Securing connected vehicles with Digital Security by Design technologies, a market demonstrator and study.

“设计数字安全”（DSbD）项目寻求以企业为主导的示范，因此一个以汽车为重点的项目至关重要：道路车辆正变得越来越基于软件和互联，网络安全的影响是显而易见的，因为违规可能导致生命风险、严重伤害或巨额经济处罚。例如，埃隆·马斯克在2021年9月表示，对特斯拉的大规模黑客攻击将是“特斯拉的终结”。据报道，2016年的Jeep网络攻击给汽车制造商造成了高达10亿美元的损失，安全研究人员已经展示了从驾驶员手中接管制动功能。因此，我们将展示和审查DSbD技术在汽车行业网络关键和安全关键应用中的应用。具体而言，将开发和测试四个联网汽车用例。选择它们是因为它们在安全性和时间临界性方面有所不同，因此展示了DSbD的多功能性。对于每一个，DSbD技术对安全、安全和性能的影响将被评估。*无线软件更新。Cyber-critical。没有安全性至关重要。时效性\\\> 1小时。*车辆诊断数据从车辆发送到云端。Cyber-critical。没有安全性至关重要。时效性< 1分钟。*道路基础设施向车辆发出交通或事故预警，并得到车辆的确认（车辆向基础设施发送“V2I”）。Cyber-critical安全性至关重要。时效性1-3秒。*远程控制和远程操作车辆。Cyber-critical。安全至关重要，可能危及生命。时效性<50毫秒。未来基于DSbD的汽车行业产品和服务的上市路线也将由直接与原始设备制造商及其供应链合作的联盟进行评估。这将包括审查汽车应用的DSbD技术如何适应新兴的车辆网络安全监管环境和车辆安全系统的现有要求。网络安全是汽车行业高度关注和活跃的领域。关于硬件和软件解决方案的积极讨论可以提高oem及其供应链的网络弹性，以及商业化路线。通过对比试验，该项目将提供DSbD技术支持逐步转变为基于车辆的网络安全的证据，并有可能导致oem大规模采用。成功将促进DSbD在汽车应用中的应用，并提供真正的商业化机会，从而提高安全性。

With the Digital Security by Design (DSbD) programme seeking business led demonstrators, an automotive focused project is essential: road vehicles are becoming increasingly software-based and connected and the impact of cyber security is obvious as breaches can result in risk to life, serious injury or massive financial penalties. For example, in September 2021 Elon Musk said that a fleet wide hack of Tesla would be "the end of Tesla". The 2016 Jeep cyber attacks are reported to have cost vehicle manufacturers up to $1 billion and security researchers have demonstrated taking over braking functionality from drivers.We will therefore demonstrate and review the use of DSbD technologies for cyber critical and safety critical applications in the automotive sector. Specifically, four connected vehicle use cases will be developed and tested. They have been selected as they vary in safety and time criticality and therefore demonstrate the versatility of DSbD. For each, the impact of DSbD technologies on security, safety and performance will be assessed.* Over-the-air software updates. Cyber-critical. Not safety-critical. Timeliness \\\> 1hour.* Vehicle diagnostic data sent from vehicle to cloud. Cyber-critical. Not safety-critical. Timeliness < 1 minute.* Traffic or accident ahead advisory sent from road infrastructure to vehicle with acknowledgment from vehicle (Vehicle to Infrastructure "V2I"). Cyber-critical Safety-critical. Timeliness 1-3 seconds.* Remote control and teleoperation of vehicle. Cyber-critical. Safety critical with possible risk to life. Timeliness <50 milliseconds.Go-to-market routes for future DSbD based products and services in the automotive sector will also be assessed with the consortium working directly with Original Equipment Manufacturers and their supply chains. This will include a review of how DSbD technologies for automotive applications fit within the emerging regulatory environment for vehicle cyber security and the existing requirements for vehicle safety systems.Cyber security is an area of high focus and activity for the automotive industry. There is active discussion on hardware and software solutions which improve cyber resilience with OEMs and their supply chain and on routes to commercialisation. By means of a comparative trial, this project will provide evidence of DSbD technologies supporting a step change to vehicle-based cyber security and has the potential to lead to mass adoption by OEMs. Success will promote the application of DSbD within automotive applications and provide real commercialisation opportunities which improve security and safety.