Secure off-board network communication

Earlier in this book, we discussed how attackers can use Wi-Fi, cellular, Bluetooth, and other external connectivity interfaces to eavesdrop or tamper with vehicle data and control functions. Some ways to reduce security risks linked to off-board communication technologies include creating network firewalls, setting up intrusion detection and prevention systems, using network segmentation and isolation methods, restricting network access to vehicle ECUs, and establishing secure communication channels with backend servers.

When adopting such controls, automotive engineers must be aware of the impacts on computing resources, power consumption, real-time performance, and cost factors. In the remainder of this section, we will explore the controls at each communication interface layer and point to ways they can be tailored to fit within the vehicle’s environment.

Wi-Fi

Wi-Fi can be used in vehicles to provide hotspot services, stream...