Protecting Autonomous Vehicles and Connected Services with Software Defined Perimeter
2 likes539 views
The webinar discusses the protection of autonomous vehicles and connected services through a software-defined perimeter (SDP) approach. Key topics include the evolution of the automotive industry, various cyber attack vectors, the necessity for secure enclaves, and the advantages of implementing a closed-loop security architecture. The session highlights that while the connected ecosystem presents potential risks, proactive measures can mitigate cybersecurity threats.
Protecting Autonomous Vehicles and Connected Services with Software Defined Perimeter
- 1. 1www.movimentogroup.com Protecting Autonomous Vehicles and Connected Services with Software Defined Perimeter November 7, 2017 Live Webinar Series
- 2. 2www.movimentogroup.com Session Host Guest Speaker Follow me on Mahbubul Alam CTO & CMO Movimento Group Follow me on Junaid Islam CTO & Founder Vidder Mahbubul Alam is an international entrepreneur, technology and business executive with broad management experience. A frequent author, speaker and multiple patent holder, he currently holds the position of CTO/CMO at Movimento, a Delphi company, reinventing the company’s technology and strategy. He has been honored with the ‘2016 Bay Area CIO of the Year’ award finalist by the Silicon Valley Business Journal and the San Francisco Business Times. Junaid is a well known cybersecurity expert with 30 years of networking and security experience. He is the CTO of Vidder which is the leading provider of SDP-based secure systems. In addition to his work in the private sector, Junaid also supports a number of US national cybersecurity initiatives.
- 3. 3www.movimentogroup.com Agenda Ø Industry Direction Ø Cyber Attack Vectors Ø Automotive Cyber Risk Ø Secure Enclave Design Ø Software Defined Perimeter Ø Key Takeaways Ø Q&A
- 4. 4www.movimentogroup.com The Evolution of the Automotive Industry 2000 20302015 Past Future Ø Thousands of Transistors Ø 100 Thousands Lines of Code Ø Manual Diagnostics Ø Limited Connectivity Ø Digital Radio Services Ø Basic HMI Ø No Cyber Threats Ø Billions of Transistors Ø 100 Millions Lines of Code Ø Automated Diagnostics Ø Moderate Connectivity Ø Apps Integration Ø Limited Virtual Assistance Ø Basic Cybersecurity Ø Quantum Transistors Ø Billions Lines of Code Ø Self-Diagnostics Ø Integral Connectivity Ø Connected Services Ø Cybernetic Ø Default Cybersecurity
- 5. 5www.movimentogroup.com Industry Direction: Connected Services Ecosystem OEM / RETAIL / FLEET PLATFORM CUSTOMER VEHICLE Flow of Data Flow of Money DATA CONSUMERS • Vehicle information database • Multi-module OTA update • Secure content delivery • Big Data capture • CT-EDGE data methods • Highly configurable acquisition logic • Data Strategy alignment with Business Value • Fleet management 3RD PARTY DATA EXCHANGE Unlocking The Turnkey Monetization Opportunities externalinternal D e l p h i ( A P T I V )
- 6. 6www.movimentogroup.com Connected Ecosystem Telematics Machine Learning 100+ ECU/Sub-systems connecting to Frontend & Backend Applications. Frontend Apps Backend Partners Ecommerce OEM
- 7. 7www.movimentogroup.com Connected Ecosystem Multiple identities and entitlements inside and outside the vehicle. Bi-directional communications from different processes. Backend partners communicating with in-vehicle systems.
- 8. 8www.movimentogroup.com Attack Vectors Location Spoofing Laterally Moving Malware OTA Re-Tasking Credentials Theft DNS Spoofing Connected Services Exploitation
- 9. 9www.movimentogroup.com Potential Outcomes Vehicle Theft Hijack/Ransom Terrorism Data Theft Poor Operation Non-Operation
- 10. 10www.movimentogroup.com Cybersecurity Challenges Autonomous Vehicles are in a state of constant upgrades. New applications (e.g. car sharing) will add to the complexity. Global supply chain provides many points of entry for cyber- attacks.
- 11. 11www.movimentogroup.com Secure Enclave Security Model Secure Enclaves utilize dedicated connectivity to a trusted compute environment Frontend Apps Backend Partners Telematics Machine Learning Ecommerce
- 12. 12www.movimentogroup.com Software Defined Perimeter Ø Control channel based architecture Ø Attribute based access control Ø Attestation & federated identity Ø Edge-based forwarding Ø Multi-protocol support Ø IPv4/IPv6 addressing SDP Gateway SDP Client SDP Controller SDP Gateway SDP Gateway IdentityAttestation Policy
- 13. 13www.movimentogroup.com SDP Enables Secure Enclaves Ecommerce SDP Controller SDP Client SDP Gateway Hardware Identity Software Attestation Service Plan
- 14. 14www.movimentogroup.com SDP Enables Secure Enclaves Hardware Identity Software Attestation Service Plan SDP Controller SDP Client Ecommerce SDP Gateway
- 15. 15www.movimentogroup.com SDP Enables Secure Enclaves Vehicle Identity Driver Identity Service Plan SDP Controller SDP Data Channel SDP Client Ecommerce SDP Gateway
- 16. 16www.movimentogroup.com SDP Connected Ecosystem Telematics Machine Learning SDP enables us to partition networks, manage connectivity and enforce security policies Frontend Apps Backend Partners Ecommerce SDP Gateway SDP Gateway SDP Gateway SDP Gateway SDP Gateway SDP Client Policy
- 17. 17www.movimentogroup.com Movimento Client Content Delivery Infotainment Service App Store Software Updates OTA SDP Client OEMs Tier-1 Suppliers Service Providers Content Providers Goal: Secure Closed Loop Architecture SDP Secure Over-The-Air Delivery Secure Over-The-Air Data Movimento Unified OTA Cloud Platform App Delivery OTA Software Updates Infotainment Service Management Content Delivery Software Management Big Data Cyber Security
- 18. 18www.movimentogroup.com Key Takeaways Connected ecosystem foundational to future. Multiple cyber attack vectors must be mitigated. Secure enclaves are an ideal security model. Software Defined Perimeter enables secure enclaves. Proactive security requires closed-loop architecture.
- 20. 20www.movimentogroup.com Securing the Software Defined Car™ Using Artificial Intelligence and OTA Updates Date: Tuesday | 14 November, 2017 Time: 8 AM PST / 11 AM EST / 5 PM CET / 9:30 PM IST Saving Lives Using Artificial Intelligence and Context-based Automotive OTA Software Updates Date: Tuesday | 5 December, 2017 Time: 8 AM PST / 11 AM EST / 5 PM CET / 9:30 PM IST Upcoming Webinars