Issue link: https://maltatoday.uberflip.com/i/667669
maltatoday, SUNDAY, 17 APRIL 2016 VIII Motoring TECH company Harman, supplier of infotainment systems to brands such as Mercedes-Benz, BMW and Porsche, has launched new software to tackle the increas- ing threat of car hacking, having acquired two software security companies. The purchase of Towersec and Redbend means their technology contributes to Harman's new '5+1 cyber security framework', which provides five layers of protection against attack, from the hard- ware level right up to the vehicle network. Harman's director of tech- nology marketing, Hans Roth, said: "As we move forward towards autonomous driving, cars require more built-in con- nectivity embedded deeply into the car, so cyber security has become a priority." Towersec, a specialist in 'intrusion prevention', has developed software to protect military weapons systems from hacking, as well as two automotive software products, ECUshield and TCUshield. TCUshield prevents unwanted wireless connections with a vehicle's TCU (telematics connecting unit), while ECUshield detects and prevents attempts to hack into a vehicle's ECUs (elec- tronic control units) or the network connecting them. "There could be as many as 120 ECUs in a modern luxury car," said Roth. Redbend has developed OTA (over the air) technology to update a car's security systems remotely. All three are offered as part of the 5+1 framework. Its flexible nature allows car makers to choose which elements of it they wish to use. "Some may substitute another method for one or more layers," said a spokes- man. For example, one manufac- turer has adopted the Redbend OTA system for remote software updates so far, although it is not yet being used to update security systems. ECOshield and TCUshield in- clude an algorithm that can "spot an attack without knowing the method of attack up front", said the spokesman. Unlike PC antivirus software, which must be updated continual- ly with lists of viruses, Towersec's algorithm recognises authentic data in the Controller Area Net- work (CAN — the car equivalent of an office computer network), treats any it doesn't recognise as a threat and tells the car not to use it. This prevents unwanted instruc- tions given to a car from the outside from taking effect, even if hackers manage to connect to the car in the first place. The news comes as US authori- ties, including the FBI, issued a warning to "manufacturers — of vehicles, vehicle components and aftermarket devices — to maintain awareness of potential issues and cyber security threats related to connected vehicle technologies in modern vehicles". Hacking a Jeep Cherokee American software experts Charlie Miller and Chris Valasek made headlines last year by hacking a Jeep Cherokee via the mobile phone network. The demonstration resulted in Fiat Chrysler recalling 1.4 million cars thought to be vulnerable to attack. Miller and Valasek were able to connect to a communications chip in the Jeep's infotainment unit — ironically, a Harman Ucontrol system designed some years previously. From there, they were able to access the Jeep's Controller Area Network and some crucial functions. At the Def Con hacking confer- ence in Las Vegas, Miller said it was a "super difficult" task that took three and a half months to complete. The pair also had full access to the header unit and other areas of the Jeep, which they purchased for the experiment. According to the FBI, the pair could shut down the engine, dis- able the brakes and control the steering below 10mph. At any speed, they were able to operate less crucial functions, such as the door locks, turn signals, the radio and GPS. Some technology has left today's cars vulnerable to attack. CAR LOAN With a Car Loan from Banif Bank, getting behind the wheel has never been easier. And I can sit back and enjoy the ride while Banif secures my current lifestyle. Personal Loans Plus Protection include an insurance cover taken out by the Bank in its name to protect myself and my loved ones in case of unforeseen circumstances. BELIEVE: IT'S ALL ABOUT THE JOURNEY PERSONAL LOANS PLUS PROTECTION rates from 5 % p.a. * * The loan is subject to the Bank's lending criteria. 'Personal Loans Plus Protection' incorporate an insurance cover that protects clients in case of accidental death, temporary or permanent total disablement or redundancy. Banif Bank (Malta) plc shall be the policy holder. Details relating to the policy are available on the Bank's website (banif.com.mt). A typical example is based on a loan of ¤10,000 repayable through monthly instalments of ¤126.93 over a period of 8 years at a variable interest rate of 5% p.a. Loan is subject to an administration fee of 4% on the monthly instalment. The total sum payable throughout the term of the loan is ¤12,672.96, with an APR of 6.57% p.a. Banif Bank (Malta) plc is a credit institution licensed to undertake the business of banking by the MFSA in terms of the Banking Act 1994. Registered in Malta C41030 – 203, Level 2, Rue D'Argens, Gzira, GZR 1368, Malta. Car hacking: how cyber security is stepping up