“Simulated Automotive Cybersecurity Drill: Government and Industry Join Forces Following ‘Vehicle Hacking and Malfunction’ Scenario” | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #hacker

Ministry of Land, Infrastructure and Transport, Automobile Safety Research Institute, and Hyundai Motor Company to Hold Joint Drill in Pangyo on September 15

The government, public agencies, and corporations will conduct a joint simulation exercise on automotive cybersecurity incident response on September 15. As advancements in technology have increased vehicle connectivity, automotive cybersecurity has become increasingly important, prompting authorities to hold a drill simulating an actual incident scenario.

The Ministry of Land, Infrastructure and Transport announced that the exercise will take place at Hyundai Motor Company’s Pangyo AVP Headquarters together with the Korea Transportation Safety Authority’s Automobile Safety Research Institute, Korea Internet & Security Agency, the National Police Agency, and Hyundai Motor Company on this day. The purpose of this exercise is to proactively review whether incident response procedures and inter-agency cooperation systems function smoothly in real incident situations, following the introduction of the Cyber Security Management System (CSMS) for vehicles.

Without hacking any real vehicles or systems, the exercise will be conducted via a tabletop drill where each agency responds by reporting and taking measures as if in an actual incident, based on step-by-step virtual scenarios. The drill scenario is based on a situation where a parts supplier’s server is hacked and software containing malicious code is distributed to vehicles via Over-the-Air (OTA) updates, leading to abnormal vehicle operation. This scenario reflects concerns that as the industry transitions to Software-Defined Vehicles (SDV), the impact of a cyberattack could spread beyond individual cars to automakers, parts suppliers, and the entire supply chain.

The exercise will begin with Hyundai Motor Company detecting an anomaly and reporting the incident, followed by a technical review by the Automobile Safety Research Institute, notification to the Ministry of Land, Infrastructure and Transport, investigation of the cause by the Korea Internet & Security Agency, and hacker tracing and investigation by the National Police Agency. The entire process—from halting OTA software distribution, deploying improved software for vehicle recovery, tracking vehicles not yet addressed, enhancing defense layers in vehicles and security among partners, and ultimately preventing the spread and recurrence of incidents while bringing the incident to a close—will be carried out.

View original image

Park Junhyung, Director General of the Mobility and Automotive Bureau at the Ministry of Land, Infrastructure and Transport, stated, “Unlike conventional cybersecurity incidents, automotive cybersecurity incidents are directly linked to the lives and safety of the public. With this joint drill between the public and private sectors, we will continue to refine the roles and cooperation systems among organizations and establish an automotive cybersecurity environment that prioritizes national security and public safety above all.”

© The Asia Business Daily. All rights reserved. Unauthorized AI training and use prohibited.