Cybersecurity in Software-Defined Vehicle (SDV) Architecture - Webinar

[@coltcorrea3075]

In this video there was a short talk about the Jeep hack and the hack happening at highway speed. I commented that the hack did not occur at highway speeds. This statement from me was wrong. I appologise. The hack at slow speeds enabled remote control of the steering. At highway speeds the vehicle WAS controlled in the sense it went into some limp home mode due to the hace but at slower speeds the park assist was able to be activated enabling no brakes and steering to be hacked. Sorry for my mistake.

[@unclebob5596]

Thanks, watched it together with your other videos on 10base-1ts and automotive ethernet and the big picture finally starts getting assembled in my head!

[@MooseOnEarth]

I watched the presentation live. I think the title is somewhat misleading as it is way too generic to describe the actual content. The presentation deals with the vehicle's communication architecture: basic component level authentication and some encryption mechanisms at the lower layers in the OSI layer stack in a car. But what it does not deal with is the actual *software* architecture of a software defined vehicle. Things like: programming languages used, compiled code/interpreted code/bytecode, static or dynamic linking of sw modules, memory management, memory protection, buffer overflows, cross site scripting, SQL injections, risks of embedded virtualization, attacking AI models, safe and secure software update processes, attacking processors supply voltages, trusted platform module, attacking real-time behaviour of software, attacking wireless communication, attacking software logs, malicious code, code complexity, data manipulation on storage devices, ... "Cybersecurity in SDV Architecture" is not just a topic in a book on Automotive Ethernet. The authors have a very limited focus here. They end with key management for keys on communication link encryption being difficult, but actually leaving a whole world of attacks and security measures at the sw level unconsidered.

[@IntrepidControlSystems]

Thank you for your feedback

[@coltcorrea3075]

Yes there are many aspects of Cybersecurity that resides outside the expertise and focus of Intrepid. Our company's focus is on the networks. Perhaps we can change the title to "Cybersecurity in Software-Defined (SDV) network Architecture".