Connected Cars Demand Greater Cybersecurity Protection, and Generative AI Can Help

by Debbie Taylor Moore , Senior Partner & Vice President Quantum Safe & Secure AI Focal IBM Consulting Cybersecurity Services?

It's projected that 367 million connected cars will communicate bidirectionally with other vehicles and with outside systems like roadway infrastructure by 2027. Unfortunately, as more connected vehicles hit the market, the chances of data breaches increase. Cybersecurity experts have warned these vehicles are susceptible to hackers stealing sensitive information or manipulating critical systems including brakes and steering.??

Vehicle software relies on hundreds of millions of lines of software code . The automotive manufacturing industry must act to better secure their products, which likewise increasingly rely on wireless communications and, more recently, artificial intelligence. Generative AI, in particular, is showing itself to be a double-edge sword, giving cyber attackers more opportunities to exploit vulnerabilities, while also giving businesses a powerful tool for faster detection and response to cyber threats .?

?

Identifying the threat?

Connected cars can present a significant revenue stream for automakers and adjacent industries. According to the IBM IBV study “Automotive 2030: Racing to a digital future” , 80 percent of industry execs say digital experiences will enhance customer experience significant. With the vehicle experience of the future expected to show attributes such as connected, personalized and seamless, this dovetails with the findings from the consumer side of the study that found that 53 percent of consumers prefer brands offering superior security and privacy with shared mobility and autonomous driving.??

Many OEMs and auto suppliers are, however, more focused on meeting current regulatory standards when developing connective car technology rather than planning adequately to secure future systems against cyberattacks. Although anticipating tomorrow’s security threats is a big challenge, failure to do so comes at a price. It's estimated that data breaches can cost companies $4.45 million per instance – and even more in advanced economies.??

Automotive industry executives recognize the importance of addressing data security from a financial and customer satisfaction perspective. An IBV study found that a significant majority of automotive executives (86%) believe security is a brand attribute that differentiates their organization in the marketplace. Yet, auto executives also tell us a lack of tools, resources, expertise, and organizational alignment pose the greatest barriers to their cyber resilience. A common culprit for coming up short is poor strategic execution: 9 in ten automotive executives report having a security strategy, yet fewer than half (44%) have started executing that strategy .?

?

Creating a solution?

Finding a solution is difficult due to the complexity of edge connectivity, over-the-air software updates, and telco connectivity coverage. IBM’s industry experience and watsonx generative AI technology can help automakers in a number of ways. We’re also strong advocates for providing greater security through "privacy by design and default." With this approach, IBM conceptualizes data privacy through all the phases of the vehicle life cycle: designing, building, and driving.?

Software errors found during the design phase cost less than a sixth of the cost of finding them in the implementation phase, 15 times less than during the testing phase, and 1/100th of the product maintenance cost. Knowing this, IBM advises addressing security concerns as early as possible. When privacy is considered in the design stage, automakers can weed out problems at the earliest stage before costs go up. Integrating privacy at this stage also allows the design team to consider the user's interests and the brand's reputation.?

Once privacy is included in the design phase, the natural progression is to take those learnings to the manufacturers. Working with a trusted manufacturing environment, automakers can prevent and find threats that might lead to privacy breaches before products get to consumers and automakers are flooded with complaints. Joining or creating a privacy ecosystem of suppliers, dealers, insurers, and critical electronic device makers could proactively address privacy concerns across the industry. By being a part of the group that sets the standards, automakers can move from victim to innovator.??

Keep in mind that privacy must be the default, without customers needing to take any action. Navigation, Bluetooth, and onboard, interactive telematics should enforce and promote privacy.?

?

The role of generative AI and automation?

Auto makers can also tap the potential of generative AI and automation to improve security and privacy operations. IBM watsonx can greatly improve the process of anticipating the vulnerabilities of connected and software-heavy vehicles. Starting with watsonx.data , OEMs can unify their disparate data with a cutting-edge lakehouse architecture to facilitate the use of AI workloads. With watsonx.ai , OEMs can train, validate, tune, and deploy generative AI, foundation models, and machine learning capabilities with ease and build AI applications much more quickly. Finally, watsonx.governance empowers organizations to monitor their AI activities, with software automation to mitigate risk, manage regulatory requirements and address ethical concerns. As a full generative AI package, watsonx offers automotive executives the ability to supplement existing cybersecurity tools, resources, and expertise.?

To further examine generative AI’s growing role in #cybersecurity across the automotive and other industries, if you are onsite at the 2024 Consumer Electronics Show (#CES2024) please do catch a panel discussion I’m part of which is titled? “Our Newest Cyber Threat is AI and AI is Our Biggest Defense” on January 11. In the panel session with other industry leaders, I’ll address how #generativeAI can be harnessed for improved cybersecurity across the automotive and other industries.?

For additional insights on this topic, please see the data story infographic “Securing connected vehicles: Designing the future of mobility ” from the IBM Institute for Business Value (IBM IBV).