While states such as California and Nevada have begun passing legislation establishing guidelines for the self-driving vehicle technology being developed by Google and several auto manufacturers, some computer experts and others have begun to question the security of technology already installed in present-day vehicles. Representatives from the National Highway Traffic Safety Administration recently released a statement acknowledging that the potential exists for hackers to exploit high-tech features installed in modern vehicles, especially those equipped with Bluetooth connectivity, but also stating that the federal auto regulation agency is unaware of any real-world situation in which such a vehicle cyber attack was successfully carried out.
Technology experts continue to voice concerns, however, citing examples such as a 2010 case in which the former employee of an auto dealership allegedly remotely disabled the starters and global positioning systems in several vehicles purchased from the dealership. Studies conducted by researchers at several universities including the University of Washington and the University of California at San Diego, have determined that late model vehicles are vulnerable to cyber attacks that could potentially compromise the functionality of components including the speedometer, the braking system, even in vehicle entertainment accessories. These attacks could be launched, researchers found, through mechanic’s diagnostic tools, and even FM radios or specially programmed compact discs. Furthermore, vehicles equipped with connectivity features such as Bluetooth enabled hands-free cellular communication devices or satellite-assisted navigation systems are even more vulnerable to security exploits and cyber attacks.
Cyber security advocates have expressed doubts that these sorts of attacks can be prevented through government regulation, due to the rapidity with which new threat develop and new vulnerabilities are discovered and exploited, along with the NHTSA’s inexperience with establishing guidelines for networking security. Many experts including representatives from the National Academy of Science, speculate that the NHTSA typically waits for a real safety risk to become known before attempting to introduce regulations to prevent or reduce it. While the federal regulation agency has yet to establish guidelines for vehicular networking security, representatives say the NHTSA is currently conducting research studies on the subject to determine the most effective course of action. The NHTSA’s proposed budget for 2013, for example, earmarks $10 million for the study of cyber security risks and their impact on automobile safety.
A study conducted by the National Academy of Science concluded that the NHTSA would benefit from consulting the Cyber Crime Center at the U.S. Defense Department for advice on preventing vehicular networking security risks. While officials acknowledge that the process of assessing security threats of this nature will be a long one, developing after the advance of new technology, safety advocates warn that cyber attacks, if not prevented may lead to significant danger as cars become increasingly connected.
