back to article IBM wants to harden your 'data centre on wheels'. Yes, your car

IBM is developing a security stack for connected cars as part of a wider strategy to secure vehicles against a growing range of hacking attacks. Some describe modern cars as computers on wheels but for Martin Borrett, CTO IBM Security Europe the range of communication options (Bluetooth, 3G) and range of embedded computing …

  1. adnim

    Do

    vehicles really *need* to communicate with the manufacturer? I can understand the advantages for the manufacturer. However, until the manufacturers can guarantee 100% security and total privacy I feel the risk by far outweighs the benefit to the driver.

    My car manages to drive perfectly well without this feature. I really don't see why everything has to be connected to some kind of network, private or public. Should I ever own a "connected" vehicle I will harden it myself... By removing its ability to communicate.

    1. Ian Michael Gumby
      Boffin

      @Adnim, Re: Do

      "Do vehicles really *need* to communicate with the manufacturer? "

      Yes and no.

      For commercial vehicles, the answer is yes. They need to be able to communicate with the fleet management company as well as feedback information to the manufacture / dealer. Of course the feedback is two different types. One needs to know the location to make sure the driver is where he is supposed to be and is doing his job. The other needs to monitor the engine and other elements of the car in order to determine alerts and service calls.

      The manufacturer can take the information over a series of vehicles and determine how a specific engine is handling. (This is a good example of IoT and Big Data.)

      The downside is that they can also capture data like the routes, times and distances driven. Also along with your driving patterns. That would be a bit invasive. (Just like those who use Uber all the time... never use them for a booty call, or an extra marital affair...)

      The third issue is safety and security. OnStar alerts if the airbag is deployed or some other emergency occurs.

      Fourth, software updates done automatically. So you don't have to go in to the repair shop to get a software update to your engine.

      But the larger problem... Tying the wifi and hotspot features in to the controls of the car. (e.g. remote stop or remote control of the car by a law enforcement agency.) That's a bit scary because of hacking concerns.

      There are other advantages ... e.g using your car to monitor traffic. This could be a good idea because the car's navigation could automatically alert you to traffic jams ahead and suggest alternate routes.

      Do you need this? No, you need air, water, food and shelter. Is it a nice to have? Sure, if they can stop hackers from taking over the car.

      Do you trust Microsoft or IBM? Not so much... I would hate to have to have my car stall out and reboot in the middle of the 101 during rush hour.

  2. Efros

    "harden your 'data centre on wheels'"

    Few tattoos, couple of cheek scars and a decked out Escort XR3 no doubt.

  3. Chris G

    Google,Fartbook,TLAs is that you

    Somehow the cynic: in me just sees, this as a new source monetised data to slurp.

    Maybe Ford or one of the other manufacturers wiill become the new Google on wheels.

    There must be a lot of valuable telemetry and other dat that period people would pay for.

    1. Ian Michael Gumby

      Re: Google,Fartbook,TLAs is that you

      There is nothing new here in terms of monetizing the data.

      Traffic.com did this voluntarily.

      Google's Android... automatically, no opt in or opt out. Your phone already spies on you.

      So now you have to buy a data plan for your car.

  4. Anonymous Coward
    Anonymous Coward

    My experience of IBM software is that it generally has attack footprints the size of a small country.

    Looking forward to seeing them change their ways.

  5. Howard Hanek
    Holmes

    Right

    My Japanese car built with electronics made in China? Shipped by an Indonesian flagged vessel? Harden THAT car?

  6. Cynical Observer
    Megaphone

    Data on the move

    I've just gained a whole new understanding of the phrase "Data Tank"!

    Oooh... I know what I want for Christmas.

  7. redpawn

    I want air gap

    By air gap I don't mean though the cell network. All input to the computer should be wired. My sound system can connect to blue tooth and and the cell network but should have no connection to the computer or any control systems, not even the windows.

    Data from subsystems should be encrypted if sent over air and the data screened carefully before import. For instance the tire pressure sensors should not be able to gain access to the computer other than to report pressure.

    I do not want the spy happy Onstar or remote ability to kill or control my car even if stolen. The security for those functions is far too poor as demonstrated by White Hats.

  8. Dan 55 Silver badge

    Turns key in ignition...

    ... -45103 Car will not start. Retry operation.

  9. allthecoolshortnamesweretaken

    IoT on wheels, what could possible go wrong...

    FWIIW, the D&G link is actually in english.

    From the IBM 'executive report': "Each component and system should be designed with security as a first-order requirement."

    Yes. Yes they should.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Other stories you might like