Smart Cars Are Here, But Car Cybersecurity Is Not

Design Thinking, Mind to Market Blog, Technology

We live in an era when vehicles are becoming ever “smarter” with onboard computers and software like AI parking-assist and self-driving capabilities. But did you know that most manufacturers have little or no cybersecurity built into their vehicles?

In the recent film Leave the World Behind, a chilling scenario unfolds where unseen hackers remotely take control of fleets of cars, transforming them into dangerous weapons. While this may seem like a plot ripped from science fiction, the reality is far closer than we’d like to believe. In 2015, researchers remotely hacked a Jeep Cherokee driving along a freeway while a journalist was helplessly trapped inside.

Cybercriminals are already exploiting vulnerabilities in modern consumer and military vehicle systems. These threats aren’t limited to land-based vehicles like cars, trucks, or tanks. They extend to other vehicles like aircraft and naval vessels, exposing alarming risks for safety, mission readiness, and national security.

The implications are staggering: a coordinated cyberattack could cripple entire fleets without requiring significant resources from an adversary. Unlike traditional warfare, where physical damage requires substantial effort, a cyberattack can deliver catastrophic results with minimal investment, making it a highly attractive strategy for malicious actors.

While these threats have largely targeted military assets so far, it’s only a matter of time before cyberattacks of the same scale hit consumer vehicles. As our vehicles become increasingly dependent on software and connectivity, the absence of robust cybersecurity measures presents a growing threat that demands urgent attention and innovation.

How Vehicles Are Becoming Cyber Targets

Modern vehicles increasingly rely on interconnected electronic and computer systems, improving their functionality and sensor abilities. One of the most ubiquitous in-vehicle systems is the Controller Area Network (CAN Bus), a communication system that acts like a central nervous system for vehicles.

This network manages critical vehicle functions such as ignition, braking, and power steering. The CAN Bus significantly reduces wiring complexity, but despite its widespread use, it was never designed with security in mind. It lacks fundamental encryption and authentication protocols, meaning that if an attacker gains access to any part of the network, they can manipulate vital systems throughout the vehicle.

Thieves hacking into the CAN Bus.

In the widely publicized Jeep Cherokee highway hack, the two researchers gained remote control of the vehicle, disabling its brakes, turning the steering wheel, and shutting off the engine, all with the driver still inside. In 2023, media reported thieves disabling immobilizers, starting engines, and stealing vehicles without a key fob. These attacks threaten safety and pose significant risks for car manufacturers, rental companies, and consumers.

Experts project that more than 70 percent of vehicles will be connected to the internet by 2030, meaning the risk of cybercrime targeting vehicles is rising rapidly. This underscores the urgent need for improved vehicle security, especially as software-defined systems expand across the automotive industry.

ASSURE – Advanced Security System Using Real-time Electronics

ASSURE is a “plug-and-play” device designed to safeguard vehicles from cyber intrusions in real-time, addressing this growing threat of vehicle cyberattacks.

ASSURE functions like a home alarm system: it continuously monitors the vehicle’s CAN Bus network to detect intruders trying to gain access to the vehicle’s vital systems. Unlike your home alarm, ASSURE requires no internet connection, introduces no additional latency (delays), and operates without modifying existing vehicle software or systems.

Originally developed to secure U.S. Army vehicles, ASSURE can detect and counter cyber threats in environments where compromised security could jeopardize lives and operations. In modern warfare, where cyberattacks are increasingly weaponized, the absence of robust cybersecurity mechanisms leaves military personnel vulnerable, a risk that ASSURE effectively mitigates.

Safety Beyond Military Missions and In Modern Society of Connected Vehicles

As society embraces connected vehicles and automated transportation systems, ASSURE is a vital solution for safeguarding modern mobility.

Today’s vehicles are evolving into rolling data hubs, constantly exchanging information with cloud networks, infrastructure, and increasingly other vehicles. This connectivity improves convenience and safety but also opens the door to new vulnerabilities.

ASSURE offers a proactive defense against emerging cyber-attack risks, helping to protect a wide range of connected vehicles, from self-driving taxis and personal cars to commercial fleets and public transportation systems. Since ASSURE is compatible with virtually any CAN Bus system, it has the potential to secure nearly 100 percent of both existing and new vehicles, bridging the gap between outdated security frameworks and the demands of modern mobility.

For car manufacturers, integrating ASSURE — even as an optional safety feature — reduces the risk of costly cyber incidents and offers peace of mind to consumers. Meanwhile, widespread adoption of ASSURE could strengthen entire transportation networks, minimizing the potential for coordinated cyberattacks that could disrupt supply chains, public services, or infrastructure.

In a future where cybercrime is expected to grow alongside advancements in connected vehicles, ASSURE offers more than just protection. It provides a path toward building a secure, resilient, trustworthy transportation ecosystem.