Report Says Cars Face Growing Threat of Hack Attacks

Apex Paul · 09-07-2011, 07:37 PM

Report Says Cars Face Growing Threat of Hack Attacks
Published September 07, 2011
| FoxNews.com

Texting and driving are a bad combination, but according to a new report it could get a lot worse.

An analysis by computer security giant McAfee titled “Caution: Malware Ahead” suggests that the large amount of electronics being used in cars today is making them increasingly vulnerable to hack attacks, even by something as simple as text message.

Embedded systems, including those for engine management, active cruise control and airbags, now live side by side with telematics that connect vehicles to wireless communication devices and the “cloud” through services like Ford’s Sync and General Motors’ OnStar, which has the ability to shut down cars and unlock doors remotely. Get in one virtual door and the others may be even easier to open.

Many automakers also offer programs and apps that give owners the ability to start their car via their smartphones, remotely set charging times for plug-ins like the Chevy Volt and track the location of vehicles, creating further avenues into their computer systems. Conversely, once they have accessed the brains of a car, intruders could theoretically use them to retrieve personal information from connected devices. It’s the 21st century version of a car thief rifling through a purse found in a glove compartment.
While the report notes that there have been no known malicious attacks on cars fitted with factory equipment, it does sight one incident where a disgruntled former employee of a car dealership disabled 100 cars by manipulating an aftermarket security system that had been installed on them.

Additionally, McAfee cites an experiment done by researchers at the Center for Automotive Embedded Systems Security where they were able to access safety components in a vehicle via a wired connection and again using Bluetooth.

For its part, the automotive industry is aware of the risks and constantly working on defenses against what is viewed as an evolving threat. Through the Society of Automotive Engineers, the industry has set up a Vehicle Electrical System Security Committee to develop broad strategies to prevent breaches and mitigate undesirable effects of successful ones.
General Motors spokesman Dan Flores tells FoxNews.com that GM considers “vehicle security a top priority and we are focused on equipping our vehicles with both the features and security protections our customers want and need.”

According to Chrysler engineering communications manager Vince Muniga, his company’s programmers regularly update the software needed to keep hackers out of their cars and bombard the vehicles with every type of electronic signal imaginable, not only to search for interference that can cause glitches in the systems, but to discover back doors that hackers could use to get into their electronic architecture. Nevertheless, Muniga concedes that “if someone spends eight months trying to unlock the doors, they probably can, but we try to make the firewalls as bulletproof as possible.”
To ensure that Sync isn’t used as a gateway to more critical systems, Ford technology spokesman Alan Hall says that it and the infotainment systems it works with are completely isolated from the vehicle control systems. Any devices that connect to it through Bluetooth or USB also have to use digital signatures approved by Ford, and Hall adds that the automaker does its best to keep up with new practices in the hacking world and regularly runs simulated attacks using the latest methods.

Just like their counterparts working on the Web, the key to cybersecurity for automakers appears to be trying to stay one step ahead of would be hackers and making things as difficult as possible for them by remaining a moving target, something they have more than a little experience with outside of the cyberworld.

Sterling · 09-07-2011, 07:48 PM

It sounds like the 2010 V6 is the safest one of the bunch. No App available and only one guy can tune it.

coolman · 09-07-2011, 07:50 PM

Thanks for giving us something else to worry about.

*DGthe3* · 09-07-2011, 08:59 PM

I am slightly less worried about this than I'm worried about a tsunami from Lake Ontario. And I live some 300 ft above the surface of Lake Ontario

IROCanSS · 09-07-2011, 09:01 PM

Quote:

Originally Posted by DGthe3

I am slightly less worried about this than I'm worried about a tsunami from Lake Ontario. And I live some 300 ft above the surface of Lake Ontario

FenwickHockey65 · 09-07-2011, 09:04 PM

Quote:

Originally Posted by DGthe3

I am slightly less worried about this than I'm worried about a tsunami from Lake Ontario. And I live some 300 ft above the surface of Lake Ontario

aldaron327 · 09-07-2011, 09:55 PM

Quote:

Originally Posted by DGthe3

I am slightly less worried about this than I'm worried about a tsunami from Lake Ontario. And I live some 300 ft above the surface of Lake Ontario

ROFL!!!

Jeebus!!! Next thing you know, I'll have to worry about my toaster's connection to the home LAN so that my 1 YO's Eggo doesn't get over-done.

5thGenOwner · 09-10-2011, 10:52 AM

Quote:

Originally Posted by aldaron327

ROFL!!!

Jeebus!!! Next thing you know, I'll have to worry about my toaster's connection to the home LAN so that my 1 YO's Eggo doesn't get over-done.

Leggo my Eggo!

But seriously, technology affords us some nice conveniences/luxuries... but with every advancement comes risk. (two sides to every coin)

Personally I'm not a fan of all things electronic when it comes to my vehicle. I could live with A/C + radio (no blue tooth or anything fancy), and I'd be happy as a clam.

I don't mind... (un)locking my car with a key...
I don't mind... turning my car on with a key...
I don't mind... rolling up my windows manually...
I don't mind... manually adjusting my mirrors...
I don't mind... manually adjusting my seat...
I don't mind...

Call me a minimalist, but the more of these electronic conveniences/luxuries that are included... the more it costs to begin with... the more it'll break... and the more you will pay to fix it!

I know this was more about the new 'systems', and most of you play it off as a joke. Laugh all you want, but it would be ignorant to not acknowledge the risks that we face with technology.

09-07-2011, 07:37 PM	#1
Apex Paul Drives: Wagon Queen Family Truckster Join Date: Oct 2009 Location: Louisville, Ky Posts: 1,476	Report Says Cars Face Growing Threat of Hack Attacks Report Says Cars Face Growing Threat of Hack Attacks Published September 07, 2011 \| FoxNews.com Texting and driving are a bad combination, but according to a new report it could get a lot worse. An analysis by computer security giant McAfee titled “Caution: Malware Ahead” suggests that the large amount of electronics being used in cars today is making them increasingly vulnerable to hack attacks, even by something as simple as text message. Embedded systems, including those for engine management, active cruise control and airbags, now live side by side with telematics that connect vehicles to wireless communication devices and the “cloud” through services like Ford’s Sync and General Motors’ OnStar, which has the ability to shut down cars and unlock doors remotely. Get in one virtual door and the others may be even easier to open. Many automakers also offer programs and apps that give owners the ability to start their car via their smartphones, remotely set charging times for plug-ins like the Chevy Volt and track the location of vehicles, creating further avenues into their computer systems. Conversely, once they have accessed the brains of a car, intruders could theoretically use them to retrieve personal information from connected devices. It’s the 21st century version of a car thief rifling through a purse found in a glove compartment. While the report notes that there have been no known malicious attacks on cars fitted with factory equipment, it does sight one incident where a disgruntled former employee of a car dealership disabled 100 cars by manipulating an aftermarket security system that had been installed on them. Additionally, McAfee cites an experiment done by researchers at the Center for Automotive Embedded Systems Security where they were able to access safety components in a vehicle via a wired connection and again using Bluetooth. For its part, the automotive industry is aware of the risks and constantly working on defenses against what is viewed as an evolving threat. Through the Society of Automotive Engineers, the industry has set up a Vehicle Electrical System Security Committee to develop broad strategies to prevent breaches and mitigate undesirable effects of successful ones. General Motors spokesman Dan Flores tells FoxNews.com that GM considers “vehicle security a top priority and we are focused on equipping our vehicles with both the features and security protections our customers want and need.” According to Chrysler engineering communications manager Vince Muniga, his company’s programmers regularly update the software needed to keep hackers out of their cars and bombard the vehicles with every type of electronic signal imaginable, not only to search for interference that can cause glitches in the systems, but to discover back doors that hackers could use to get into their electronic architecture. Nevertheless, Muniga concedes that “if someone spends eight months trying to unlock the doors, they probably can, but we try to make the firewalls as bulletproof as possible.” To ensure that Sync isn’t used as a gateway to more critical systems, Ford technology spokesman Alan Hall says that it and the infotainment systems it works with are completely isolated from the vehicle control systems. Any devices that connect to it through Bluetooth or USB also have to use digital signatures approved by Ford, and Hall adds that the automaker does its best to keep up with new practices in the hacking world and regularly runs simulated attacks using the latest methods. Just like their counterparts working on the Web, the key to cybersecurity for automakers appears to be trying to stay one step ahead of would be hackers and making things as difficult as possible for them by remaining a moving target, something they have more than a little experience with outside of the cyberworld.

09-07-2011, 07:48 PM	#2
Sterling Drives: 2010 Camaro 1LT/RS M6 Join Date: Nov 2007 Location: Fairhaven, MA Posts: 5,882 View My Garage	It sounds like the 2010 V6 is the safest one of the bunch. No App available and only one guy can tune it. __________________ Trifecta tune, Vararam Intake, VMAX throttle body and manifold insulator, RxPerformance Catch Can, , MRT v1.0 and Louvers, Barton shifter, BMR strut tower brace, RED dome light and Plasma LED DRL's, fieldgoal00's Halo 1 harness, hood spears/side stripes, rain guards, custom bowtie, Team LLT badges, headlight and foglight covers, taillight and side marker covers, backup light covers, WeatherTech floormats

09-07-2011, 08:59 PM	#4
DGthe3 Moderator.ca Drives: 05 Grand Am GT Join Date: Jul 2007 Location: Niagara, Canada Posts: 25,366	I am slightly less worried about this than I'm worried about a tsunami from Lake Ontario. And I live some 300 ft above the surface of Lake Ontario __________________ Note, if I've gotten any facts wrong in the above, just ignore any points I made with them __________________ Originally Posted by FbodFather My sister's dentist's brother's cousin's housekeeper's dog-breeder's nephew sells coffee filters to the company that provides coffee to General Motors...... ........and HE WOULD KNOW!!!! __________________ Camaro Fest sub-forum

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Is the V6 Consisdered a muscle car?	zlwebb	5th Gen Camaro SS LS LT General Discussions	455	06-10-2014 12:19 PM
Think about this and the Z28 5th gen	13F20	Camaro ZL1 Forum - ZL1 Specific Topics	41	09-04-2010 01:59 AM
April-May Allocation Report/Consensus Dates	BLACK SUNSHINE	Camaro Price \| Ordering \| Tracking \| Dealers Discussions	3	04-04-2009 11:04 AM
And the pre-order saga goes on and on!	2010 SS RS	Camaro Price \| Ordering \| Tracking \| Dealers Discussions	111	04-03-2009 11:51 PM
Can Someone Please VERIFY this info...	pharmd	Camaro Price \| Ordering \| Tracking \| Dealers Discussions	12	04-03-2009 08:19 AM

09-07-2011, 07:50 PM	#3
coolman Guest Join Date: Jun 2009 Location: PA Posts: 4,812	Thanks for giving us something else to worry about.