Today’s mid-size family SUV is not just a vehicle, but has become a mobile computer on wheels. It consists of 50 to 100 electronic control units (ECUs), kilometers of CAN wiring and millions of software codes. The car is constantly connected to the company’s servers with the help of a modem connected to the Internet. For this reason, features like starting the engine, turning on the AC, viewing GPS location and door lock-unlock are available through a smartphone app.

But with these features the risk of hacking has also increased. Hackers can use routes like mobile apps, wiring, smart keys and diagnostic ports to target cars.

How are hackers targeting connected cars?

Attack from mobile app and company server: Systems like Hyundai BlueLink, Tata iRA, Mahindra Adrenox, Suzuki Connect and MG i-Smart connect the car to the company’s cloud servers. If their API lacks security, hackers can try to access the car’s features like location, doors and horns.

Tampering with CAN wiring: Various parts of the car are connected to the CAN network. Hackers can send fake signals by accessing headlight or bumper sensor wiring. With its help, car locks and immobilizers can be targeted.

Smart Key Signal Steal: In a relay attack, two thieves use the device to send a signal from a smart key kept in the house to the car. The car detects that the key is nearby and unlocks.

Misuse of OBD-II Port: Through this port located under the dashboard, a thief can try to program a new key and change the immobilizer settings by connecting a special device.

Can even the control of a moving car be hacked?

It is not easy to sit at a distance and hold the steering and brakes like in the movies. Important components like infotainment system and brake-engine are kept separate in new cars. Between them is a central gateway firewall, which blocks suspicious commands. Currently the real threat is car theft, surveillance of personal information and unauthorized access.

Rules for Car Safety in India

Standards like AIS-189 and AIS-190 have been introduced in India. AIS-189 mandates cyber security related arrangements for car companies. This includes secure hardware, communications and threat detection. AIS-190 takes care of protecting software updates, so that OTA updates cannot be tampered with.

How can car owners keep their vehicles safe?

Keep the smart key in a Faraday pouch at home, so that its signal does not leak out.
Install a steering or pedal lock to make theft difficult
Install a lock on the OBD-II port, so that no stranger can tamper with it.
Have strong password and biometric authentication in car apps
Use plug-and-play connectors instead of cutting wires when installing dashcams or other accessories
Update the car software from time to time

One spark and the loss of thousands! Do these things to protect your car from firecrackers on Diwali.