Slashdot Mirror
Cyber Attacks Demonstrated On Autonomous Ground Vehicles
An anonymous reader writes As vehicles increasingly rely on automation, software and technology enhancements to run basic functionality, those systems serve as a potential safety risk when under cyber attack. Mission Secure uses a proprietary methodology developed by the University of Virginia with the Department of Defense for identifying the most consequential and easy to carry out cyber attacks on any system that a defense capability must address. The goal of the pilot is to demonstrate how to identify vehicle safety threats malicious cyber attackers could use to easily compromise the vehicle's key control systems and how these attacks could be detected and protected.
There is no need for any "proprietary method". You do what any competent security consultant does: You understand the system, you identify critical components and attack vectors. If needed, you consult with experts on the technology evaluated. You correlate the attack vectors and critical components, rate according to your experience and propose fixes. That is it. There is absolutely nothing new or surprising here. There are absolutely no new threats here. The whole article is sensationalist bullshit.
Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
I interviewed for a job working on an autonomous vehicle project, many years ago. Oh, to clarify, this was an autonomous MILITARY vehicle. I see this is just about cars.
My job would have been to do retro-documentation.
That's a violation of the approved development process. I turned the job down.
There is an annoyingly-complicated process that is supposed to be followed. And then there is how things are ACTUALLY done.
Based on this, I suspect your auto-parking Lexus may well be less susceptible than some driverless tank. :( Auto companies don't have to follow standards so ridiculously-difficult to follow that they aren't followed, and then go through the motions after the project is completed.
An old roommate had a red Toyota Corolla. One day he lost his car in a big parking lot, found it, unlocked it, and started the engine before he realized that it wasn't his. Turned out there were ~20 unique keys for his particular model. He got "lucky" with finding an exact same car that used his particular key.
Once again, analog is better than digital.
Not quite. Being networked together was a major vulnerability for the colonial fleet. A patch sent out from the defense mainframe prior to the attack created an opening for the Cylons to exploit by shutting the navigation systems for the battlesars and vipers in battle. Battlestar Galactica survived because it's computers weren't networked together and the patch wasn't installed.
you will find your car pulling into the nearest walmart, telling you there is a sale on things you like to buy, that your friends are already there shopping, and you must sit in this parking lot for at least 10 minutes before going home or pay the unlock fee on various 3rd party apps your car installed for you at 2am this morning.
I had family members who drove a 1947 Chevy home from the movies. It was identical to their own. The other people made the same error and took our Chevy home. My aunt discovered the problem two days later when she opened the glove compartment. She called the police and they tracked down the car and arranged the swap.