SAE Update - November 2021 - 37

ENGINEERING
EVENTS
but it's insufficient because cyber is
different - it's a contact sport, " Heimer said,
who cofounded the CyberTruck Challenge
along with Dr. Jeremy Daily, associate
professor of systems engineering at
Colorado State University.
Electrical engineering, mechanical
engineering, computer science or
programming - all solid backgrounds to
have, Heimer added: " But you must move
beyond that and fuse them in a way that
you can understand what the cyber effects
are against your transportation system. "
Hardware and software reverse
engineering without schematics,
networking with actual " live " ECUs, and the
basics of cryptography are some of the
areas covered. " Wireless interfaces are a
big deal, " Daily said, who has written
several SAE technical papers on heavyvehicle
cybersecurity and digital forensics.
For example, experts from Argo AI and
Dragos gave an in-depth presentation this
year on Wi-Fi, Bluetooth, cellular, GPS and
software-defined radio (SDR) and their
vulnerabilities.
" Our products are at cybersecurity events.
They're being poked and prodded, " said
Chris York, director of electronic system
cybersecurity at Cummins, who provided an
industry perspective on the Challenge and
how it can promote continuous product
improvement within a company. Among the
components available for hands-on
discovery are engine controllers, brake
controllers and telematics units.
UPDATE
Moderating the Cybersecurity panel at the recent SAE
COMVEC 2021 conference in Chicago was 25-year SAE
member Mark Pope of DG Technologies.
" We find things out every year and we go
back and we'll fix it, make it better, " York
said. " My perspective is that people are
going to learn how to hack this stuff
regardless. People are hacking embedded
products, IOT products, there's nothing
unique or special about our industry that
makes us not a target. You're better off to
engage, meet the hackers where they are
and learn how to make your products more
robust to these kinds of attacks. "
Everyone who attends the CyberTruck
Challenge must sign a nondisclosure
agreement (NDA). " Ultimately this event
succeeds based on trust, " Daily said. " We
want the industry to trust that we will
handle those discoveries in a responsible
way. "
Click here to read a longer version of this
article. n
by Ryan Gehm, editor in chief, SAE's
Truck & Off-Highway Engineering magazine.
November 2021
37
Ryan Gehm/SAE International
https://www.sae.org/news/2021/10/defending-the-heavy-vehicle-cyber-domain
SAE Update - November 2021

Table of Contents for the Digital Edition of SAE Update - November 2021
