Securing connected vehicles with Digital Security by Design technologies, a market demonstrator and study.

通过设计数字安全技术确保联网车辆的安全，这是一项市场演示和研究。

• 批准号: 10018347
• 金额: $ 155.14万
• 依托单位: BEAM CONNECTIVITY LIMITED
• 依托单位国家: 英国
• 项目类别: Collaborative R&D
• 财政年份: 2022
• 资助国家: 英国
• 起止时间: 2022 至 无数据
• 项目状态: 未结题
• 来源: https://gtr.ukri.org/projects?ref=10018347
• 关键词: Securing; connected; vehicles; Digital; Security

With the Digital Security by Design (DSbD) programme seeking business led demonstrators, an automotive focused project is essential: road vehicles are becoming increasingly software-based and connected and the impact of cyber security is obvious as breaches can result in risk to life, serious injury or massive financial penalties. For example, in September 2021 Elon Musk said that a fleet wide hack of Tesla would be "the end of Tesla". The 2016 Jeep cyber attacks are reported to have cost vehicle manufacturers up to $1 billion and security researchers have demonstrated taking over braking functionality from drivers.We will therefore demonstrate and review the use of DSbD technologies for cyber critical and safety critical applications in the automotive sector. Specifically, four connected vehicle use cases will be developed and tested. They have been selected as they vary in safety and time criticality and therefore demonstrate the versatility of DSbD. For each, the impact of DSbD technologies on security, safety and performance will be assessed.* Over-the-air software updates. Cyber-critical. Not safety-critical. Timeliness \\\> 1hour.* Vehicle diagnostic data sent from vehicle to cloud. Cyber-critical. Not safety-critical. Timeliness < 1 minute.* Traffic or accident ahead advisory sent from road infrastructure to vehicle with acknowledgment from vehicle (Vehicle to Infrastructure "V2I"). Cyber-critical Safety-critical. Timeliness 1-3 seconds.* Remote control and teleoperation of vehicle. Cyber-critical. Safety critical with possible risk to life. Timeliness <50 milliseconds.Go-to-market routes for future DSbD based products and services in the automotive sector will also be assessed with the consortium working directly with Original Equipment Manufacturers and their supply chains. This will include a review of how DSbD technologies for automotive applications fit within the emerging regulatory environment for vehicle cyber security and the existing requirements for vehicle safety systems.Cyber security is an area of high focus and activity for the automotive industry. There is active discussion on hardware and software solutions which improve cyber resilience with OEMs and their supply chain and on routes to commercialisation. By means of a comparative trial, this project will provide evidence of DSbD technologies supporting a step change to vehicle-based cyber security and has the potential to lead to mass adoption by OEMs. Success will promote the application of DSbD within automotive applications and provide real commercialisation opportunities which improve security and safety.

随着数字安全设计（DSbD）计划寻求企业主导的示范者，一个以汽车为重点的项目至关重要：道路车辆越来越基于软件和互联，网络安全的影响显而易见，因为违规行为可能导致生命风险，严重伤害或巨额经济处罚。例如，2021年9月，埃隆·马斯克（Elon Musk）表示，对特斯拉的全车队黑客攻击将是“特斯拉的终结”。据报道，2016年Jeep网络攻击给汽车制造商造成了高达10亿美元的损失，安全研究人员已经证明了从驾驶员手中接管制动功能。因此，我们将展示和审查DSbD技术在汽车行业网络关键和安全关键应用中的使用。具体而言，将开发和测试四个联网汽车用例。之所以选择它们，是因为它们在安全性和时间关键性方面各不相同，因此证明了DSbD的多功能性。对于每一种情况，都将评估DSbD技术对安全性、安全性和性能的影响。无线软件更新网络批判非安全关键。时间\> 1小时 *车辆诊断数据从车辆发送到云端。网络批判非安全关键。时间< 1分钟。*从道路基础设施向车辆发送交通或事故预警，并得到车辆的确认（车辆到基础设施“V2 I”）。网络关键安全关键。计时1-3秒。*车辆的远程控制和遥操作。网络批判安全至关重要，可能存在生命危险。时间<50毫秒。未来汽车行业基于DSbD的产品和服务的上市路线也将由该联盟直接与原始设备制造商及其供应链合作进行评估。这将包括对汽车应用DSbD技术如何适应新兴的汽车网络安全监管环境和现有的汽车安全系统要求的审查。网络安全是汽车行业高度关注和活跃的领域。与原始设备制造商及其供应链以及商业化路线有关的硬件和软件解决方案正在积极讨论，以提高网络弹性。通过比较试验，该项目将提供DSbD技术支持基于车辆的网络安全的步骤变化的证据，并有可能导致OEM的大规模采用。成功将促进DSbD在汽车应用中的应用，并提供真实的商业化机会，提高安全性和安全性。