Kaspersky researchers have analyzed aftermarket connected car devices, designed to make vehicles smarter. This niche has proven to be more secure than other Internet of Things (IoT) accessories.
There are currently two ways for car enthusiasts to obtain a connected vehicle – purchase a “smart by design” car from a dealer, or improve their existing car with a number of additional “smart-devices”.
While both scenarios create a greater driving experience, smart technology also represents a brand new area for malicious use, as the media and Kaspersky’s own research has repeatedly shown. This is inevitable – when a piece of technology becomes essential, related security issues tend to increase.
With this in mind, Kaspersky researchers set out to discover whether these reports on the security of IoT devices had any impact on manufacturers of smart devices for the automotive industry. The researchers analyzed several randomly selected devices, including an OBD dongle scanning tool, a tire pressure and temperature monitoring system, a smart alarm system, a GPS tracker, and an app-controlled dashcam.
The findings were a pleasant surprise: while the IoT industry has often been considered vulnerable, these automotive-related smart and connected devices proved to be quite secure, with no major vulnerabilities exposed.
But several security issues were also revealed: the ability to remotely access driving dynamics data via a scanning toll, the option to manipulate signals from the tire monitoring system, and, most alarmingly, the ability to open vehicle doors using the alarm system.
However, all of these elements are either very hard to implement, or bring no obvious or immediate outcome for a criminal.
“The devices we examined met many security policies and were satisfactory, with the exception of a few small issues. This is partly due to the limited functionality of these devices and the lack of serious consequences in the event of a successful attack through these products – but also thanks to the vigilance of manufacturers,” noted Victor Chebyshev, security expert at Kaspersky
“We were glad to see that they have invested their efforts into making these devices more secure, a good sign overall for the automotive industry. Yet, this is still not a reason to relax: based on our experience, the smarter the device, the higher the chances that security issues will occur. That is why security should be considered more closely in the early stages of product development, especially as a new generation of smart devices come to the market.”
To keep smart automotive devices even more secure, Kaspersky advised the following: