Securing connected vehicles with Digital Security by Design technologies, a market demonstrator and study.

With the Digital Security by Design (DSbD) programme seeking business led demonstrators, an automotive focused project is essential: road vehicles are becoming increasingly software-based and connected and the impact of cyber security is obvious as breaches can result in risk to life, serious injury or massive financial penalties. For example, in September 2021 Elon Musk said that a fleet wide hack of Tesla would be "the end of Tesla". The 2016 Jeep cyber attacks are reported to have cost vehicle manufacturers up to $1 billion and security researchers have demonstrated taking over braking functionality from drivers.

We will therefore demonstrate and review the use of DSbD technologies for cyber critical and safety critical applications in the automotive sector. Specifically, four connected vehicle use cases will be developed and tested. They have been selected as they vary in safety and time criticality and therefore demonstrate the versatility of DSbD. For each, the impact of DSbD technologies on security, safety and performance will be assessed.

* Over-the-air software updates. Cyber-critical. Not safety-critical. Timeliness \\\> 1hour.
* Vehicle diagnostic data sent from vehicle to cloud. Cyber-critical. Not safety-critical. Timeliness < 1 minute.
* Traffic or accident ahead advisory sent from road infrastructure to vehicle with acknowledgment from vehicle (Vehicle to Infrastructure "V2I"). Cyber-critical Safety-critical. Timeliness 1-3 seconds.
* Remote control and teleoperation of vehicle. Cyber-critical. Safety critical with possible risk to life. Timeliness <50 milliseconds.

Go-to-market routes for future DSbD based products and services in the automotive sector will also be assessed with the consortium working directly with Original Equipment Manufacturers and their supply chains. This will include a review of how DSbD technologies for automotive applications fit within the emerging regulatory environment for vehicle cyber security and the existing requirements for vehicle safety systems.

Cyber security is an area of high focus and activity for the automotive industry. There is active discussion on hardware and software solutions which improve cyber resilience with OEMs and their supply chain and on routes to commercialisation. By means of a comparative trial, this project will provide evidence of DSbD technologies supporting a step change to vehicle-based cyber security and has the potential to lead to mass adoption by OEMs. Success will promote the application of DSbD within automotive applications and provide real commercialisation opportunities which improve security and safety.