Black­Berry cre­ates au­ton­o­mous car se­cu­rity frame­work

Black­Berry Ltd. has cre­ated a se­cu­rity frame­work to pro­tect au­ton­o­mous ve­hi­cles from cy­ber­at­tacks. The com­pany has made seven rec­om­men­da­tions.

Stockwatch Daily - - FRONT PAGE - Mr. San­deep Chen­nakeshu re­ports

BLACK­BERRY LTD. has laid out a rec­om­mended frame­work to harden con­nected and au­ton­o­mous ve­hi­cles against cy­ber­at­tacks. “Pro­tect­ing a car from cy­ber­se­cu­rity threats re­quires a holis­tic ap­proach,” said San­deep Chen­nakeshu, pres­i­dent of Black­Berry Tech­nol­ogy So­lu­tions. “Lev­er­ag­ing our ex­pe­ri­ence as a leader in cy­ber­se­cu­rity and em­bed­ded au­to­mo­tive soft­ware, Black­Berry has cre­ated a rec­om­mended frame­work to pro­tect cars from cy­ber­se­cu­rity threats. If fol­lowed, we be­lieve ve­hi­cles will not only be se­cure but Black­Berry se­cure.”

Within this frame­work, au­tomak­ers and their sup­ply chains can de­ploy their tech­nol­ogy choices to dif­fer­en­ti­ate.

Black­Berry’s rec­om­men­da­tion lever­ages the com­pany’s proven ex­per­tise in se­cu­rity and ac­counts for in­dus­try trends in con­nec­tiv­ity and au­to­mated driv­ing. The key points, out­lined in the white pa­per ti­tled “Cy­ber­se­cu­rity for Au­to­mo­biles: Black­Berry’s 7-Pil­lar Rec­om­men­da­tion,” are sum­ma­rized in this news re­lease. The full ver­sion of the white pa­per is avail­able on-line.

1. Se­cure the sup­ply chain: Es­tab­lish a root of trust by en­sur­ing ev­ery chip and elec­tronic con­trol unit (ECU) in the au­to­mo­bile can be prop­erly au­then­ti­cated and loaded with trusted soft­ware, ir­re­spec­tive of ven­dor or man­u­fac­turer. Scan all soft­ware de­ployed for com­pli­ance to stan­dards and re­quired se­cu­rity pos­ture. Con­duct reg­u­lar eval­u­a­tions of the sup­ply chain from a vul­ner­a­bil­ity and pen­e­tra­tion test­ing per­spec­tive to en­sure they are cer­ti­fied and “ap­proved for de­liv­ery.”

2. Use trusted com­po­nents: Cre­ate a se­cu­rity ar­chi­tec­ture that is deeply lay­ered in a de­fence-in-depth ar­chi­tec­ture, with se­cure hard­ware, soft­ware and ap­pli­ca­tions.

3. Em­ploy iso­la­tion and trusted mes­sag­ing: Use an elec­tronic sys­tem ar­chi­tec­ture that iso­lates safety crit­i­cal and non-safety crit­i­cal ECUs and can also “run-safe” when anom­alies are de­tected. Ad d iti o n ally, en­sure a ll com­mu­ni­ca­tion be­tween the elec­tron­ics in the au­to­mo­bile and the ex­ter­nal world are trusted and se­cure. Fur­ther, ECU-to-ECU com­mu­ni­ca­tion needs to be trusted and se­cure.

4. Con­duct in-field health checks: En­sure all ECUs have in­te­grated an­a­lyt­ics and di­ag­nos­tics soft­ware that can cap­ture events, and are able to log and re­port the same to a cloud-based tool for fur­ther anal­y­sis and to ini­ti­ate pre­ven­ta­tive ac­tions. More­over, au­tomak­ers should con­firm that a de­fined set of met­rics can be scanned reg­u­larly when the car is in the field, as well as be able to take ac­tions to ad­dress is­sues via se­cure over-the-air (OTA) soft­ware up­dates.

5. Cre­ate a rapid in­ci­dent re­sponse net­work: Share com­mon vul­ner­a­bil­i­ties and ex­po­sures among a net­work of sub­scrib­ing en­ter­prises so ex­pert teams can learn from each other and pro­vide ad­vi­sories and fixes in shorter time frames.

6. Use a life cy­cle man­age­ment sys­tem: Pro-ac­tively re­flash a ve­hi­cle with se­cure OTA soft­ware up­dates as soon as an is­sue is de­tected. Man­age se­cu­rity cre­den­tials via ac­tive cer­tifi­cate man­age­ment. De­ploy uni­fied end point pol­icy man­age­ment to man­age ap­pli­ca­tions down­loaded over the life­time of the car.

7. Make safety and se­cu­rity a part of the cul­ture: En­sure ev­ery or­ga­ni­za­tion involved in sup­ply­ing auto elec­tron­ics is trained in func­tional safety and se­cu­rity best prac­tices to in­cul­cate this cul­ture within the or­ga­ni­za­tion.

Black­Berry has de­vel­oped and is de­vel­op­ing in­no­va­tive tech­nolo­gies, tools, and ser­vices for each of these seven pil­lars. The com­pany will demon­strate its vi­sion for con­nected cars and au­ton­o­mous ve­hi­cles at the 2018 Con­sumer Elec­tron­ics Show in Las Ve­gas from Jan. 9 to Jan. 12 (Booth No. 7523, North Hall). For re­porters in­ter­ested in meet­ing with Black­Berry, please e-mail me­di­are­la­tions@black­berry.com.

About Black­Berry Ltd.

Black­Berry is a cy­ber­se­cu­rity soft­ware and ser­vice com­pany ded­i­cated to se­cur­ing the en­ter­prise of things. Based in Water­loo, Ont., the com­pany was founded in 1984 and op­er­ates in North Amer­ica, Europe, Asia, Australia, Mid­dle East, Latin Amer­ica and Africa.

Lau­rie Smal­done Al­sup, John S Chen, Michael Daniels, Ti­mothy Dat­tels, Richard J Lynch, Bar­bara Gayle Stymi­est, Vi­vian Prem Watsa

(BB) Shares: 536,307,360

Newspapers in English

Newspapers from Canada

© PressReader. All rights reserved.