More Horsepower with the Click of a Download
needs to be used for software as well, when the software failure would be impacting critical
systems. Automotive Safety Integrity Level D (ASIL-D), for example, refers to the highest
classification of initial hazard (injury risk) defined within ISO 262623 and to that standard’s most
stringent level of safety measures to be applied to avoid an unreasonable residual risk.
2.2
Car Management = Mobility Management
Modern cars are mobile devices on wheels, underpinned by systems of many devices on wheels
that contain dozens and even hundreds of Electronic Control Units (ECUs) which amongst them
run a hundred million lines of code and are connected via vehicle bus systems and gateways. One
endpoint of the busses is the Onboard Diagnostic Port (OBD II), which can usually be found under
the steering wheel. The electronics in cars significantly contribute to R&D and production costs
and, as mentioned before, there is not much reuse in this area. Functionalities such as Navigation,
real time traffic information, Calendaring, and email have over the years been added to the Head
Unit which in the early years were only extensions for the radio and audio systems. This also
explains why these systems are so vulnerable as soon as they connect to the Internet. Software
code for the above-mentioned functions has been added incrementally to an already monolithic
software system and therefore creates a large attack surface4. Without a complete, secure and
modular redesign of the Head Unit software, the best approach for a solution today is to secure
the connection from the vehicle backend to the car in the same way it is done on mobile devices;
with a vir X[