Fortinet Demonstrates Integrated Security and Threat Protection for the Connected Car of the Future
Fortinet a global leader in broad, integrated and automated cybersecurity, last week exhibited advanced cybersecurity capabilities for the connected car of the future at CES 2018 in the Renesas Advanced and Autonomous Test Track and Future Ready Solutions Showcase.
- Developed in collaboration with Renesas Electronics, the cybersecurity prototype will demonstrate how the Fortinet FortiOS security operating system integrates with Renesas' R-Car H3 system-on-chip (SoC) to secure vehicle network domains, cloud-based services and applications.
- Fortinet and Renesas have created mock cyber breaches on a prototype connected car at CES, including intrusion prevention system (IPS) attacks and a DDoS (distributed denial of service) attacks to showcase the effectiveness of automated, integrated security to protect drivers from intruders taking control of their vehicle or applications.
Automated Security is Foundational for Technology and Safety Systems of the Connected Car
By 2025, it is projected that there will be 300 million connected cars up from 37 million in 2016, with annual revenues for connected car equipment and associated services to surpass $250 billion.i Key factors driving the global connected car market are increasing demand for self-driving features, implementation of data-driven decision-making, and connectivity solutions within the vehicle, such as access to smartphone features, music on-demand, Internet connectivity and infotainment in vehicles.
A connected car is equipped with Internet access and a wireless local area network (LAN), allowing drivers to share Internet connectivity with other devices both inside and outside the vehicle. To provide suitable cyber protection and ensure consumer confidence, automobile manufacturers need to design and deploy technology with a security-first mindset. Security systems need to span across communications standards, devices, and networks. They also need to extend visibility, interaction and control beyond a single vehicle to include the larger transportation ecosystem, including road and traffic control systems.
Connected cars require several different security solutions working as a single system and therefore need to include strategic segmentation of key function domains, such as powertrain, telematics and infotainment to ensure that threats are automatically contained and mitigated. Another key requirement is a real-time threat update system, like Fortinet's FortiGuard Labs, where the latest vulnerability and threat information can be fed to the vehicle to provide effective and automated protection. This also includes connecting back to a cloud network to share and correlate events to receive timely security patches and updates.
Fortinet and Renesas Demonstrate Security for Connected Car Networks
Fortinet and Renesas have collaborated on a prototype security solution that addresses the major cybersecurity risks in today's connected car network architecture. Recent cyber breaches demonstrate the urgent need for integrated security for these increasingly sophisticated vehicle networks, including the 2015 Jeep Cherokee hack where a hacker group wirelessly broke into the vehicle and electronically controlled vital functions, as well as the more recent Tesla Model S hack of its CAN bus, interfering with the car's brakes, door locks, and dashboard computer from 12 miles away.
At CES, Fortinet and Renesas will show how the Fortinet Security Fabric technology running on the R-Car H3 SoC provides security policy management and automated protection of the powertrain and communication domains in the vehicle, including the LTE module, vehicle-to-vehicle communications module, the wireless access point, the engine control module and more. Supported by the on-chip security functions of the Renesas R-Car H3, Fortinet secures the communications between the domains and sets policies to limit access between certain domains to mitigate and control potential cyber threats. Specific demonstrations of mock IPS and DDoS cyber attacks will show how FortiOS automatically secures the data transmitted from a public cloud service to the in-car entertainment system.