles

Electric vehicles are plugged into both private and public chargers, and security measures may be inadequate to protect infrastructure from problems. Could a black-hat hacker disrupt a regional power grid if they navigate those connections?

"You have an infected car connected to infrastructure in a legitimate way," Sonalker said. "It has legitimate access to that infrastructure. So all the security mechanisms will work flawlessly. Your car will be authenticated, but it has stuff on it that's bad for the system."

The opposite is also true. Hackers could breach security in infrastructure and work backward into cars. University researchers infiltrated traffic lights in a study conducted last year, and tinkered with signals unabated. In a connected-car world, that sort of hack could be extended into something more nefarious.

Vehicle-to-vehicle and vehicle-to-infrastructure communication systems now being developed by the federal government are supposed to keep drivers safer by relaying information on traffic and road conditions ahead. But they rely on information being accurate. If misleading information is injected into the system, the consequences for drivers could be severe.

Scale Of Attack Depends On Range Of Connection

The size of an ensuing catastrophe is correlated with the range of the connection.

Bluetooth connections have a reach of 25 yards. Wireless connections have a reach of 100 feet. But in a world where General Motors and others are introducing 4G LTE connections into cars and many automakers are fixing software glitches with over-the-air updates. These tools are useful, but they broaden the scope of a potential malicious attack.

BMW used over-the-air updates in recent weeks to implement a fix for security holes in its remote-services system that affected 2.2 million cars. If a hacker could piggy-back on such an update, a fleet-wide attack could be generated. Black-hats are close.

"I think they have the pieces," Sonalker said. "If you follow the last several years, they've demonstrated successful hacks into cars, health-care devices, pacemakers, TVs, everything. So the pieces are there, and the internet of things is not going away. It's here."

News By Tags

2011 models2012 models3D printing458 italia6-series coupeA1A2abc motorsabu dhabiaccidentaccidentsaccordACIMacuraadidasADSUadvertisingafricaagalegaAIair pollutionairbagairbagsairbusairportAlan GanooAlbionalcotestalfaalfa romeoalgeriaalibabaAllemangeAllied MotorsAlmaalpineAmauryamazonamendesamphibiousandroidAnil BachooAnse-la-Raieappappleappointmentsappsapriliaarabiaargentinaarielarnold schwarzeneggerarsenalArtashok leylandasiaastonaston martinAston Martin ZagatoauctionaudiAudi E-TronAudi Q3Audi Q8audit reportaustraliaAustralian Grand Prixaustriaautoauto industryauto shanghaiauto showauto-écoleautonomous carautonomus carAutopilotautopont de Decaenautopont Decaenautoroute M1aventadorawardsAxessBABagatellebahrain grand prixBAIBaie-du-TombeaubajajBalaclavaBambousBangkok International Motor ShowBangkok Motor ShowBangladeshBarklybatmobilebatterybattlebeachbeachesBeau-BassinBeau-ChampBeau-VallonBeaux SongesBeaux-SongesbeetleBeijing Auto ShowBeijing Motor ShowBel-AirBel-EtangBel-Ombrebelgian grand prixBelgiumBell VillageBell-VillageBelle-MareBenellibentleyBentley Bentaygabernie ecclestonebetamaxbetamax casebicyclebicyclesbikebikesbiodieselBlackBerryBlue-BaybmwBMW 3 SeriesBMW 4 SeriesBMW 8 seriesBMW i8BMW ix3BMW M2BMW M3BMW M4bmw m5BMW X2bmw x3BMW X5BMW x6BMW x7BMW z4boatboatsboeingBogota Auto ShowBois-MarchandBois-Marchand accidentBois-PignoletBologna Motor ShowBon-Accueilbondboschboston dynamicsBPObrabusbrakesBramsthanbrazilbrexitbribebribesbridgebridgestonebrioBrisée-VerdièreBritish Grand PrixbudgetbugattiBugatti ChironBugatti La Voiture Noirebugatti veyronbuggybuickburnoutbusbusesbuyingbydcadillaccalebassescamaroCamp ChapelonCamp-ChapelonCamp-de-MasqueCamp-DiableCamp-LevieuxCanadacanadian grand prixCandosCanotCap-Malheureuxcaporal Chooluncarcar buying tipscar dealercar dealerscar firecar importcar industrycar loancar marketCar Of The Yearcar rentcar rentalcar salecar salescar servicecar sharingcar showcar theftcar washcarbon fibercarburantsCarlos GhosnCarPlaycarscartingcascavelleCaudanCCIDCCTVCEBcelebretiescelebritiescentre de fitnessCentres De Fitnesscertificat de fitnesscertificats de fitnessCESChamarelChamp de MarsChamp-de-MarsChebelChemin-GrenierChengdu Motor ShowcherychevroletChevrolet CamaroChevrolet CorvetteChicago Auto ShowchinaCHINESE GRAND PRIXChris EvanschryslerCité Vallijeecitroencivicclassicclassic carclassic carsclassicsClémenciacode de la routecollectioncommercialcomparisonconceptconceptsConfinementConstanceconsumer reportsContract buscontraventionsconvertiblecoromandelCoronaviruscorruptioncorvetteCottagecour suprêmeCourtCourtscouvre-feuCOVID-19CPBcr-vcrashcrash testcrash testsCristiano Ronaldocrossovercrowdfundingcruise shipCubaCupraCurepipecurfewcustom bikecustom carcustomsCUVCWACybertruckcyclonedaciadaihatsudaimlerdakardakar rallydartzdash camdashcamdatsunde tomasodealersdéconfinementdecongestion routiereDelhi Auto ExpodeloreandesignDetroitDetroit Auto Showdéviationdéviationsdéviations routièresdieseldiesel scandalDIYDLCdodgedodge demonDonald TrumpDPPdragdrag battledrag racedrag racingdriftdriftingdriver licensedriverless cardrivers licensedrivingdriving licensedriving schooldriving schoolsdriving testdriving tipsdronedronesdrug racedrugsdrunk drivingdsDubaiDubai Motor ShowducatiDysonD’EpinayearthquakeEbayebeneecoecologyeconomyEducationEICMAelecticelectionselectricelon muskemissionsEmmanuel Macronengen motor showengineenginesEOCethanoletios livaEUEuropeeveventsexamens de conduiteexcès de vitesseexpofacebookfailfakefake policeFast And Furiousfaux coupons de parkingfaux permisfaux permis de conduireFCAfeeder busfeeder busesfermetureFernando Alonsoferrariferrari 812ferrari romaferryFIAfiatfiestafilmsfinancesfinefinesfinlandFireFirefightersfishingfiskerfitness centerFlacqFlic-en-FlacfloodFloodsFlorealflying carflying taxiFond-du-SacFootballForbachForbach accidentforce indiafordFord BroncoFord F-150ford fiestaford focusFord mustangFord Rangerforest-sideformula Eformula1forza motorsportFrancefrankfurtfrankfurt motor showfraudFSCfuelfuel economy scandalfuel pricefuel stationfuel stationsfunnyfutureGaikindo Indonesia International Auto ShowGaikindo Indonesia International Motor Showgamesgare de Rose-HillGare du Nordgare VictoriageargeelygenesisGeneva Auto Showgeneva motor showgerman grand prixGermanygirlsgmgodzillagolfgolf carGoodlandsgoodwoodGoodwood Festival of Speedgooglegoogle glassgoogle mapsGoProgovernmentgpsgran turismogrand tourgrand-baieGrand-BassinGrand-BoisGrand-GaubeGrande-RivièreGrande-Rivière-Nord-Ouestgreat wallgreecegreengreen energygrnoGros-BoisGros-CaillouxGRSE accidentGTAGymkhanahackershakershamannharley davidsonharley-davidsonHatchbackhealthcarehellcatHennesseyHenriettaHermitageherohertzhighlandshistoryhit and runhitachiholdenHollandHollywoodhondaHonda AccordHonda BrioHonda Cityhonda civicHonda Civic type rhonda cr-vHonda Ehonda fitHonda HR-Vhonda jazzHonda s2000Honda VezelHong Konghorsepower falsifyingHospitalhospitalshot rodhot wheelshotelhotelshoverbikehoverboardhow toHuayrahummerHummer H1Hummer H2humorhungarian grand prixhurricaneHusqvarnahybridhydrogenhypercarhyundaiHyundai CretaHyundai ElantraHyundai i20hyundai ioniqHyundai KonaHyundai Santa Cruzhyundai Santa Fehyundai sonataHyundai TucsonHyundai Velosteri3i40ICACiframacIIHSillegal racesillegal racingillegal rallyillegal taxiillegal transportIMCimportindiaIndia Auto ExpoIndian Motorcycleindian motorcyclesIndian OilindicaIndonesiaIndonesia International Motor Showindonesia motor showinfinitiInfinityinfotainmentinfrastructureinsuranceintelinteriorinteriorsiPadiphoneiranirelandIRPisraelisuzuIsuzu D-maxIsuzu MU-Xitaliaitalian grand prixItalyjaguarJaguar Land Roverjamesjames bondJames MayJan Palach stationjapanjapaneese carsjapanese carjapanese carsJapanese Grand PrixJawajazzJDMjeepJeep CherokeeJeep GladiatorJeep Grand CherokeeJeep Renegadejeep wranglerJeremy ClarksonjettaJin FeijobjobsJohn DeerekartkawasakiKawasaki Ninjakei carken blockKenyakhankiaKia CeedKia ForteKia NiroKia OptimaKia SorentoKia SportageKia Stingerkia TellurideKoenigseggkoreaKoshik ReesaulKTMKTM DukeLALA Auto ShowLa Brasseriela butteLa ChaumièreLa FloraLa GauletteLa MarieLa PrairieLa Tour KoenigLa VigieladaLallmatielamborghiniLamborghini Aventadorlamborghini gallardolamborghini huracanLamborghini SiánLamborghini UruslanciaLancia Stratoslandland cruiserland roverLand Rover DefenderLand Rover DiscoveryLarsen & ToubroLaventurelawlawslazarethLe HochetLe MornelealLebanonLeevy Frivetlegolewis hamiltonlexuslicenselicense platelight metrolimousinelincolnLionel MessiLockdownlondonLos Angeles Auto Showlotuslow cost carLRTluxuryluxury carluxury carsL’AventureL’EscalierM1m2m3macondemad maxMadagascarmaha shivaratreeMahebourgmahindramaintenancemalaysiamanmansorymanual transmissionmanufacturingMapoumapsMare d’AlbertMare-d’Albertmarketmarketingmartinmarutimaruti suzukiMaruti SwiftMaruti Wagon RmaseratiMatt LeBlancMauricioMauritiansmauritiusmaybachmazdamazda 3Mazda 6Mazda MiataMazda Mx-30Mazda Mx-5Mazda RX-7mazda3McLarenMcLaren 720smecedesMELmercedesMercedes AMGMercedes E63Mercedes G-ClassMercedes G63Mercedes GLEMercedes X-classMercedes-MaybachMESmetroMetro Expressmexican grand prixmexicoMGmichael schumachermichelinMicrosoftMidlandsminimini cooperminivanMITDmitsubishiMitsubishi DelicaMitsubishi EclipseMitsubishi L200mitsubishi lancerMitsubishi MirageMitsubishi OutlanderMitsubishi PajeroMitsubishi TritonMitsubishi XpandermitsubushimitsuokaMMMMokamonacomonaco grand prixMont-ChoisyMont-RochesMontagne-BlancheMontagne-LonguemontebelloMontebello accidentMontée Smontereymoose testmoparmorganMorneMoroccomotomoto-écoleMotoClub Racing TeammotorMotor Racing Clubmotor showMotor Vehicle LicenceMotor vehicle test centremotorcyclemotorcyclesmotorsportmotorsportsmotosportmoviemoviesMPAmpvMRAMRCmugenmuscle carMusicmustangmv agustamv augustaMVDANADA Auto ShowNandanee SoornackNando BodhananonascarNational Coast Guardnavigationnavigation systemnavigation systemsNavin RamgoolamNCGNDUNepalnetherlandsnew carnew york auto shownew zealandnfsNHTSANigerianikolanissanissanNissan 370ZNissan 400Znissan altimaNissan FrontierNissan GT-RNissan GT-R50Nissan JukeNissan KicksNissan LeafNissan Leaf NismoNissan MicraNissan navaraNissan NoteNissan PatrolNissan RogueNissan SentraNissan SkylineNissan TerraNissan TitanNissan X-trailNissan ZnorwayNouvelle-FranceNTANTCNTLANürburgringoff-roadoffroadOlympic GamesOnline Renewal of Motor Vehicle LicenceopelOpel Corsapaganipagani huayraPagani ZondaPaillesPakistanPalmarPamplemoussespanasonicpapamobileParisparis motor showparkingparliamentPebble Beachpenaltiespenalty pointsPereyberepermis de conduireperoduapetit raffrayPetit-RaffrayPetite-RivièrepetrolPetrol Retailers AssociationpeugeotPeugeot 2008Peugeot 208peugeot 508PhilippinesPhoenixPhœnixpickuppickupspininfarinapirelliPitonPlace de l’ImmigrationPlace D’ArmesPlaine MagnienPlaine-des-PapayesPlaine-des-RochesPlaine-LauzunPlaine-MagnienPlaine-VerteplayboyPNQPointe-aux-PimentsPointe-aux-SablespolandpolarispolestarpolicepoliticspollutionpompiersPomponettepontPont ColvillePont-BlancPont-FerpontiacpopemobilePor Louisporscheporsche 911Porsche CayennePorsche MacanPorsche TaycanporsheportPort LouisPort-LouisPoste-de-FlacqPoste-LafayettePoudre-d’Or-HamletPPCPPPprankPravind JugnauthpricepricespriusproguardprotestsprotonPSApublic transportpublict transportQ3qorosQuartier-MilitaireQuatre Bornesquatre-bornesr8Raceracingrainrallyrallyerallye illégalrallye motoramrangerange roverratingsRDArecallrecallsrecordrecordsred bullred bull car park driftreduitrenaultRenault ClioRenault Kwidrenault meganeRenault TwingorenderingRenewal of Motor Vehicle Licencerent a carrepairreplicaretroReunionRezvaniRHTRiambelRichard DuvalRichard HammondRiche TerreRiche-TerreRichelieurickshawrimacRimac C_TwoRing RoadrioRipaillesRiviere-des-AnguillesRivière-du-PosteRiviere-du-RempartRiviere-Noireroadroad accidentroad accidentsroad closedroad closureroad rules & regualtionsroad rules & regulationsroad safetyRoad TaxRoad Traffic (Amendment) BillRoad Traffic ActRoad Traffic Amendment ActRoad Traffic Amendment BillRoad Traffic Billroadsroads safetyrobberyrobotrobotsroche-boisRoche-TerreRodrigo DuterteRodriguesrolls-roycerolls-royce cullinanromeorond-point de Beau-BassinRose BelleRose Hillrose-belleRose-HillroverRoyal EinfieldRoyal EnfieldRoyal Enfield Continental GTRRSRSURuben RacingRue Jemmapesrue VandermeerschrumoursRussiaRussian Grand PrixrvsaabSafe Citysafetysafety ratingsafety ratingssafety testsafety testsSaint-PierreSainte-Croixsalesamsungsamusao paulo auto showSao Paulo Motor Showsaudisaudi arabiascamscandalscaniaschool busschool vanscooterscootersseatsebastian vettelSebastopolsecond hand carsecond hand carssecond hand cars importsécurité routièreself driving carself-drivingself-driving carself-driving carsSEMASEMA showSeoul Motor Showservice stationservice stationsShanghaishanghai motor showShehzad SooraballyshelbyShellshowsingaporeSingapore Grand PrixskodaSlovakiasmartSMFsnakeSobrinho caseSodnacsoftwareSohail Sesungkursolar energySolitudesonysorezesoreze accidentSouillacsoulsound systemssouthsouth africasouth koreaspaceXspainSpanish Grand Prixspare partsspeed cameraspeed camerasspeed limitspeedboatspeedingsportSportscarspy shotsssang yongSsangYongssuSt-JeanSt-JulienSt-LouisSt-Paulst-pierrestar warsstartupstation-servicestations-servicestatisticsSTCste croixSte-Croixstreet racingstrikestudysubaruSubaru BRZSubaru ImprezaSudhir SesungkursudySunshine AutosupecarssupercarssuperyachtsuprcarssurveySUVsuzukiSuzuki BurgmanSuzuki ErtigaSuzuki HayabusaSuzuki IgnisSuzuki IntruderSuzuki JimnySuzuki S-CrossSuzuki Swiftsuzuki vitaraSuzuki Wagon RSuzuki XbeeSwedenswiftSwitzerlandTATaiwantakatatamarintankTanzaniaTarisa Resorttatatata motorstaxtax fraudtaxestaxiTBStechnlogytechnolgytechnologytenderTerre-RougeTerre-Rouge–Verdunteslatesla model 3tesla model stest drivetestsThai Motor ExpoThai Motor ShowthailandThailand International Motor ExpoThe Grand TourThe ValetheftThierry Henryticket pricetipstiresTMRSUtokyoTokyo Auto Salontokyo motor showtoptop geartotaltourismtourism authoritytoyotaToyota 86Toyota AlphardToyota AvalonToyota Aygotoyota C-HRtoyota camryToyota CenturyToyota CH-Rtoyota corollaToyota FortunerToyota HiaceToyota HighlanderToyota HiluxToyota Land CruiserToyota PriusToyota RAV4Toyota RushToyota Siennatoyota supraToyota TacomaToyota TJ CruiserToyota TundraToyota Venzatoyota yaristoystoytatractortrafficTraffic BranchtrailerTranquebartransformerstransporttransport policetrendsTrianontricksTriolettriumphTrois-BoutiquesTrou d’Eau DouceTrou-aux-BichesTrou-d'Eau-DouceTrou-d’Eau-DouceTrou-Fanfarontrucktruckstsunamitug of wartuningtuniningTurkeytvsTyacktyresUAEuberUBIWUBSukukraineunionsUnited StatesuomuralUrban TerminalUSUSAused carused car importused carsVacoasVacoas-PhoenixvalettaVallée-des-PrêtresVallee-PitotValtonvanvarma caseVeer Luchoomunvehicle inspectionVehiclesvelostervenezuelaVerdunVictoria Bus StationVictoria stationVictoria Urban TerminalvideoVienna Auto ShowvietnamVintagevintage carvintage carsVipervivo energyvolvolkswagenVolkswagen Golfvolvovwvw beetleVW Buggyvw golfVW ID.3VW JettaVW passatvw polovw t-crosswaymoWeatherwheelsWootonWork Access PermitWorldyachtyachtsyamahayariszagato
Sell Your Car