In the movies, spy agent James Bond saves the world with the help of modern cars. But in real life, agents could be using our vehicles as espionage tools, something that new regulations seek to stop.
The United Nations and the European Union (EU) have realized this risk. Therefore, UN regulations R155 and R156, relating to cybersecurity and associated software updates, will impose greater requirements on automotive companies and their suppliers. The measure will begin to be applied in the EU from July 7 of this year.
Spy machines with four wheels
In an interview with the German business newspaper Handelsblattresearcher Moritz Schularick explained the relevance of cybersecurity in transportation and called it a “national security issue.”
“This is sensitive data that can be stolen, even in electric cars. From the point of view of the intelligence services, with their numerous sensors and cameras, they are nothing more than spy machines on four wheels,” he said.
In December 2023, at an event organized by the Helmut Schmidt Foundation and DW in Berlin, Schularick said: “These cars driving on the streets of Berlin film everything that happens around them and transmit it to their companies, including their parent companies. in China”.
And he asked: “Is that what we want? Do we want the millions of eyes and ears of a foreign government on our streets?”
The spies are already here
The study Automotive Cyber Security published in March 2024, which was guided by the Center of Automotive Management (CAM) in cooperation with the company Cisco Systems, demonstrates how with the increasing interconnection and digitalization of automobiles, production and logistics, the risk of cyberattacks increases in this industry.
“Cyber threats in the automotive industry continue to increase. With the distribution of software-defined vehicles, electromobility, autonomous driving and the networked supply chain, cyber risks continue to grow,” summarized Stefan Bratzel, director of the study and of the CAM.
The study uses examples to show how vulnerable the industry is. Two years ago, the world’s largest automaker, Toyota, had to stop production because a supplier was affected by “a suspected cyberattack.”
Tesla also suffered a cyber attack in March 2023. Hackers took control of a vehicle and were able to perform various functions. For example, they honked the horn, opened the trunk, turned on the lights, and manipulated the infotainment system.
Industry measures
Some car makers are recalling models, in part because of the new rules. For example, Volkswagen will stop producing the small Up and the T6.1 multivan. Meanwhile, Porsche’s Macan, Boxster and Cayman models will only be exported with “combustion engines”, according to the German agency DPA. For their part, Audi, Renault and Smart will also stop manufacturing old models.
Volkswagen CEO Thomas Schäfer told DPA that the decisions were justified by the high demands of the new standards: “Otherwise we would have to integrate a completely new electronic architecture. That would simply be too expensive.”
“The cornerstone” of the German economy
Rival Mercedes-Benz appears to be better prepared. Company spokesperson Juliane Weckenmann told DW that the “regulation does not affect the Mercedes-Benz portfolio,” as “all of our architectures meet the requirements and are or will be certified according to UN regulations R155/R156.” “.
Christian Korff, member of the board of management of Cisco Germany and CAM customer, concludes: “The automotive industry is a cornerstone of our economy. We must not allow ourselves any vulnerabilities in the cyber sphere. Only those who offer secure vehicles and services in all levels will be able to maintain the trust of their customers.
(ju/rml)
