McAfee Report: Vehicles Exposed Due to Lack of Security

A report warns that the automotive industry should focus more on the security of electrical systems installed in cars.

“Caution: Malware Ahead” is a first-of-its kind report, made by McAfee in partnership with Wind River and ESCRYPT.

The purpose of this study is to raise the awareness of the automotive industry about the potential dangers behind the embedded devices used in most automobiles parts. Airbags, anti-lock braking systems, electronic stability control and autonomous cruise control are just a few of the components which could malfunction due to outside tampering, thus risking the wellbeing of those inside the vehicle.

Senior Vice-President and General Manager at McAfee, Stuart McClure, said that “As more and more functions get embedded in the digital technology of automobiles, the threat of attack and malicious manipulation increases.”

“Many examples of research-based hacks show the potential threats and depth of compromise that expose the consumer. It’s one thing to have your email or laptop compromised but having your car hacked could translate to dire risks to your personal safety,” he stated.

In the rush to add new characteristics, security has been overlooked in this industry, according to the report. Features like internet access from inside the vehicle increase the risk of the car's electrical systems being overtaken by a third party.

Other technologies mentioned are related to the ability to remotely start, stop or unlock a car, the possibility of tracking a driver's locations and activities, and the theft of information using Bluetooth systems.

Wind River executive, Georg Doll, added that “The auto industry is experiencing a convergence of consumer and automotive electronics. Consumers are increasingly expecting the same experiences in-vehicle as they do with the latest connected consumer and mobile devices. However, as the trend for ubiquitous connectivity grows, so does the potential for security vulnerabilities.”