For a better user experience please update your browser or use Chrome or Firefox browser.
Utilities
Publication detail
HomeENISA good practices for the security of smart cars
Publication metadata
This report defines good practices for security of smart cars, namely connected and (semi-) autonomous vehicles, providing added-value features in order to enhance car users’ experience and improve car safety. Taking stock of all existing standardization, legislative and policy initiatives, this report aims to serve as a reference point to promote cybersecurity for smart cars (connected and automated cars) across Europe and raise awareness on relevant threats and risks with a focus on “cybersecurity for safety”. The automotive industry is undergoing a paradigm change towards connected and autonomous vehicles. Smart cars already available today provide connected, added-value features in order to enhance car users’ experience or improve car safety. With this increased connectivity (that the emergence of 5G is expected to further promote) novel cybersecurity risks and threats arise and need to be managed. It is undeniable that there is a rapid pace when it comes to technological advancements in the area of connected and autonomous cars. With the emergence of semi-autonomous and autonomous cars, which make use of advanced machine learning and artificial intelligence techniques, the potential risks and cybersecurity challenges increase. Moreover, Vehicle-to-Vehicle (V2V) and Vehicle-to-Infrastructure (V2I) interfaces needed for the deployment of intelligent transport systems and autonomous cars, further exacerbate security risks since they largely expand the potential attack surface and attack vectors. With the increasing smart cars connectivity and the emergence of (semi)-autonomous cars, novel cybersecurity challenges, risks and threats are arising. Attacks targeting smart cars may lead to vehicle immobilization, road accidents, financial losses, disclosure of sensitive and/or personal data, and even endanger road users’ safety. Thus, appropriate security measures need to be implemented to mitigate the potential risks, especially as these attacks threaten the security, safety and even the privacy of vehicle passengers and all other road users, including pedestrians. It is therefore important to analyse the relevant threats and cybersecurity risks pertaining to smart cars and put forward security measures to address these risks taking into account the particularities of this highly complex, heterogeneous and volatile environment. Accordingly, this ENISA study provides the following information: - High level reference model of connected and autonomous vehicles. - Detailed asset and threat taxonomy for the connected and autonomous vehicles ecosystem. - Concrete and actionable good practices to improve the cybersecurity posture of connected and autonomous vehicles. - Mapping to existing legislative, standardization and policy initiatives to foster harmonization.
- Published:
- Corporate author(s): European Union Agency for Cybersecurity (EU body or agency)
- Themes: Land transport (road, rail) , Information technology and telecommunications
- Subject: computer crime , impact of information technology , information security , intelligent transport system , motor car , report , road safety
|
PDF
|
|||
| ISSN | ISBN 978-92-9204-317-9 | DOI 10.2824/17802 | Catalogue number TP-02-19-881-EN-N |
- Released on EU publications website:
Document viewer
Note:
The publication cannot be displayed in the document viewer. Open web version
You may access it from: Download and languages