|
08 September 2011 ,
Written by Dhruv Tanwar
|
|
Security firm McAfee, in partnership with Wind River and ESCRYPT, has released a new report titled “Caution: Malware Ahead” that says the automiotive industry is finding it essential to team up with those possessing the right mix of software expertise.
The report is an analysis of emerging risks in automotive system security that examines the security of electrical systems that are now commonplace in today’s cars. These embedded devices are used in almost all areas of automobiles including airbags, radios, power seats, anti-lock braking systems, electronic stability controls, autonomous cruise controls, communication systems and in-vehicle communication.
Researchers at several universities have demonstrated that critical safety components of an automobile can be hacked if physical access to the vehicle’s electronic components is available. Other researchers have showed that an attack can be mounted to track a vehicle and compromise passengers’ privacy by tracking RFID tags using powerful long-distance readers at around 40 meters. The new report examined other risks associated with cybercriminal activity, such as remotely unlocking and starting a car via cell phone, disabling the car remotely, tracking driver's location, activities and routines, stealing personal data from a Bluetooth system, disruption of navigation systems and disabling emergency assistance.
“As more and more functions get embedded in the digital technology of automobiles, the threat of attack and malicious manipulation increases,” said Stuart McClure, senior vice president and general manager, McAfee. “Many examples of research-based hacks show the potential threats and depth of compromise that expose the consumer. It’s one thing to have your email or laptop compromised but having your car hacked could translate to dire risks to your personal safety.”
Georg Doll, senior director for automotive solutions at Wind River, said “as the trend for ubiquitous connectivity grows, so does the potential for security vulnerabilities.” He said, “given the development time for automobiles, the industry is finding it essential to start work now by teaming up with those possessing the right mix of software expertise.”
The complete report is available at www.mcafee.com/autoreport. |