The nature of the past year’s vehicle security incidents (ex: SiriusXM, MyHyundai/MyGenesis, and VW ID.4 back-connect) makes clear that the developmental focus of internal combustion and electric automobiles has to expand beyond transportation considerations alone and must now include defending against various attacks targeting vehicle software. The impact of vehicle security incidents is not limited to just car owners but impacts everyone in society. Evolving consumer expectations vis-à-vis vehicles are driving automotive manufacturers to transform themselves into software developers. This trend has converted automobiles from engines with wheels to computers with wheels, whereby the functionality of these vehicles depends on increasingly complex software, resulting in Software Defined Vehicles (SDV). This is accompanied by new risks in the software development process. In light of this, a new tool is needed to measure risk - the Software Bill of Materials (SBOM). In this talk, I discuss the role played by SBOM in vehicle security, how it can help the vehicle industry develop safer vehicles, and potential problems that may come in its wake.
CYBERSEC 2023 uses cookies to provide you with the best user experience possible. By continuing to use this site, you agree to the terms in our Privacy Policy .