Security Measures in ADAS:
In the modern world of automotive technology, cars are no longer just mechanical machines. They are complex systems running on over 100 million lines of code and 250 GB of data flowing through their systems. This digital transformation has opened up new possibilities, but it has also introduced new risks, particularly in the realm of cybersecurity.
Cybersecurity breaches in vehicles could potentially allow hackers to take control of critical systems such as braking, steering, and Advanced Driver-Assistance Systems (ADAS), potentially leading to accidents, car theft, or unauthorized surveillance. With cyberattacks across industries on the rise, the need for robust cybersecurity measures in the automotive sector is more crucial than ever.
Enter ISO 21434, a standard that provides guidelines for enhancing vehicle cybersecurity. This standard covers everything from design and development to production and maintenance, providing a foundation for cooperation among all automotive supply chain stakeholders. It emphasizes continuous monitoring and the capacity for incident response, enabling timely detection and reaction to threats throughout the vehicle's lifecycle.
The shift to Software-Defined Vehicles (SDVs) necessitates a holistic design approach for automakers. In SDVs, the functionality, performance, features, and value are derived from the vehicle's software capabilities rather than its hardware. This requires finding a way to design vehicles coherently and integrate multiple technical stacks seamlessly.
Cybersecurity for vehicles with ADAS involves protecting electronic systems, communication networks, software, and data from cyber threats and unauthorized access. Key elements of this include protection of communication networks, sensor security, software security, secure software updates, access control and authentication, intrusion detection and prevention systems, data privacy and protection, and firmware integrity and secure boot.
ISO 21434 also addresses Safety of the Intended Functionality (SOTIF), focusing on eliminating unreasonable risks caused by hazards resulting from functional inadequacies of the intended functionality or foreseeable misuse by individuals. Another standard, ISO 26262, ensures the electronic safety of vehicles, protecting drivers, passengers, and vulnerable road users from injuries caused by faults in vehicle electronics and software.
The importance of cybersecurity in the automotive industry cannot be overstated. In 2024, the British car manufacturer Jaguar Land Rover experienced a significant cyberattack that caused severe disruptions to production and sales. The company responded by shutting down its systems to limit damage and worked quickly to restart IT systems in a controlled manner, with no evidence of customer data theft found.
Cyberattacks are not limited to the automotive industry. In June 2024, the Japanese government announced that its space agency had been the target of a series of cyberattacks starting in 2023, but the compromised network did not contain sensitive rocket or satellite information. Similarly, in July 2024, a cyberattack at the airport in Split, Croatia, resulted in flight cancellations, delays, and passengers spending the night at the airport.
In the fight against cyber threats, innovation plays a crucial role. LeddarTech, a global software company, offers innovative AI-based low-level sensor fusion and perception technology for ADAS and AD. Their technology generates a comprehensive 3D environmental model from various sensor types and configurations, meeting numerous performance requirements such as higher range, higher accuracy, fewer false alarms, superior object detection, and small object detection.
The International Automotive Task Force (IATF 16949) is another standard that plays a role in the automotive industry. It is an automotive quality management system standard focused on continual improvement, emphasizing defect prevention and the reduction of variation in the automotive supply chain and assembly processes.
In conclusion, the digital transformation of the automotive industry has brought about new opportunities, but it has also introduced new risks. Cybersecurity is no longer an optional extra, but a necessity. Standards like ISO 21434, ISO 26262, and IATF 16949 provide a framework for enhancing vehicle cybersecurity, ensuring the safety and privacy of drivers, passengers, and the public.