The Inquirer-Home

McAfee warns of security holes in car computer systems

Safety of drivers is threatened by car hacking
Wed Sep 07 2011, 13:21

INTEL-OWNED SECURITY FIRM McAfee has warned of security flaws in common car computer and electrical systems that could cause significant risk to drivers or their vehicles.

The findings were revealed in a report entitled "Caution: Malware Ahead", which was written by McAfee, Wind River, and Escrypt. It examines the security holes in airbag systems, radios, power seats, anti-lock braking system, electronic stability controls, autonomous cruise controls, communication systems and in-vehicle communication, exposing some worrying dangers.

McAfee found that hackers could remotely unlock and start a car from a mobile phone, disable a car remotely, track a driver's location, activities and routines, steal personal data from a Bluetooth system, disrupt navigation systems and disable emergency assistance.

The automobile industry is adding more technological features all the time, enhancing the driving experience, but it seems that the security of these features is being ignored. Just as the rise of smartphones and tablets has led to malware appearing on those devices, we can expect the same for car computer systems as they become more popular and widespread.

The problem with car computer systems has already begun showing itself in general software bugs, such as Honda's recent decision to recall one million cars after it discovered the wheels could turn back and forth at random, not to mention a similar software issue that affected 2.4 million cars the month before. If these bugs were to be exploited by hackers the danger could be catastrophic.

"As more and more functions get embedded in the digital technology of automobiles, the threat of attack and malicious manipulation increases," said Stuart McClure, SVP and general manager of McAfee. "Many examples of research-based hacks show the potential threats and depth of compromise that expose the consumer. It's one thing to have your email or laptop compromised but having your car hacked could translate to dire risks to your personal safety." µ

Share this:

Comments
McAfee

This news will be useful for hackers.. It should be avoidable for those hackers... But probably it must be useful for safety purposes generaly for car traces even users location.. Please can i get full article related to this?

posted by : Meena, 08 September 2011 Complain about this comment
Mine, all mine

"INTEL-OWNED SECURITY FIRM McAfee [snip] written by McAfee, Wind River, and Escrypt. "

And who owns Wind River, the provider of formerly chip-agnostic embedded OSes? Intel [1] Who writes this rubbish?

I expect that Intel will be forking out for Escrypt too if this exercise works out well for them.

[1] http://www.theinquirer.net/inquirer/news/1184566/intel-snap-wind-river-systems

posted by : A Groves, 08 September 2011 Complain about this comment
Mine, all mine

"INTEL-OWNED SECURITY FIRM McAfee [snip] written by McAfee, Wind River, and Escrypt. "

And who owns Wind River, the provider of formerly chip-agnostic embedded OSes? Intel [1] Who writes this rubbish?

I expect that Intel will be forking out for Escrypt too if this exercise works out well for them.

[1] http://www.theinquirer.net/inquirer/news/1184566/intel-snap-wind-river-systems

posted by : A Groves, 07 September 2011 Complain about this comment
No CPU

I'm sticking to my 68' Dodge; 27 mpg and all analog baby! ;)

posted by : Pete, 07 September 2011 Complain about this comment
Not surprised

Why should we expect car makers to exhibit security consciousness that's any different than what Microsoft and Apple have offered to the world at large? They are now at the first stage, where cool new features get slapped in without much regard for security holes that they introduce to the system as a whole.

My car came with a cell based data connection to its primary computer, allowing remote access "by service". Needless to say that this is a vector for anyone on the internet to hack into my car. Fortunately I was able to easily disable the "feature".

posted by : aki009, 07 September 2011 Complain about this comment
aboutus
Advertisement
Subscribe to INQ newsletters
Advertisement
INQ Poll

Facebook starts selling shares

Will you buy Facebook shares?