Cybersecurity Key to Software-Defined Vehicle Growth

Attention to cybersecurity is critical to all the features linked to the SDV, such as personalized driving experiences, mobility as a service, electric mobility and shared mobility, security expert Robert Kaster says.

Joseph Szczesny

October 20, 2022

2 Min Read
Automotive cybersecurity (Getty)
Software-defined vehicles’ vulnerability increases with complexity, expert says.Getty Images

The software-defined vehicle potentially opens the door to all sorts of new features for motorists to use and for automakers to turn into cash, experts note at Automotive Futures’ 14th annual Future of Automotive IT Conference.

However, says Robert Kaster, chief technical expert-product security for Bosch of the Americas, every aspect of the SDV will require increasing levels of cybersecurity now and in the future.

Attention to cybersecurity is critical to all the features linked to the SDV, such as personalized driving experiences, mobility as a service, electric mobility and shared mobility, Kaster (pictured, below left) says. Cybersecurity must have the depth to last throughout a vehicle’s lifecycle, he adds, particularly as cyberattacks become more sophisticated.

Robert Kaster - Robert Bosch.png

Robert Kaster - Robert Bosch

The “cool new features” that come with the SDV also come with additional “attack vectors” that can pose significant security risks, Kaster cautions: “Connectivity is creating new risks for cybersecurity.”

Cybersecurity becomes even more important as information about factors such as a driver’s individual preferences and part of the vehicle’s functionality are offloaded to the cloud.

Kaster says over-the-air updates (OTAs) represent an added vector of attack, requiring defensive measures as well as entirely new sets of security protocols while sorting out ultimate responsibility for the safety of operating systems.

If manufacturers do not pay attention to the threat inherent in OTAs, they could face government regulation, he says.

The industry is trying to sort out whether to develop centralized software in-house or distribute it to a variety of independent suppliers. The software platforms must be secured before they can be added to vehicles.

Automakers should ensure their suppliers, from Tier 1 all the way through Tiers 3 and 4, are brought into the discussion about security, Kaster says.  

Automakers also must be alert to potential dangers as they scale up the use of software and make plans for new business models, such as the wider use of subscriptions.

One of the issues car companies will have to consider is whether consumers are willing to pay substantial sums – as much as $5,000 in today’s dollars – for a complete upgrade of a vehicle’s software for additional protection against cyberattacks.

All the new technologies and new services will require additional levels of protection against cyberattacks, says Kaster, who works with various Robert Bosch divisions on the SDV and how suppliers are working with automakers to meet cybersecurity challenges. 

Piyush Karkare, global director-automotive industry solutions, Siemens Digital Industry Software, says car companies are challenged to move beyond traditional vehicle development to incorporate human experiences, the infrastructure around the vehicles and integrations with other businesses into their business model. 

Conference moderator Bruce Belzowski, managing director-Automotive Futures, says cybersecurity is a critical issue the auto industry must address aggressively as the shift to the SDV and efforts to deliver new services gain momentum.

You May Also Like