Experts warn brake systems can be attacked by hackers

Critical systems are vulnerable to attacks through DAB radio signals, study shows

Experts warn brake systems can be attacked by hackers
Some car infotainment systems are vulnerable to a hack attack that could put lives at risk.

The vulnerability was exposed by NCC Group after it found a way to carry out attacks by sending data using digital audio broadcasting (DAB) radio signals.

It follows the news of a similar flaw discovered by US researchers who took control of a Jeep Cherokee by sending data to its internet-connected entertainment and navigation system via a mobile-phone network.

Using relatively cheap off-the-shelf components connected to a laptop, NCC Group created a DAB station.

Attackers are able to send a code that would let them take over the infotainment system and potentially use it as a way to control more critical systems including steering and braking.

NCC Group’s research director, Andy Davis, told the BBC a hacker’s DAB broadcast could affect many cars at once, depending on the power of the transmitter.

Davis said: “[An attacker] would probably choose a common radio station to broadcast over the top of to make sure they reached the maximum number of target vehicles.”

NCC Group declined to publicly identify which specific infotainment systems they had hacked whilst in a lab environment.

Computers on wheels

Jeremiah Grossman, founder and CTO of WhiteHat Security, said that both hacks underlined the point that cars were becoming computers on wheels, which need better protection than we currently offer PCs.

Grossman said: “We protect our PCs and servers from being hacked using special configuration settings, security software, and ‘best-practice’ behaviours.

“With car hacking, and cars being little more than rolling computers nowadays, are we expected to install security software, etc there too?

“Or, are manufacturers responsible for protecting their car’s occupants against a digital adversary?”

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>

The reCAPTCHA verification period has expired. Please reload the page.

Have your say!

1 0

Lost Password

Please enter your username or email address. You will receive a link to create a new password via email.