Truck & Off-Highway Engineering - October 2021 - 19

CYBERSECURITY FEATURE
CyberTruck students have access to various
technologies such as diagnostic tools, mobile apps,
telematics systems and driver-assist components.
Hardware and software reverse engineering without
schematics, networking with actual " live " ECUs, and
the basics of cryptography are some of the areas covered.
" Wireless interfaces are a big deal, " Daily said,
who has written several SAE technical papers on
heavy-vehicle cybersecurity and digital forensics. For
example, experts from Argo AI and Dragos gave an
in-depth presentation this year on the vulnerabilities
of Wi-Fi, Bluetooth, cellular, GPS and software-defined
radio (SDR).
" Our products are at cybersecurity events. They're
being poked and prodded, " said Chris York, director of
electronic system cybersecurity at Cummins, who provided
an industry perspective on the Challenge and
how it can promote continuous product improvement
within a company. Among the components available
for hands-on discovery are engine controllers, brake
controllers and telematics units.
" We find out things every year and we go back and
we'll fix it, make it better, " York said. " My perspective
is that people are going to learn how to hack this stuff
regardless. People are hacking embedded products,
IOT products, there's nothing unique or special about
our industry that makes us not a target. You're better
off to engage, meet the hackers where they are and
learn how to make your products more robust to these
kinds of attacks. "
TRUCK & OFF-HIGHWAY ENGINEERING
" If you can shut down an
entire fleet or an entire
brand of telematics, that
would be a Colonial
Pipeline type of thing. "
- Chris York, Cummins
Everyone who attends the CyberTruck Challenge must sign a nondisclosure
agreement (NDA). " Ultimately this event succeeds based
on trust, " Daily said. " We want the industry to trust that we will handle
those discoveries in a responsible way. "
Threats and opportunities
A major challenge facing the industry is that cybersecurity is not mature
and it's rapidly changing, York said. And hackers are becoming
more sophisticated. " The lack of maturity is baked into things like our
October 2021 19
FROM TOP: CYBERTRUCK CHALLENGE; RYAN GEHM/SAE
Truck & Off-Highway Engineering - October 2021

Table of Contents for the Digital Edition of Truck & Off-Highway Engineering - October 2021
