Timeline for After EOL, can safety-critical systems be secured when connected to internet-connected components? [Automotive]
Current License: CC BY-SA 4.0
9 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Sep 21, 2021 at 9:20 | vote | accept | James | ||
| Sep 7, 2021 at 23:28 | answer | added | Polynomial | timeline score: 2 | |
| Sep 7, 2021 at 10:04 | history | edited | James | CC BY-SA 4.0 |
Corrected CAN Bus terminology
|
| Sep 7, 2021 at 9:55 | comment | added | James | @SteffenUllrich Good point about the possibility of aftermarket non-vendor parts and/or firmware. The issue might be akin to someone tampering with the brake lines on someone else's car; locking it in a garage would be a generic solution. The cyber-physical issue is really that the "locked garage" has become more accessible and less secure. If a bad actor could crack into one set of brakes, every car with that vulnerability could have their brakes disabled. | |
| Sep 7, 2021 at 9:30 | comment | added | James | @Robert Agreed that this is a gross simplification (usually there are multiple standard CAN busses and an EtherCAN bus). In cars from at least two different manufacturers, safety-critical components of this CAN Bus system are reachable and can be manipulated via the entertainment system, albeit indirectly. | |
| Sep 6, 2021 at 18:21 | review | Close votes | |||
| Sep 22, 2021 at 3:06 | |||||
| Sep 6, 2021 at 18:17 | comment | added | Robert | Typically safety critical components and entertainment components don't use the same CAN bus. Not only for security reasons but also for speed reasons, as entertainment data requires a higher bandwidth and therefore use a faster CAN bus (or do you know a car manufacturer that is so stupid and places all these components on the same CAN? | |
| Sep 6, 2021 at 18:01 | comment | added | Steffen Ullrich | Is this cyber-physical issue really so much different from other physical issues with the car? How can one safely operate a car if the brakes are broken but the vendor has stopped providing support and is not providing any kind of replacement parts? There might be an aftermarket providing non-vendor parts and there might be an aftermarket for fixed firmware. But there is no generic way to fix this as much as there is no generic way to fix the brakes. | |
| Sep 6, 2021 at 17:48 | history | asked | James | CC BY-SA 4.0 |