With the rapid evolution of automotive technology, modern vehicles loaded with sophisticated features like remote sensors, voice command, Bluetooth and Wi-Fi have become ubiquitous, offering not only vital comforts but also increased connectivity while on the move. However, amidst the conveniences, experts are cautioning about a worrying aspect: the vulnerability of these connected vehicles to cyber attacks.
Plenty of vehicles on the roads today are equipped with an extensive array of microchips and state-of-the-art software. These, while enhancing functionality exponentially, may also serve as a potential gateway for hackers, explains Robert Falzon from Checkpoint Canada.
In this digital age, automobiles constantly gather a gamut of data including speed, location, and altitude, and use sophisticated algorithms to process them. Their design and features were rolled out with consumer needs in mind; however, their security aspects were often overlooked. Consequently, they can serve as a vault of sensitive information for cyber criminals.
Statistical data from a study by Upstream reveals a stark trend: Remote hacking attacks, exploiting Wi-Fi, Bluetooth and connected networks, have consistently outpaced physical attacks between 2010 and 2021, accounting for 85% of all cyber breaches. This number rose to 97% in 2022—a testament to the increasing vulnerability of connected vehicles.
Potential threats include not only theft of sensitive data but also unauthorized control of key systems like steering and brakes. A scenario painted by AJ Khan, founder of Vehiqilla Inc., outlines a hacker locking the doors of a moving car, manipulating its speed and demanding ransom.
While all internet-connected vehicles are susceptible to such attacks, Khan points out the distinct vulnerability of electric vehicles. A 2022 study by Concordia University unveiled serious security flaws in electric vehicle charging stations across Canada, exposing drivers, power stations, and the connected power grid to potential breaches. Furthermore, the study revealed that many third-party mobile apps used to connect with the charging stations were rife with security holes.
“Cybersecurity was an afterthought,” notes Prof. Chadi Assi from Concordia University, explaining that infrastructure was rapidly deployed without giving due consideration to potential security threats.
Highlighting a specific vulnerability, Assi points out that the protocol used for communication between the cloud management system and the charging stations may not be encrypted, leaving sensitive information like payment details exposed to theft.
The consequences of a compromised charging station are far-reaching—affecting not only individual users with the potential leak of their private information but also the grid itself. If a hacker orchestrates and synchronizes multiple charging stations, the power grid could be destabilized.
These concerns have been flagged to manufacturers. In 2021, a global standard was established to guide automakers in managing cybersecurity risks, including aspects like software, electronic control units, and potential points of attack such as Wi-Fi and Bluetooth.
Automakers are upping their cybersecurity game, but it is a relentless pursuit to stay ahead of the hackers. A single weak spot in the system, once exploited, can grant them access to other connected vehicles.
Despite the intent to increase safety measures, the challenge of consumer awareness remains. As Khan puts it, it is essential that just as we enquire about safety features such as seatbelts and airbags, we also question the cybersecurity measures in place when purchasing a vehicle.
Knowledge of the vehicle’s software and updating it regularly, awareness of privacy protection, and caution during the use of third-party apps are advised. Burrows, a longtime electric vehicle user, asserts awareness of the risk but is not deeply concerned. However, he admits the changing dynamics may warrant a reevaluation of risks as autonomous vehicles become mainstream.
By being vigilant about threats, asking the right questions, and staying updated, consumers can improve the security of their vehicles while enjoying the conveniences of modern technology.
