Category Archives: data security

TREND. Data Security Standards for Motor Vehicles. Self Driving Cars. Autonomous Vehicles.

Are there data security regulations on cars?  Not so much

Is there any group proposing regulations? Yes, National Institute of Standards and Technology, a nonregulatory agency under the Department of Commerce

The Hill | Cyber official: Feds, companies need better dialogue on security of self-driving cars

FASTR. New Kid on the Block. Connected Car Data Security.

What is FASTR? The Future of Automotive Security Technology Research

What are FASTR’s goals? 

  • deliver precompetitive technological building blocks
  • to assist automotive manufactures across their supply chains
  • to offer multilayered security throughout vehicles to preserve data confidentiality, system integrity and system availability

What companies are members of FASTR?

  • Uber
  • Intel
  •  internet of things (IoT) provider Aeris
  • Rambus
  • Karamba Security

FASTR.org

SC Media | Uber, Intel and IoT…

5 Elements for Connected Car Legislation.

What elements do these groups need to consider in their recommendations for regulation?

  • identify what’s necessary to isolate critical systems in a vehicle from the rest of its software
  • relevant standards for firewalls and anomaly detection systems
  • techniques to prevent or discourage malicious intrusions
  • best practices for storing the data generated by connected cars
  • timeline for implementing all of this

Where did these criteria for connected cars come from? The  Security and Privacy in…

Contracting TREND. 3rd Party CyberSecurity for Self Driving Cars

The European Union Agency for Network and Information Security recommends  3rd party cybersecurity evaluations for self driving and connected cars. 

Why the need for 3rd parties? The current cybersecurity standards for vehicles is not enough.

Bonjour, new opportunities to provide cybersecurity evaluations…

The European Union Agency for Network and Information Security | Cyber Security and Resilience of smart cars

BUSINESS TREND. Ride Share Data = Boon for City Planners & Traffic Experts

The data trove: Movement, “a website that uses Uber’s data to help urban planners make informed decisions about our cities.”

3 Ways D.C. is using the data:

  • mitigate traffic congestion
  • improve infrastructure
  • street safety

Governing | Uber Starts Sharing Its Traffic Data With Cities

WIRED | Uber’s Mildly Helpful Data Tool Could Help Cities Fix Streets

1 Local Transportation Entity. 1 Ransomeware Attack Defeated. 3 Takeaways.

How did San Francisco’s Muni system stop a ransomeware attack that held its system hostage? In 3 steps:

  • Shut down electronics- opened fare gates & shut down ticket machines
  • Contacted Homeland Security
  • Relied on its technology team to restart the system from a backup

The success of Muni’s actions:

  • Friday night the electronic ticketing shut down, by Monday the system was up and running
  • No confidential information was obtained by the hackers
  • Muni never communicated with the hackers…

Car Hacked. Brakes Controlled. The Machines are Alive. The Machines are Winning.

Which car was hacked? Tesla Model S

Who did the hacking? Researchers

Does Tesla have a bounty program to report vulnerabilities? yes

What were the hackers able to control?  

  • sunroof
  • central display
  • door locks
  • braking system
  • activate the steering light
  • reposition the driver’s seat
  • windshield washers
  • open the trunk
  • fold in the side mirrors

PC World | Researchers hack Tesla Model S with remote attack

1 Key Element Missing from Self Driving Car Laws

Data Security is the 1 key element missing from the 7 states that have passed self driving car laws.

Cars can be hacked. Cars contain data. The data your car’s computers contain can be used for:

  • direct & targeted marketing
  • cam be accessed by hackers

California is addressing vehicle data via regulation by requiring:

  • notice and consent
  • before information can be collected from operators
  • this excludes information that is needed to operate the vehicle

The Guardian | Self-driving cars:…

INTERIM. TREND: Statewide CyberSecurity Ecosystems for States. Transportation Included. Get Up to Speed in 1, 2, 3…

What group is calling for improved state data security systems? National Association of State Chief Information Officers

What sparked the call to arms? the cost of cyber crime world wide is $375 billion to $575 billion, which is labled a threat to democracy

What do the NASCIO propose states do? Create statewide cybersecurity ecosystem 

What would a statewide cybersecurity ecosystem link? 

  • state government

  • local government

  • federal government

  • higher…