CS1803

connected cars
DRIVING INTO THE UNKNOWN
TACKLING THE MANY CYBERSECURITY AND
OTHER SAFETY ISSUES AROUND CONNECTED
CARS HAS BECOME AN IMPERATIVE
Connected cars are a reality; most
modern vehicles on the road
nowadays have some form of
connectivity to the open world. This raises
important challenges on multiple software
integration and cybersecurity. To address
this challenge, Thales, through its German
company Sysgo, along with Vector, the
Stuttgart-based specialist for automotive
embedded electronics, founded a joint
venture to address the critical issue of
multiple software managing multiple,
often safety-critical, functions.
The volume and complexity of software
used to manage virtually every aspect of
a connected or autonomous vehicle, both
mechanic and electronic, could bear a
potential risk to people's safety. Each
software presents a potential attack surface
for security breaches, which could affect
the overall reliability of the vehicle. The
aim of this partnership is to co-develop an
integrated software platform for improved
performance and cybersecurity.
Through this joint-venture, Thales and
Vector will combine their respective
embedded systems expertise in aviation
safety and in automotive software
according to ISO 26262 to offer a single
platform to run the car's software and
applications. By simplifying the vehicle's
control systems, they aim to strengthen
its cyber-protection, while ensuring the
isolation of individual applications.
SINGLE SOURCE SOLUTION
To achieve this, the two experts will look to
co-develop the new platform by combining
two pre-existing products: MICROSAR,
Vector's AUTOSAR* Adaptive basic
software, and PikeOS, Sysgo's real-time
operating system. Through this integration,
coupled with further co-development, the
two companies are aiming to provide the
automotive industry with a single-source
solution. "Cybersecurity and Safety Critical
Systems are part of the Thales DNA. For us,
this joint initiative with Vector and Sysgo is
a natural step beyond what we already do
for the automotive industry in cybersecurity
services and consulting", says Laurent
Maury, vice-president, Critical Information
Systems and Cybersecurity, Thales.
Designed for the new generation of highperformance
Electronic Control Units
(ECUs), based on the AUTOSAR Adaptive
standard, a release of the joint solution for
prototype applications is planned later this
year and series releases for safety-relevant
control units are expected in 2019.
Meanwhile, Ansys, which develops and
markets engineering simulation software,
states that, while connected car technology
is a "bonus and a pleasure for car buyers", it
poses unprecedented new engineering
challenges regarding reliability, safety and
security for car manufacturers.
In its report on connected technology,
'Ensuring Reliability and Safety of
Connected Car Technology', it comments:
"As we rely more and more on connectivity
of cars, many potential problems could
emerge from faulty connected car
technology, including simple connection
interruptions, display malfunctions, signal
interference, and expensive failure of
sensitive electronic hardware under heat
and harsh conditions within vehicles.
"Imagine being lost while driving in an
unknown city, due to GPS signal loss, or the
frustration of being unable to operate the
air conditioner on a hot day, because the
car's touch screen interface has difficulty
recognising the touch of sweaty fingers.
Connected car technology also opens doors
to much more serious, unprecedented
problems, such as cyber security holes and
software bugs that could lead to potentially
fatal safety issues." Such problems can
quickly lead to consumer dissatisfaction and
brand depreciation. And there can be even
more serious consequences, if, for instance,
remote hackers use the connectivity to
32
computing security March/April 2018 @CSMagAndAwards www.computingsecurity.co.uk