Automotive Cybersecurity Quick Sheet
935.38 KB
Advances in automotive technology introduce increased risk
Automotive technology is evolving rapidly from infotainment systems and operational sensors to mobile app integrations and full driving automation. Modern vehicles have up to 150 electronic control units and 100 million lines of code. By the year 2030, many observers expect them to have roughly 300 million lines of software code. In comparison, mass-market personal computer software has close to 40 million.1 While each line of code and point of connectivity enhances functionality and usability, they also introduce the risk of breaches and cyberattacks.
Interconnected products and systems can be targeted by attackers who manipulate software vulnerabilities and weak links in ecosystems. In automotive, a cyberattack introduces additional risk to public safety, which is why building cybersecurity into connected products and systems is crucial to the safe adoption of modern automotive technologies.
UL Solutions can provide guidance and support to help original equipment manufacturers (OEMs) and automotive component and system manufacturers navigate complexity and develop a framework for automotive cybersecurity standards and best practices. Through expert gap analysis, training and advisory services, we help you identify and manage software vulnerabilities and cyber risk, leading to more trustworthy and secure innovations with improved market access across the globe.
In today's interconnected automotive systems, cyber threats put safety at risk.
With each new connection to external devices, networks and systems, concerns about safety, security and quality multiply.
Find out how UL Solutions can help you optimize automotive cybersecurity and functional safety and bring safer, more secure innovations to market.
Cybersecurity across automobile connectivity
We work with OEMs and component manufacturers across a myriad of connectivity compliance areas including:
- Dual-band Wi-Fi
- GPS/Global Navigation Satellite System/BeiDou
- 4G/5G cellular connectivity
- Infotainment center
- Cameras
- Subscription-based communications
- Vehicle to everything (V2X)
- Maintenance cellular radio system
- Tire pressure monitoring
- Remote keyless entry and ignition
- Onboard diagnostics
- Light detection and radar
- Bluetooth
Automotive cybersecurity advisory
Our advisory and gap analysis compare cybersecurity management systems against UNECE WP.29 regulations and ISO/SAE 21434 requirements. We then provide detailed documentation to assess and design road maps and frameworks to help you work toward compliance. Our advisory services include:
- Gap analysis
- Cybersecurity management systems framework
- Software update management systems framework
- Risk management framework
- Threat analysis and risk assessment framework
- Cybersecurity incidence monitoring and evaluation
- Supply chain management
Automotive cybersecurity auditing and testing
We conduct cybersecurity hardware and software testing on automotive components and systems to help customers understand their product’s exploitation risk and to validate their security measures. We also audit cybersecurity management systems for compliance with industry requirements including ISO/SAE 21434 and WP.29 to help customers understand where they are in their cybersecurity maturity.
Automotive cybersecurity training and education
We offer courses to help product owners and automotive engineers and developers understand security processes, related standards and the impact on the automotive industry. Our expert instructors deliver training and education on the following topic areas:
- Automotive cybersecurity best practices
- Principles of risk management
- Threat modeling and analysis
Expert understanding of cybersecurity requirements
UL Solutions has extensive expertise in cybersecurity with a global network of IoT and OT security laboratories, security experts and advisors with specialized expertise in global security standards, frameworks and best practices for the automotive ecosystem, that help companies
- Define where they are in their cybersecurity maturity
- Understand what they will need to do to develop secure devices
- Manage digital identity of people and products
- Improve internal cybersecurity capabilities and processes
- Validate security built into their products throughout their lifecycle
- Differentiate their products based on security in the marketplace
With more than 500 international security experts, we service customers globally with our industry-leading, working knowledge of automotive standards and best practices. We serve as participants and advisers on several standards groups and industry consortiums, such as the International Organization for Standardization, the UN World Forum for Harmonization of Vehicle Regulations and more. Our insights with these groups and deep technical expertise allow us to efficiently and proactively work with you to plan, test, verify and help secure your automotive innovations from cybersecurity threats to get safer vehicles on the road.
References
1McKinsey, “The race for cybersecurity: Protecting the connected car in the era of new regulation,” October, 2019.
X
';
let submitButton = $('form.mktoForm .mktoButtonWrap .mktoButton');
submitButton.prop("disabled", true);
submitButton.append(loadingHTML);
// Ocp-Apim-Subscription-Key: '***'.
var $ocpKey = drupalSettings.ul_marketo_validate_key;
var $ocpUrl = drupalSettings.ul_marketo_validate_url;
var $ocpEnv = drupalSettings.ul_marketo_validate_env;
if (submitCount > 1 || isResponseSuccess == true) {
isResponseHandled = true;
form.submittable(true);
if (paramsDebug.debug == 1) {
console.log("NO.10 submitCount > 1: form.submit() ");
}
submitButton.click();
}
else {
var email = form.vals().Email;
var phone = (form.vals().Phone) ? (form.vals().Phone) : '18472728800';
var country = (form.vals().Country) ? (form.vals().Country) : 'United States';
var countryCode = (phone == '18472728800') ? 'US' : getCountryCode(country);
var $emailMsg = drupalSettings.ul_marketo_validate.email;
var $phoneMsg = drupalSettings.ul_marketo_validate.phone;
if (paramsDebug.debug == 1) {
console.log("paramsDebug:");
console.log(paramsDebug);
}
sendingData = JSON.stringify({
'Input_Email': email,
'Input_Phone': phone,
'Input_ISO2_Country_Code': countryCode
});
if (paramsDebug.debug == 1) {
console.log('URL, debug missing button:');
console.log($ocpUrl);
console.log("Sending Data to API service (ajax):");
console.log(sendingData);
}
// API call for validate email/phone/country.
var sendDate = (new Date()).getTime();
var responseTimeMs = sendDate;
// Start a timer to handle a 3-second response timeout
setTimeout(function() {
if (!isResponseHandled) {
isResponseHandled = true;
// Handle the assumed "success" due to timeout here
if (paramsDebug.debug == 1) {
console.log('No response within timeout, proceeding with default validation success.');
}
$('#ValidMsgEmail').remove();
$('#ValidMsgPhone').remove();
// set form to be submittable here
$('#valSpinner').remove();
submitButton.prop("disabled", false);
// Setup status as Timeout instead of Unknown.
emailAddressStatus = "Timeout";
phoneNumberStatus = "Timeout";
phoneNumberValidated = "Timeout";
form.vals({
"emailAddressStatus": emailAddressStatus,
"phoneNumberStatus": phoneNumberStatus,
"phoneNumberValidated": phoneNumberValidated,
});
form.submittable(true);
isResponseSuccess = true;
if (paramsDebug.debug == 1) {
let receiveDate = (new Date()).getTime();
responseTimeMs = (receiveDate - sendDate) / 1000;
console.log("setTimeout: " + responseTimeMs + " seconds.");
}
submitButton.click();
}
}, paramsDebug.timeout * 1000); //END setTimeout
$.ajax({
url: $ocpUrl,
type: 'POST',
data: sendingData,
headers: {
'Content-Type': 'application/json',
'Ocp-Apim-Subscription-Key': $ocpKey,
},
success: function (response) {
$('#valSpinner').remove();
submitButton.prop("disabled", false);
phoneNumberValidated = response.Validated_Phone_Number;
if (!isResponseHandled) {
isResponseHandled = true;
// **** Handle the validation response
if (paramsDebug.debug == 1) {
console.log("API Response Data: ");
console.log(response);
}
var emailCode = response.Email_Validation_Status_Number;
var phoneCode = response.Phone_Validation_Status_Number;
// Add values into two status fields.
if (emailValidCode.hasOwnProperty(emailCode)) {
emailAddressStatus = emailValidCode[emailCode];
}
else {
// API error code doesn't exist, set defaul.
emailAddressStatus = emailValidCode['300'];
}
if (phoneValidCode.hasOwnProperty(phoneCode)) {
phoneNumberStatus = phoneValidCode[phoneCode];
}
else {
// API error code doesn't exist, set defaul.
phoneNumberStatus = phoneValidCode['301'];
}
if (emailAddressStatus.indexOf("email_not") != -1) {
emailAddressStatus = 'Invalid';
}
else if(emailAddressStatus == 'valid') {
emailAddressStatus = 'Valid';
}
if (phoneNumberStatus.indexOf('invalid_') != -1) {
phoneNumberStatus = 'Invalid';
}
else if(phoneNumberStatus == 'valid') {
phoneNumberStatus = 'Valid';
}
if (paramsDebug.debug == 1) {
console.log('form.emailAddressStatus ' + emailAddressStatus);
console.log('form.phoneNumberStatus ' + phoneNumberStatus);
console.log('form.phoneNumberValidated ' + phoneNumberValidated);
}
if (validEmailCode.includes(emailCode) && validPhoneCode.includes(phoneCode)) {
// Remove the loading spinner.
$('#ValidMsgEmail').remove();
$('#ValidMsgPhone').remove();
$('#valSpinner').remove();
submitButton.prop("disabled", false);
if (paramsDebug.debug == 1) {
console.log("NO.1.1 VALID OK submitCount = " + submitCount);
}
isResponseSuccess = true;
form.vals({
"emailAddressStatus": emailAddressStatus,
"phoneNumberStatus": phoneNumberStatus,
"phoneNumberValidated": phoneNumberValidated,
});
form.submittable(true);
submitButton.click();
}
// API valid code is not "valid".
else {
form.submittable(false);
if (paramsDebug.debug == 1) {
console.log("NO.1.2 Submittable false : count= " + submitCount + " validateOrigin " + validateOrigin + " isResponseSuccess " + isResponseSuccess );
}
// Set the invalid message in language translation.
var msgEmailStatus = "";
if (!validEmailCode.includes(emailCode)) {
if (emailCode == '300' || emailCode == '400') {
msgEmailStatus = $emailMsg.email_not_valid;
}
else if (emailCode == '310' || emailCode == '500' ) {
msgEmailStatus = $emailMsg.email_not_accept;
}
else {
msgEmailStatus = "Unknown";
}
if (paramsDebug.debug == 1) {
console.log("NOT validEmailCode: " + msgEmailStatus);
}
errEmail = '';
$('#Email').after(errEmail);
form.submittable(false);
}
// Set the invalid message in language translation.
var msgPhoneStatus = ""
if (!validPhoneCode.includes(phoneCode)) {
msgPhoneStatus = $phoneMsg[phoneValidCode[phoneCode]];
if (paramsDebug.debug == 1) {
console.log("NOT validPhoneCode: " + msgPhoneStatus);
}
errPhone = '';
$('#Phone').after(errPhone);
form.submittable(false);
}
if (paramsDebug.debug == 1) {
console.log(msgEmailStatus);
console.log(msgPhoneStatus);
}
// Remove the loading spinner.
$('#valSpinner').remove();
submitButton.prop("disabled", false);
if (paramsDebug.debug == 1) {
console.log("NO.1.6 Submittable false, count= " + submitCount);
}
form.vals({
"emailAddressStatus": emailAddressStatus,
"phoneNumberStatus": phoneNumberStatus,
"phoneNumberValidated": phoneNumberValidated,
});
// 2nd API call and subit form.
if (submitCount >= 1) {
$('#ValidMsgEmail').remove();
$('#ValidMsgPhone').remove();
isResponseSuccess = true;
form.submittable(true);
if (paramsDebug.debug == 1) {
console.log("NO.1.8 : 2nd Submit:: submittable=true && count=1 : " + submitCount);
}
if (submitCount==1) {
submitButton.click();
}
}
} //END if{} else{}.
}//END if (!isResponseHandled)
// Calculate the time comsumed for the API call.
if (paramsDebug.debug == 1) {
let receiveDate = (new Date()).getTime();
responseTimeMs = (receiveDate - sendDate) / 1000;
console.log("NO.1.9 : AJAX success: Time for API call: " + responseTimeMs + " seconds.");
}
submitCount++;
}, //END success: function();
// API call error response.
error: function (error) {
$('#valSpinner').remove();
submitButton.prop("disabled", false);
if (!isResponseHandled) {
isResponseHandled = true;
$('#valSpinner').remove();
submitButton.prop("disabled", false);
// 2nd API call and subit form.
if ( submitCount >= 1 ) {
$('#ValidMsgEmail').remove();
$('#ValidMsgPhone').remove();
form.submittable(true);
isResponseSuccess = true;
if ( submitCount == 1 ) {
form.submittable(true);
}
}
// Handle AJAX error
if (paramsDebug.debug == 1) {
console.log('**** 2 ajax error. submitCount = ' + submitCount);
console.log(error);
}
// Calculate the time comsumed for the API call.
if (paramsDebug.debug == 1) {
let receiveDate = (new Date()).getTime();
responseTimeMs = (receiveDate - sendDate) / 1000;
console.log("NO.2.3 AJAX error: Time for API call: " + responseTimeMs + " seconds.");
}
}
submitCount++;
// Error status 500, then submit the form.
submitButton.click();
} //END error: function();
}); //END $.ajax;
if (isResponseSuccess) {
if (paramsDebug.debug == 1) {
console.log("NO.8.0 submittable(true)");
}
form.submittable(true);
}
} //END: if (submitCount > 1) else
// Setup the form.vals and form.submittable;
form.vals({
"emailAddressStatus": emailAddressStatus,
"phoneNumberStatus": phoneNumberStatus,
"phoneNumberValidated": phoneNumberValidated,
});
} //END: if (validateOrigin && (marketoBundle))
else {
// For Event form and Newsletter form.
if (validateOrigin === true){
form.submittable(true);
}
}
}); //END form.onValidate()
// Success callback()
form.onSuccess(function(values, followUpUrl){
// Debug Phone/Email validation.
if (paramsDebug.debug == 1) {
console.log("NO.9.1 onSuccess: submittable = " + form.submittable());
console.log(form.getValues());
}
// Track analytics.
if (typeof dataLayer !== 'undefined'){
dataLayer.push({
event: drplMkto.dataLayerEvent,
mktoFormId: form.getId(),
'FormValues': cleanFormVals(form.getValues()),
'FormFields': form.allFieldsFilled(),
'Submittable': form.submittable()
});
}
// If function exists, delete UTM cookie:
if(typeof _deleteUtmCookie === "function"){
_deleteUtmCookie();
}
// Marketo Modal "Thank You" message:
if(use_post_submit_mssg){
$('html, body').animate({ scrollTop: 0 }, 'slow');
$('.mkto-presubmit').addClass('hidden');
$('.mktoModalContent').addClass('mkto_thnx_center');
$('.mktoModalMask').addClass('not_clicable');
$('.mkto-postsubmit').removeClass('hidden');
$('.mktoButton').removeAttr('disabled').text(drupalSettings.marketo.button_text);
$('.mktoForm')[0].reset();
grecaptcha.reset();
}
// Else, redirect user:
else {
window.location.href = drplMkto.success_url;
}
// IMPORTANT: Return false to prevent further code execution.
return false;
}); //END form.onSuccess.
});
})(jQuery, drupalSettings.marketo);
Get in touch
Have questions, need specifics? Let's get this conversation started.
Please wait…
Related industries
Insights and Resources
News
- UL Solutions Issues First Automotive Cybersecurity Assurance Program Certificate to LG Innotek
- UL Solutions Advances Automotive Safety and Security with New Approach to Integrated Functional Safety and Cybersecurity
- UL Receives RDW Approval to be a Technical Service for UN Regulations Focusing on Cybersecurity in Connected Vehicles