"Over-the-Air Vehicle Update Technology Vulnerable to Cyberattacks"

As Over-the-Air (OTA) vehicle software update technology becomes widely adopted, concerns are rising that it is becoming increasingly vulnerable to cyberattacks from abroad, CNBC reported on July 19 (local time).

OTA technology is a wireless method that allows for the transmission of new software, firmware, bug fixes (patches), and data to internet-connected devices.

Jason van der Schyff, a cyber and technology security researcher at the Australian Strategic Policy Institute (ASPI), stated that this technology has been used extensively across the automotive industry since Tesla first applied it to its Model S vehicles in 2012.

Siraj Ahmed Shaikh, a professor of systems security at Swansea University in the U.K., said, "Compared to the traditional method of manual updates, this technology is a fast and inexpensive way to manage vehicle systems."

However, as the use of OTA technology spreads, concerns regarding transportation infrastructure are growing.

Gabriel Lim, a senior analyst at the S. Rajaratnam School of International Studies (RSIS) in Singapore, pointed out that the use of this technology "poses unique national security challenges."

He noted, "Countries such as Norway, Denmark, and the U.K. have expressed concerns not only about data privacy breaches but also about the possibility of foreign powers intentionally damaging the control systems of vehicles in operation."

In May, the American Enterprise Institute (AEI) warned that protecting the automotive industry is crucial to limiting foreign espionage capabilities.

In its report, the AEI suggested, "To protect against the threat of foreign espionage, the U.S. should consider additional security reviews, restrict the use of certain foreign-made hardware and software in vehicles, and strengthen the disclosure of data collection practices."

Late last year, Ruter, a bus company in Norway, conducted a test on two buses and revealed that it discovered potential risks related to OTA technology in one of them.

The company stated, "Access to the battery and power supply control systems is possible via a mobile network through a Romanian SIM card. Therefore, theoretically, the manufacturer could stop these buses or render them inoperable."

Following this announcement, the U.K. and Denmark launched their own investigations, and the U.K. Department for Transport stated that it is investigating the matter and working closely with the National Cyber Security Centre.

Lim of the RSIS pointed out that this technology is also being introduced in other sectors, such as maritime transport, railways, drones, and industrial machinery, adding, "It is important to hold relevant agencies and governments accountable for how OTA systems are applied."

※