Roke and Ricardo have launched a digital resilience vehicle assessment and benchmarking process. Their aim; for vehicle manufacturers to make their future products comply with any cybersecurity law.
As the firms say, vehicles are integrating connectivity and automation; however, the complexity of the on-board electronics within the connected systems means they’re also vulnerable to cyber-attack. Impending regulations from the United Nations Economic Commission for Europe (UNECE) may include mandatory audits of each manufacturer’s cyber-security management system, and a verification process to demonstrate that new vehicles have been appropriately engineered with relevant risks identified, analysed and mitigated.
Hence Roke and Ricardo’s new digital resilience service as an independent assessment, consistent with recommendations of the 5StarS vehicle assurance framework. Three levels of assessment are available, recognising that not all vehicle manufacturers will require the same.
– Baseline: Identifies and categorises exploitable potential vulnerabilities relative to the complexity of the vehicle. The testing boundary for the baseline is considered to be the ‘as sold’ vehicle.
– Enhanced: The testing boundary is the same as the Baseline service, but the testing is used to exploit identified vulnerabilities to assess the potential impact of a successful breach. Original Equipment Manufacturer (OEM) backend servers and applications may also be analysed.
– Bespoke: Tailors the level and detail of analysis to the client’s precise requirements.
In each case, the service aims to provide guidance on how identified vulnerabilities can be addressed through immediate and cost-effective remedial actions.
Neil Gladstone, Commercial Director at Roke, said: “We want to help consumers start choosing their cars on the basis of security, as well as long-established criteria like safety and fuel economy. To ensure tomorrow’s drivers can enjoy the benefits of digital services like navigation, collision avoidance, predictive parking and new applications, our digital resilience service provides a set of rigorous tests designed to maintain consumer confidence and peace of mind, by confirming that they are resilient to network attack.”
And Ian Penny, commercial director for Ricardo Automotive & Industrial, said: “The digital resilience service now offered by the Roke and Ricardo partnership is a major step forward in helping vehicle manufacturers ensure their existing and future products are digitally secure. Through this service we aim to give vehicle manufacturers confidence that their products are compliant and cyber secure against known and likely future threats, so that drivers’ data, security and safety can be appropriately protected.”
Visit: https://digitalresilience.info/. Roke and Ricardo began partnering in 2017 when the companies began to provide a ‘one stop shop’ in designing cyber secure systems and infrastructure for the transport sector.
