Automotive Cyber Security Monique Lance, Marketing Director - PowerPoint PPT Presentation

Automotive Cyber Security Monique Lance, Marketing Director October, 2017 October 2017 Argus Cyber Security Ltd. Proprietary and Confidential

Car Hacked on 60 Minutes 2 YouTube October 2017 Argus Cyber Security Ltd. Proprietary and Confidential

Just Two Years Away – 100s Millions Connected Cars October 2017 Argus Cyber Security Ltd. Proprietary and Confidential

4 Cyber Ransom − WannaCry for Cars October 2017 Argus Cyber Security Ltd. Proprietary and Confidential

5 The Threats − Possible Scenarios Car theft Invasion of privacy Compromise Safety Minor crimes • • • Unlock doors • Eavesdrop Kill engines Pranks- blinking leds, • • • sounds, adjusting mirrors Bypass immobilizer Track GPS location Accelerate • • • False readings – Steal personal data Disable brakes speedometer, fuel gauge, • Tighten seat belts GPS navigation • Take control of steering • Cyber ransom wheels October 2017 Argus Cyber Security Ltd. Proprietary and Confidential

6 Multi tiple ple Penetration ration Vectors Infotainment Telematics & Cellular Devices WiFi Supply Chain Bluetooth V2X OBD II October 2017 Argus Cyber Security Ltd. Proprietary and Confidential

7 We Have Only Just Begun October 2017 Argus Cyber Security Ltd. Proprietary and Confidential

8 Preventing a Fleet-Wide Hack Top Priority, July 2017 “ My top concern from a security standpoint at Tesla is making sure that a fleet wide hack or any vehicle specific hack can ’ t occur . ” “ … hack all the autonomous Teslas, … that would be the end of Tesla ” Source: https://electrek.co/2017/07/17/tesla-fleet-hack-elon-musk/ October 2017 Argus Cyber Security Ltd. Proprietary and Confidential

9 Avg. Life of a Car Much Longer than Mobile or PC TIME IN USE: 11 YEARS 3.4 YEARS 2.7 YEARS CONCEPT/DESIGN FREEZE PRODUCTION ON THE ROAD AUTOMOTIVE CYBER SECURITY SOLUTIONS NEED TO EXTEND BEYOND 20 YEARS Source:https://www.statista.com October 2017 Argus Cyber Security Ltd. Proprietary and Confidential

10 Autonomous Cars Bring Even Greater Risks INCREASE RISK TO MOTORIST & PUBLIC SAFETY CONSUMER ADOPTION OEM & MOBILITY PROVIDERS LIABLE!! October 2017 Argus Cyber Security Ltd. Proprietary and Confidential

11 Automotive Cyber Security – End-to-End Approach Prevent Understand Respond Make it as hard as Know you are Mitigate the possible to attack being hacked and damage and how, in real time immunize the fleet in hours October 2017 Argus Cyber Security Ltd. Proprietary and Confidential

12 Maximum Prevention – Security in Depth Prevent Prevent Out-of-Vehicle Lifespan Protection In-Vehicle ECU In-Vehicle Infotainment & Protection Network Telematics Protection Protection Aftermarket Protection October 2017 Argus Cyber Security Ltd. Proprietary and Confidential

Understand October 2017 Argus Cyber Security Ltd. Proprietary and Confidential

14 Ongoing Monitoring & Mitigation Respond Ongoing Over The Air Security Updates OEM SOC SOC OEM SOC OEM SOC OEM SOC October 2017 Argus Cyber Security Ltd. Proprietary and Confidential

15 Holistic Approach PRODUCTION CONCEPT DESIGN & DEVELOPMENT ON THE ROAD Threat analysis Requirements Cyber Health Management Code review Risk assessment Incident Response Penetration testing SOC Vulnerability analysis Cyber Threat Cyber Security Training Intelligence Management System October 2017 Argus Cyber Security Ltd. Proprietary and Confidential

16 Dynamic Protection Cloud Management Console Offline analysis in the cloud Collection of Initial information Forensics Config from the vehicle Secure communication – encrypted and authenticated In-Vehicle Solutions Update the New fleet configuration NVIDIA DRIVE PX October 2017 Argus Cyber Security Ltd. Proprietary and Confidential

17 Work with Automotive Cyber Security Experts ↘ Think like hackers ↘ Benefit from experience in cyber security across multiple disciplines and regions ↘ Fluent in multiple automotive architectures, protocols, standards and use cases ↘ Making a cyber safer design October 2017 Argus Cyber Security Ltd. Proprietary and Confidential

18 Government and Industry Become Proactive  US Government  UK Government “ When … new … systems … [are deployed], ensuring “ security as a quality feature ” is a prerequisite … the Government  Japanese government will … establish comprehensive guidelines and standards for IoT … security, including [for] … automotive … and other relevant industries. ”  European Commission  Industry best practices October 2017 Argus Cyber Security Ltd. Proprietary and Confidential

19 Argus - The Global Leader in Automotive Cyber Security MULTI-LAYERED SOLUTIONS ONE STOP SHOP TRUSTED ADVISORY SERVICES 50,000 Research Hours Prevent | Understand | Respond 35 Granted & Pending Patents WORLDWIDE PRESENCE AUTOMOTIVE & CYBER EXCELLENCE 5 Offices Worldwide Cyber: Embedded software, Mobile communication, Critical PARTNERING WITH INDUSTRY LEADERS infrastructure, IT & Networks Continental, Elektrobit, Magna, Qualcomm, Infineon, Automotive: Senior executives: GM, FCA, Daimler Intel, Check Point, NXP, ST Micro, Wind River Over 3 decades in automotive, Electrical engineering WORKING WITH WORLD ’ S MAJOR OEMS & TIER 1s Ranked 1st in Third-Party Evaluations! October 2017 Argus Cyber Security Ltd. Proprietary and Confidential

20 Summary ↘ The threat is real today and will be greater in the future ↘ Major impact on: passenger and public safety, brand name, management liability and shareholders ↘ Automotive industry faced with new challenges far beyond traditional core competences ↘ Affects most work processes across the organization ↘ Legislation imminent October 2017 Argus Cyber Security Ltd. Proprietary and Confidential

Automotive Industry Gears Up for Battle “ It ’ s not a question of if our industry will see a serious cyber incident but when ” Jeff Massimilla, VP Vehicle Safety and Product Cybersecurity, General Motors October 2017 Argus Cyber Security Ltd. Proprietary and Confidential

THANK YOU! www.argus-sec.com October 2017 Argus Cyber Security Ltd. Proprietary and Confidential