Connect with us

Cars

Are you playing auto roulette with smart car devices?

Kaspersky analysed aftermarket connected smart car devices, and made a pleasant discovery

Published

on

There are currently two ways for car enthusiasts to obtain a connected vehicle – purchase a ‘smart by design’ car from a dealer, or improve their existing car with a number of additional ‘smart-devices’. While both scenarios create a greater driving experience, smart technology also represents a brand new area for malicious use, as the media and Kaspersky’s own research has repeatedly shown. This is inevitable – when a piece of technology becomes essential, related security issues tend to increase.

With this in mind, Kaspersky researchers set out to discover whether these reports on the security of IoT devices had any impact on manufacturers of smart devices for the automotive industry. The researchers analysed several randomly selected devices, including an OBD dongle scanning tool, a tyre pressure and temperature monitoring system, a smart alarm system, a GPS tracker, and an app-controlled dashcam.

The findings were a pleasant surprise: while the IoT industry has often been considered vulnerable, these automotive-related smart and connected devices proved to be quite secure, with no major vulnerabilities exposed. However, several security issues were also revealed: the ability to remotely access driving dynamics data via a scanning toll, the option to manipulate signals from the tire monitoring system, and, most alarmingly, the ability to open vehicle doors using the alarm system. However, all of these elements are either very hard to implement or bring no obvious or immediate outcome for a criminal.

“The devices we examined met many security policies and were satisfactory, with the exception of a few small issues. This is partly due to the limited functionality of these devices and the lack of serious consequences in the event of a successful attack through these products – but also thanks to the vigilance of manufacturers. We were glad to see that they have invested their efforts into making these devices more secure, a good sign overall for the automotive industry. Yet, this is still not a reason to relax: based on our experience, the smarter the device, the higher the chances that security issues will occur. That is why security should be considered more closely in the early stages of product development, especially as a new generation of smart devices come to the market,” notes Victor Chebyshev, security expert at Kaspersky.

To keep smart automotive devices even more secure, we advise:

  1. When choosing which part of your vehicle you’re going to make a little bit smarter, first consider the security risks. Think twice if the device has something to do with the car telemetry or access to its ‘brains’.
  2. Before buying a device, search the internet for news of any vulnerabilities. It is likely that the device you are going to purchase has already been examined by security researchers and it is possible to find out whether any issues have been found in the device, or have already been patched.
  3. It is not always a great idea to buy the most recent products released on the market. Along with the standard bugs often found in new products, recently-launched devices might contain security issues that haven’t yet been discovered by security researchers. The best choice is to buy products that have already been worked on with several software updates.
  4. Always consider the security of the ‘mobile dimension’ of the device, especially if you have Android devices – applications are often helpful and make life easier, but once a smartphone is hit by malware, a lot can go wrong.
  5. To overcome the challenge of smart device cybersecurity, Kaspersky has invested in Kaspersky OS, widely used in customised manufacturing hardware and software. This system can be used across a variety of fields: on mobile devices and PCs, IOT devices, intelligent energy systems, industrial systems, telecommunications, and transportation systems. Kaspersky sees opportunities in the further development of KasperskyOS to meet the needs of our customers and ensure the highest levels of security can be achieved in all these fields, including the automotive industry. More information can be found here.

Read the full text of the report on Securelist.

Cars

Volvo to use blockchain to trace battery cobalt

Published

on

Volvo Cars will become the first carmaker to implement global traceability of cobalt used in its batteries by applying blockchain technology. The announcement follows the reveal last month of the company’s first fully electric car, the XC40 Recharge.

Traceability of raw materials used in the production of lithium-ion batteries, such as cobalt, is one of the main sustainability challenges faced by carmakers. Volvo says its committed to full traceability, ensuring that customers can drive electrified Volvos knowing the material for the batteries has been sourced responsibly.

“It is a mineral that is essential to the production of the lithium-ion batteries that power electric cars,” says Greg Maruszewski, Managing Director of Volvo Cars South Africa. “But, sadly, it has long been suspected that some of the cobalt comes from mines that don’t use ethical mining practices. Now, thanks to blockchain traceability, we will know that the cobalt has been sourced responsibly. We are the first and only vehicle manufacturer that can make this statement. Accordingly, South African motorists who buy a Volvo in our XC90 T8 range can do so with pride – with the guaranteed knowledge that only ethical mining practices have taken place in the cobalt supply chain.”

Blockchain technology, which establishes a transparent and reliable shared data network, significantly boosts transparency of the raw material supply chain as the information about the material’s origin cannot be changed undetected.

Volvo Cars has now reached an agreement with its two global battery suppliers, CATL of China and LG Chem of South Korea, and leading global blockchain technology firms to implement traceability of cobalt starting this year.

Technology firms Circulor and Oracle operate the blockchain technology across CATL’s supply chain following a successful pilot earlier this summer, while the Responsible Sourcing Blockchain Network (RSBN), together with responsible sourcing specialists RCS Global and IBM, is rolling out the technology in LG Chem’s supply chain.

“We have always been committed to an ethical supply chain for our raw materials,” says Martina Buchhauser, head of procurement at Volvo Cars. “With blockchain technology we can take the next step towards ensuring full traceability of our supply chain and minimising any related risks, in close collaboration with our suppliers.”

A blockchain is a digital ledger containing a list of records linked to each other via cryptography. Within supply chains, the technology creates records of transactions, which cannot be changed while also enforcing a common set of rules for what data can be recorded. This allows participants to verify and audit transactions independently.

In this particular case, data in the blockchain include the cobalt’s origin, attributes such as weight and size, the chain of custody and information establishing that participants’ behavior is consistent with OECD supply chain guidelines. This approach helps create trust between participants along a supply chain.

Volvo Cars last month launched the XC40 Recharge, the first of an upcoming family of fully electric cars under the Recharge banner. By 2025, it expects half of its global sales to consist of fully electric cars, with the rest hybrids.

Last month, Volvo Cars also launched an ambitious climate plan, which includes a radical reduction of carbon emissions by 40% per vehicle by 2025, as well as a continued commitment to ethical business across its entire operations and supply chain.

CATL and LG Chem are renowned battery manufacturers, both with long and successful track records supplying lithium-ion batteries to the global automotive industry. They fulfil Volvo Cars’ strict sourcing guidelines in terms of technology leadership, responsible supply chains, reduction of carbon emissions and competitive cost models.

The agreements between Volvo Cars, CATL and LG Chem cover the supply of batteries over the coming decade for next-generation Volvo and Polestar models, including the XC40 Recharge.

Continue Reading

Cars

Jaguar tech delivers wake-up call for drivers

Published

on

From long working hours to daily school runs and the potentially stressful commute, Jaguar understands life for many is busier than ever. We’re so busy that 1 in 8 UK drivers admit to having fallen asleep at the wheel* – and this causes up to 25% of fatal accidents**.

As part of a wider vision to enrich and improve the lives of its drivers and passengers, Jaguar has developed a piece of technology, Driver Condition Monitor, which alerts the driver if it detects the tell-tale signs of drowsiness. The system takes inputs from thousands of data points, some of which are measured every thousandth of a second, including the Electronic Power Assisted Steering system, pedal inputs and general driving behaviour. Complex algorithms analyse all this to accurately determine whether a driver is becoming fatigued.

Fitted as standard on E-PACE and across the Jaguar range, Driver Condition Monitor detects if the driver is starting to feel drowsy and when required, provides an early warning to take a break. E-PACE’s instrument cluster displays a coffee-cup icon and sounds an alert when a prompt is needed. 

Edmund King, Director of the AA Charitable Trust, said: “The statistics around drowsy drivers are shocking, even more so when you realise it is an under-reported issue. Any measure that helps reduce the risk of tired drivers, such as Jaguar’s Driver Condition Monitor, is to be welcomed. The only real cure for tiredness is to rest – if drivers feel tired, or are alerted to possible tiredness by their car, they should pull over at the next safe place, drink a caffeinated drink and take a short nap.”

David Willey, Assisted and Automated Driving Attributes Senior Manager, Jaguar, said: “At Jaguar, we continuously review the latest advances in vehicle safety and develop innovative technologies to improve the driving experience, making it safer and more enjoyable. Driver Condition Monitor, along with a range of Advanced Driver Assistance Systems (ADAS) are offered as standard across the Jaguar range.”

The Jaguar E-PACE is also fitted with an array of other advanced driver assistance systems to help keep the driver and occupants safe. Standard features on all Jaguar models include Automated Emergency Braking, Lane Keep Assist, Cruise Control with Speed Limiter, front and rear parking aid and a rear facing camera.

The Jaguar E-PACE’s unique combination of sporty looks, dynamic driving and innovative safety features mean it’s fun to drive and safe, too. The SUV you’ll never tire of, is priced from R684,400 in South Africa and can be configured at www.jaguar.co.za.

AA Charitable Trust research. AA-Populus 11-17 September 2018. Online poll of 20,561 drivers

** Parliamentary Advisory Council for Transport Safety (PACTS) Fitness to Drive report 2016

Continue Reading

Trending

Copyright © 2019 World Wide Worx