National Highway Traffic Safety Administration NHTSA and Automotive Cybersecurity Briefing to the Information Security and Privacy Advisory Board October 2015 The Need for Cybersecurity Research • 32 719 people died due to motor vehicle accidents in 2013 new safety features enabled by vehicle-to-vehicle communications and computer controlled electronic safety systems have the potential to dramatically improve highway safety • New safety features and customer convenience features will introduce new challenges and vulnerabilities as demonstrated by our research and that of others • While no real world incidents have occurred to critical safety systems we have developed a research approach to help improve the safety posture of future vehicles 11 1 2015 5 24 58 PM Safer Drivers Safer Cars Safer Roads 2 2 Use of Electronics in Cars • Not new… Examples of functions on a modern vehicle – The first common use of automotive electronics dates back to 1970s not including uses in radio – By 2009 a typical automobile featured over 100 microprocessors 50 electronic control units five miles of wiring and 50-100 million lines of code •Active Suspension •Event Data Recorder •Active Vibration Control •Hill Hold Control •Adaptive Cruise Control •Idle Stop-Start •Adaptive Front Lighting •Instrument Cluster Control •Airbag Deployment •Intelligent Turn Signals •Anti-lock Braking •Interior Lighting •Autonomous Emergency Braking •Lane Departure Warning •Battery Management •Lane Keeping Assist •Blind Spot Detection •Navigation •Cabin Environment Controls •On-Board Diagnostics •Communication Systems •Parental Controls •Cylinder Deactivation •Parking Systems •Driver Alertness Monitoring •Pre-crash Safety •Electronic Power Steering •Rear-view Camera •Electronic Seat Control •Regenerative Braking •Electronic Stability Control •Remote Keyless Entry •Electronic Throttle Control •Security Systems •Electronic Toll Collection •Tire Pressure Monitoring •Electronic Valve Timing •Traffic Sign Recognition •Engine Control •Transmission Control •Entertainment System •Windshield Wiper Control Safer Drivers Safer Cars Safer Roads 3 NHTSA’s mission National Highway Traffic Safety Administration’s NHTSA’s NHTSA’s mission is to reduce fatalities injuries and economic losses resulting from motor vehicle crashes crashes Safer Drivers Safer Cars Safer Roads 4 NHTSA’s safety role and tools • Regulation NHTSA creates mandatory requirements known as Federal Motor Vehicle Safety Standards FMVSSs Motor Vehicle Safety Act 49 U S C §§ 30101 et seq directs NHTSA to establish FMVSSs that are • practicable stated in objective terms and meet the need for motor vehicle safety FMVSSs are also performance-based and appropriate for each vehicle type to which they apply Manufacturers self-certify compliance • Enforcement NHTSA investigates possible safety defects ensures that products meet established safety standards and are not defective through safety recalls if necessary and tracks safety-related recalls – The agency also enforces regulations on fuel economy odometer fraud and vehicle theft Safer Drivers Safer Cars Safer Roads 5 NHTSA’s safety role and tools • Consumer Information NHTSA creates incentives for manufacturers to offer new safety technologies by providing information about these technologies to consumers New Car Assessment Program NCAP http www safercar gov – Comparatively rates the performance of vehicles on different aspects of safety – Some tests can be based on FMVSS but at higher test speeds Tests follow objective performance-based style of an FMVSS NHTSA does most of the testing • Behavioral Programs NHTSA studies behaviors and attitudes in highway safety focusing on drivers passengers pedestrians bicyclists and motorcyclists We in collaboration with State programs and other partners – identify and measure behaviors involved in crashes or associated with injuries and develop and refine countermeasures to deter unsafe behaviors and promote safe alternatives Safer Drivers Safer Cars Safer Roads 6 Threat Vectors USB CD DVD Bluetooth TPMS OBD-II DSRC - V2V Cellular WiFi 7 CAN Vehicle Networks Safer Drivers Safer Cars Safer Roads 7 Threat Vectors Categories • Physical and Remote access points into the vehicle • Physical interfaces – On-board diagnostics port CD DVD Players USB ports direct ECU access • Short Range wireless interfaces – RF Bluetooth Wi-Fi DSRC • Long range wireless interfaces – Cellular satellite • Aftermarket products can convert physical interfaces into wireless interfaces – E g Progressive insurance dongle for OBD-II Safer Drivers Safer Cars Safer Roads 8 NHTSA Approach Layers of Protection Protective Preventive Methods Anomaly-based intrusion detection Real-time response mechanism Assess Treatment Solutions Safer Drivers Safer Cars Safer Roads • • • • Secure communications Encryption Gateways firewalls Separation of functions Systems to monitor vehicle data buses Address and isolate intrusions before vehicle systems compromised Feedback loop for continuous improvements e g facilitated by an ISAC –Information Sharing and Analysis Center 9 Organizational Changes to Address Challenges • In 2012 NHTSA created a new office Vehicle Crash Avoidance and Electronic Controls Research – Within the Office Electronic Systems Safety Division responsible for performing research focusing on electronic control systems safety including cybersecurity – Office is also responsible for performing research on advanced driver assistance technologies and human factors • In 2014 we also expanded our testing capabilities at our research center in Ohio Safer Drivers Safer Cars Safer Roads 10 NHTSA Completed Research • Researched cybersecurity best practices in relation to automotive industry Published four reports in 2014 – Assessment of the Information Sharing and Analysis Center Model – A Summary of Cybersecurity Best Practices – Characterization of Potential Security Threats in Modern Automobiles A Composite Modeling Approach – National Institute of Standards and Technology Cybersecurity Risk Management Framework Applied to Modern Vehicles Safer Drivers Safer Cars Safer Roads 11 Current NHTSA Research • Researching and evaluating design processes and standards – Evaluating potential to adapt existing functional safety approaches • Investigating Protective Preventive solutions – Message authentication for communications Interfaces V2V project initiating – Gateways firewalls project initiating • Researching Intrusion Detection Solutions – Vehicle bus monitoring for anomalous behavior project initiating • Assessing Treatment Solutions – Feedback loop for continuous improvements Monitoring progress in standing up an Automotive ISAC • Crosscutting Research – – – – Vulnerability Testing Publish reports in 2016 Software – including over the air updates Evaluate Heavy Vehicle Cybersecurity Collaboration coordination with other Federal agencies e g DHS NIST FAA Safer Drivers Safer Cars Safer Roads 12 Additional Activities • Report to Congress on the Need for Standards Sec 31402 of MAP-21 Electronic Systems Performance – NHTSA conducted a review on the need for standards for electronic systems including cybersecurity – Published a Federal Register Notice in October 2014 to solicit stakeholder feedback – Prepared a draft report to Congress – Delivery to Congress expected early next year Safer Drivers Safer Cars Safer Roads 13 FCA Recall • Researchers demonstrated ability to intrude into the CAN bus via cellular WiFi connection • Impacted up to 1 4 million Fiat-Chrysler FCA vehicles • Recall took place on July 23rd with two remedies – Over the air via cellular service provider to close an open port – Manufacturer’s update to firmware to address close proximity WiFi vulnerability • Research results detailing how to perform the hack released on August 10 • Two Equipment Queries underway One to the manufacturer and one to the supplier Safer Drivers Safer Cars Safer Roads 14 NHTSA Path Forward • Continue research at quickest reasonable pace • As research matures consider rulemaking recommended practices and or guidelines • Continue close working relationship with manufacturers and their organizations • Continue to encourage industry to expediently develop Automotive ISAC to ensure quick information exchange • Carefully review any reported incidents even if off-road • Use recall authority if needed • Continue to advocate for additional agency resources in budget and enactment of helpful legislation in Grow America Safer Drivers Safer Cars Safer Roads 15 Other key Activities and Government Agencies • SAE International – J3061 Cybersecurity Guidebook for Cyber-Physical Vehicle Systems • Various worldwide activities – EVITA PRESERVE SCAAS SESAMO HEAVENS MISRA SA J-CSIP JasPar JARI • Federal Entities – – – – – – – – – Department of Homeland Security HSARPA Science Technology Department of Defense DARPA and TARDEC NIST Federal Trade Commission Federal Communications Commission National Science Foundation Federal Aviation Agency Food and Drug Administration Etc Safer Drivers Safer Cars Safer Roads 16 NIST involvement • How can NIST help the automotive industry – Establishment of robust guidelines best practices – Involvement and participation in worldwide automotive voluntary standards setting activities – Other forms of involvement • Responsible Disclosure of Cyber vulnerabilities in automotive systems – Experience and knowledge in setting effective structures • ISO IEC 29147 2014 IT-- Security techniques -- Vulnerability disclosure • ISO IEC 30111 2013 IT -- Security techniques -- Vulnerability handling processes – Good examples of its uses in the cyber-physical systems domain Safer Drivers Safer Cars Safer Roads 17