Pedal to the metal

Pedal to the Metal?

The Race to Develop Secure Autonomous Cars Andrew Tabas

The advent of Autonomous Vehicles (AVs) will have profound effects on car ownership, transportation, and security. It is already possible to hack into individual cars through their entertainment and navigation systems. The connecting of AVs to networks will make it possible to hack them on a large scale. Policymakers should act now to implement both technical and legal security mechanisms. Potential solutions include the establishment of a system of certificates, an effort to establish an air gap between different computer networks in the vehicles, and the creation of laws that penalize hackers. Still, manufacturers should not be deterred by the risks of AVs. Instead, they should race ahead in the development of this potentially lifesaving technology.

Keywords: autonomous vehicles, self-driving cars, V2V, V2I, intelligent transportation systems, Internet of Things, public key encryption, cybersecurity, hacking, air gap

Introduction ³*HW WKHP ´ ,Q KLV VKRUW VWRU\ ³6DOO\ ´ ,VDDF $VLPRY WHOOV WKH VWRU\ RI ³SRVLWURQLF´ FDUV WKDW GULYH WKHPVHOYHV 7KH FDUV DOVR FRPPXQLFDWH LQ DQ DXWRQRPRXV YHKLFOH QHWZRUN GHIHQG WKHPVHOYHV D UHVSRQVH WR VHFXULW\ FRQFHUQV DQG NLOO GHPRQVWUDWLQJ WKH HWKLFDO SUREOHPV DW SOD\ ZLWK DXWRQRPRXV Andrew Tabas (Bachelor of Science in Foreign Service, Georgetown University, 2016) is a research analyst at the Cadmus Group.

Cyber, Intelligence, and Security | Volume 1 | No. 1 | January 2017

121

ANDREW TABAS | PEDAL TO THE METAL?THE RACE TO DEVELOP SECURE AUTONOMOUS CARS

Cyber, Intelligence, and Security | Volume 1 | No. 1 | January 2017

122

YHKLFOHV 1 ³6DOO\´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

The Technology ,W LV XVHIXO WR GLVWLQJXLVK EHWZHHQ ³DXWRQRPRXV FDUV´ DQG ³VHOI GULYLQJ FDUV ´ $XWRQRPRXV FDUV ZLOO EH DEOH WR GULYH WKHPVHOYHV LQ FHUWDLQ FRQGLWLRQV EXW ZLOO PDLQWDLQ WKH FDSDELOLW\ WR EH GULYHQ E\ SHRSOH 7KH GHYHORSPHQW RI DXWRQRPRXV FDUV EHQH¿WV DXWRPDNHUV EHFDXVH WKH\ FDQ DGYHUWLVH WKDW WKHLU YHKLFOHV KDYH VRSKLVWLFDWHG WHFKQRORJ\ $XWRQRPRXV FDUV PXVW EH FDSDEOH RI ³JUDFHIXO GHJUDGDWLRQ ´ RU D VPRRWK WUDQVLWLRQ EDFN WR D KXPDQ GULYHU 2 +XPDQV RQ WKH RWKHU KDQG ZLOO QRW EH DEOH WR GULYH VHOI GULYLQJ FDUV 7KHVH YHKLFOHV ZLOO ORRN PDUNHGO\ GLIIHUHQW IURP WRGD\¶V FDUV DV WKH\ ZLOO ODFN VWHHULQJ ZKHHOV SHGDOV DQG PLUURUV 7KH\ FRXOG IRUP ³D ÀHHW RI VKDUHG YHKLFOHV´ WKDW ZLOO HQG WUDGLWLRQDO FDU RZQHUVKLS 3 ,Q WKDW FDVH WKH\ ZRXOG WKUHDWHQ WUDGLWLRQDO FDU PDQXIDFWXUHUV DV IDPLO\ FDUV EHFRPH D OX[XU\ LWHP ,QGHHG 7HVOD KDV SURSRVHG WKDW RZQHUV RI $9V FRXOG PDNH PRQH\ E\ FRQWULEXWLQJ WKHLU FDUV WR WKH ÀHHW ZKHQ WKH\ DUH QRW XVLQJ WKHP DQ DFWLRQ WKDW ZRXOG KHOS WR PDNH $9V PRUH DIIRUGDEOH 4 7KH 1DWLRQDO +LJKZD\ 7UDI¿F 6DIHW\ $GPLQLVWUDWLRQ 1+76$ KDV VSHFL¿HG ¿YH ³OHYHOV´ RI DXWRPDWLRQ ³1R $XWRPDWLRQ´ ³)XQFWLRQ 6SHFL¿F $XWRPDWLRQ´ ³&RPELQHG )XQFWLRQ $XWRPDWLRQ´ ³/LPLWHG 6HOI 'ULYLQJ $XWRPDWLRQ´ DQG ³)XOO 6HOI 'ULYLQJ $XWRPDWLRQ´

$Q LQFUHDVHG OHYHO UHSUHVHQWV PRUH IHDWXUHV ZRUNLQJ WRJHWKHU ZLWKRXW WKH GULYHU¶V LQSXW /HYHO =HUR UHSUHVHQWV WUDGLWLRQDO FDUV $W /HYHO 2QH WKH FDU

ANDREW TABAS | PEDAL TO THE METAL?THE RACE TO DEVELOP SECURE AUTONOMOUS CARS

FDQ SHUIRUP VSHFL¿F WDVNV E\ LWVHOI $W /HYHO 7ZR WKH FDU¶V DXWRQRPRXV FDSDELOLWLHV FDQ LQWHUDFW EXW WKH GULYHU VWLOO QHHGV WR EH DFWLYH )RU H[DPSOH D /HYHO 7ZR FDU FRXOG FRPELQH ³DGDSWLYH FUXLVH FRQWURO´ DQG ³ODQH FHQWHULQJ ´ /HYHO 7KUHH YHKLFOHV FDQ GULYH WKHPVHOYHV LQ FHUWDLQ HQYLURQPHQWV EXW WKH GULYHU PXVW VWD\ DWWHQWLYH 5 ,W PD\ EH GLI¿FXOW KRZHYHU IRU GULYHUV WR IRFXV ZKHQ WKH $9 LV GRLQJ PRVW RI WKH ZRUN $W /HYHO )RXU WKH GULYHU GRHV QRW QHHG WR UHPDLQ DWWHQWLYH RU HYHQ VWD\ LQ WKH YHKLFOH /HYHO )RXU FDUV ZKLFK UHSUHVHQW WKH ³VHOI GULYLQJ FDUV´ GHVFULEHG DERYH ZLOO QRW QHHG VWHHULQJ ZKHHOV EUDNH SHGDOV RU RWKHU H[SHFWHG FRPSRQHQWV RI FDUV ,Q WUDGLWLRQDO FDUV KXPDQ GULYHUV DUH WKH OLQN EHWZHHQ YHKLFOHV DQG WKHLU HQYLURQPHQW 'ULYHUV ZDWFK WUDI¿F VLJQV DQG VLJQDOV PRQLWRU URDG FRQGLWLRQV DYRLG RWKHU YHKLFOHV FRPPXQLFDWH ZLWK RWKHU GULYHUV DQG QDYLJDWH 7R IXO¿OO WKHVH IXQFWLRQV $9V HPSOR\ VHQVRUV YHKLFOH WR YHKLFOH 9 9

FRPPXQLFDWLRQV DQG YHKLFOH WR LQIUDVWUXFWXUH 9 , FRPPXQLFDWLRQV $9V OLNH RWKHU REMHFWV LQ WKH ,QWHUQHW RI 7KLQJV ,R7 UHO\ RQ FORXG LQIUDVWUXFWXUH $QGHUVRQ DQG RWKHUV GHVFULEH WKH ³VHQVRU VXLWHV´ WKDW SURYLGH LQIRUPDWLRQ WR $9V )LUVW FDPHUDV JDWKHU GDWD DERXW WKH RXWVLGH ZRUOG 7 &DPHUDV DUH OLPLWHG E\ ZHDWKHU FRQGLWLRQV DQG E\ WKH FDSDELOLW\ RI VRIWZDUH WKDW FRQYHUWV LPDJHV WR GDWD 6HFRQG $9V UHO\ RQ VHQVRUV 5DGDU DQG OLGDU ERWK HPLW D VLJQDO DQG WUDFN WKH WLPH WKDW LW WDNHV IRU WKH VLJQDO WR ERXQFH RII RI DQ REMHFW DQG UHWXUQ WR WKH VHQVRU WR GHWHUPLQH GLVWDQFH 9 %RWK WHFKQRORJLHV KDYH OLPLWDWLRQV EHFDXVH VRPH VXUIDFHV GR QRW DGHTXDWHO\ UHÀHFW UDGLR ZDYHV DQG OLJKW 10 8OWUDVRQLF VHQVRUV GHWHFW QHDUE\ REMHFWV ZKLOH LQIUDUHG VHQVRUV GHWHFW REMHFWV DW QLJKW 11 7KLUG $9V FDQ XVH *36 DQG LQWHUQDO QDYLJDWLRQ V\VWHPV ,16 IRU ORFDWLRQ LQIRUPDWLRQ 12 ,16 UHOLHV RQ J\URVFRSHV DOWLPHWHUV DQG DFFHOHURPHWHUV 13 )LQDOO\ $9V FDQ KDYH DFFHVV WR PDSV WKDW LQFOXGH LQIRUPDWLRQ RQ WUDI¿F VLJQDOV 14 )RU H[DPSOH *RRJOH KDV GHVLJQHG YHKLFOHV WKDW FROOHFW LQIRUPDWLRQ DQG EXLOG YLUWXDO PDSV RI URDG IHDWXUHV DV WKH\ GULYH 15 $9V FRPPXQLFDWH ZLWK YHKLFXODU DG KRF QHWZRUNV 9$1(7V 9$1(7V ³DUH WKH EDVLV IRU LQWHOOLJHQW WUDQVSRUWDWLRQ V\VWHPV ,76V ´17 9 , WHFKQRORJLHV VKDUH LQIRUPDWLRQ RQ WUDI¿F VLJQDOV DQG RWKHU H[WHUQDO IDFWRUV ZLWK FDUV 7KHVH V\VWHPV KHOS $9V WR XQGHUVWDQG WKH ZRUOG DURXQG WKHP %OXHWRRWK FRXOG EH XVHG WR LPSURYH 9 , FRPPXQLFDWLRQV ,Q DGGLWLRQ 9 9 WHFKQRORJLHV HQDEOH FDUV WR VKDUH LQIRUPDWLRQ ZLWK HDFK RWKHU DERXW WKHLU RZQ ORFDWLRQ DQG VSHHG WR UHGXFH WKH OLNHOLKRRG RI D FUDVK $9V FRPPXQLFDWH ZLWK HDFK RWKHU XVLQJ GHGLFDWHG VKRUW UDQJH FRPPXQLFDWLRQV '65& 19 7KH 86 *RYHUQPHQW

Cyber, Intelligence, and Security | Volume 1 | No. 1 | January 2017

123

ANDREW TABAS | PEDAL TO THE METAL?THE RACE TO DEVELOP SECURE AUTONOMOUS CARS

Cyber, Intelligence, and Security | Volume 1 | No. 1 | January 2017

124

$FFRXQWDELOLW\ 2I¿FH UHFHQWO\ UHOHDVHG D VWXG\ RQ WKH SRWHQWLDO DSSOLFDWLRQ RI WHFKQRORJ\ WR FDUV ZLWK KXPDQ GULYHUV 20 $9V XVH D ³VHQVH SODQ DFW GHVLJQ ´21 &DUV GHWHFW LQIRUPDWLRQ UXQ DOJRULWKPV WR GHWHUPLQH WKH EHVW UHVSRQVH DQG H[HFXWH WKH QHFHVVDU\ DFWLRQ $9V DUH DQ H[DPSOH RI ³0DVVLYHO\ ,QWHJUDWHG 6\VWHPV RI 6PDUW 7UDQVGXFHUV´ 0,67

ZKLFK ³XVH FORXG FRQFHSWV WR DFTXLUH LQIRUPDWLRQ VHQVH WKHLU VXUURXQGLQJV DQG DFWLYHO\ LQWHUYHQH LQ VLWXDWLRQV WR HIIHFW GHVLUDEOH RXWFRPHV ´22 $9V SUHVHQW D XQLTXH FKDOOHQJH EHFDXVH WKH\ PXVW DW DOO FRVWV HQVXUH WKH VDIHW\ RI WKHLU SDVVHQJHUV (QJLQHHUV PXVW HQVXUH WKDW VHQVRUV DUH HIIHFWLYH LQ DOO W\SHV RI ZHDWKHU DQG WUDI¿F FRQGLWLRQV 7KH\ PXVW SURWHFW WKHVH VHQVRUV IURP RXWVLGH LQWHUIHUHQFH ZKLFK FRXOG WKUHDWHQ WKH VDIHW\ RI WKH SDVVHQJHUV LQ WKH $9 DQG LQ QHLJKERULQJ YHKLFOHV F\EHUVHFXULW\ WKHUHIRUH EHFRPHV D NH\ FRQFHUQ LQ WKH SURGXFWLRQ RI $9V

Towards a Collective Vehicular Network 9 9 DQG 9 , FRPPXQLFDWLRQV HQDEOH WKH FUHDWLRQ RI D ³FROOHFWLYH YHKLFXODU QHWZRUN ´ +XPDQV FDUV DQG LQIUDVWUXFWXUH FRPPXQLFDWH LQ WKLV QHWZRUN WR FUHDWH HI¿FLHQW YHKLFOHV &DUV OHDUQ RI ZHDWKHU FRQGLWLRQV DQG RWKHU LQIRUPDWLRQ WKURXJK FORXG LQIUDVWUXFWXUH &DUV ZLOO QHHG WR GHDO ZLWK KXPDQ GULYHUV DW ¿UVW EXW HYHQWXDOO\ ZLOO FRPPXQLFDWH VROHO\ ZLWK HDFK RWKHU ,Q D QHWZRUN ZLWKRXW KXPDQ GULYHUV SURJUDPPHUV ZLOO QHHG WR GHWHUPLQH PHWKRGV WR LQFUHDVH WKH ÀRZ RI WUDI¿F 5LHQHU SUHGLFWV WKDW WKH IXWXUH RI DXWRQRPRXV FDUV LV D VKDUHG ÀHHW LQ ZKLFK D SDVVHQJHU FDQ RUGHU D FDU IRU D WULS DQG WKHQ DOORZ WKH FDU WR UHWXUQ WR D FHQWUDO ORFDWLRQ 23 /LNH VHQVRUV 9 9 DQG 9 , FRPPXQLFDWLRQ SUHVHQW F\EHUVHFXULW\ FKDOOHQJHV 0DOLFLRXV FRPPXQLFDWLRQ FRXOG FRQFHDO RU LQYHQW URDG KD]DUGV 7KHVH LPDJLQHG KD]DUGV ZRXOG FDXVH WKH FDU WR EHKDYH HUUDWLFDOO\ 0RUH DGYDQFHG KDFNHUV FRXOG XVH WKH $9¶V FRPPXQLFDWLRQV V\VWHP WR DFFHVV WKH FDU¶V FHQWUDO FRPSXWHU DQG JDLQ FRQWURO RI WKH $9¶V VWHHULQJ DQG EUDNLQJ ,W ZLOO EH QHFHVVDU\ WKHUHIRUH WR VHFXUH WKH H[WHUQDO FRPPXQLFDWLRQV RI WKH $9V

Current Industry Trends ,Q WKH UDFH WR GHYHORS VHFXUH $9V DUH ERWK WUDGLWLRQDO DXWRPDNHUV DQG WHFKQRORJ\ FRPSDQLHV &RPSDQLHV LQFOXGH 9RONVZDJHQ 0HUFHGHV %HQ] 7HVOD %RVFK 8EHU /RFNKHHG 0DUWLQ *RRJOH $SSOH DQG RWKHUV 'HYHORSPHQW KDV H[WHQGHG WR WUXFNV DQG PLOLWDU\ YHKLFOHV 24 (ORQ 0XVN WKH IRXQGHU RI 7HVOD

ANDREW TABAS | PEDAL TO THE METAL?THE RACE TO DEVELOP SECURE AUTONOMOUS CARS

125

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³XVHU DFFHSWDQFH´ RI $9V WKURXJK LQQRYDWLYH GHVLJQ DGYDQFHG VHFXULW\ DQG ZHOO SXEOLFL]HG VWDWLVWLFV )LUVW VHOI GULYLQJ FDUV DW /HYHO RQ WKH 1+76$ VFDOH FRXOG UHSODFH WKH VWHHULQJ ZKHHO ZLWK D GLVSOD\ WKDW LQVSLUHV FRQ¿GHQFH LQ WKH FDU 6HFRQG VHFXULW\ H[SHUWV PXVW FRQVLGHU WKH ULVNV RI GDWD H[SORLWDWLRQ DQG GLUHFW DWWDFN $ FRQJUHVVLRQDO KHDULQJ RQ WKH VXEMHFW DFNQRZOHGJHG WKDW ³KDFNLQJ FRXOG WKUHDWHQ ZLGHVSUHDG DFFHSWDQFH´ RI $9V DV FRQFHUQV JURZ RYHU GDWD VHFXULW\ DQG SHUVRQDO VDIHW\ 29 8VHUV FRXOG EH FRQFHUQHG WKDW WKHLU FDUV¶ 9 9 FRPPXQLFDWLRQV DUH QRW SURWHFWHG 30 7KH\ FRXOG DOVR KDYH FRQFHUQV DERXW DWWDFNV RQ WKH VDIH RSHUDWLRQ RI WKH FDU LWVHOI 7KLUG PDQXIDFWXUHUV FRXOG VWUHVV WKH IDFW WKDW $9V DUH VDIHU WKDQ KXPDQ GULYHQ YHKLFOHV 31 &DU FUDVKHV SHUFHQW RI ZKLFK DUH FDXVHG E\ ³KXPDQ HUURU ´ WRRN OLYHV LQ 32 These violent events cost DSSUR[LPDWHO\ ELOOLRQ SHU \HDU 33 $9V FRXOG KHOS WR PRYH WRZDUG WKH ³XOWLPDWH JRDO´ RI EHLQJ ³WKH VDIHVW DQG PRVW HI¿FLHQW WUDQVSRUWDWLRQ V\VWHP LPDJLQDEOH ´34 +RZHYHU LI DQ $9 GRHV FUDVK WKH PHGLD ZLOO GLVFXVV WKH HYHQW PRUH WKDQ LW ZRXOG GLVFXVV DQ RUGLQDU\ FDU DFFLGHQW )RU H[DPSOH WKH ¿UVW HYHU GHDWK LQ DQ $9 FUDVK RFFXUUHG LQ -XQH ZKHQ D 7HVOD FUDVKHG LQWR D WXUQLQJ WUDFWRU WUDLOHU 35 $OWKRXJK WKH FUDVK UHFHLYHG VLJQL¿FDQW PHGLD FRYHUDJH 7HVOD ZDV TXLFN WR UHDVVXUH WKH SXEOLF WKDW HYHQ DIWHU WKH FUDVK WKH DXWRSLORW IHDWXUH KDV D ORZHU GHDWK UDWH WKDQ KXPDQ GULYHUV ,W LV DOVR SRVVLEOH WR SURPRWH XVHU DFFHSWDQFH E\ VWUHVVLQJ WKH RWKHU EHQH¿WV RI $9V 7KHVH LQFOXGH JUHDWHU PRELOLW\ IRU SHRSOH ZKR DUH XQDEOH WR GULYH D VPDOOHU GHSHQGHQFH RQ SDUNLQJ DQG SRWHQWLDO HQYLURQPHQWDO

Cyber, Intelligence, and Security | Volume 1 | No. 1 | January 2017

25

ANDREW TABAS | PEDAL TO THE METAL?THE RACE TO DEVELOP SECURE AUTONOMOUS CARS

Cyber, Intelligence, and Security | Volume 1 | No. 1 | January 2017

126

EHQH¿WV 37 0DQXIDFWXUHUV VKRXOG HPSKDVL]H WKDW WKHVH EHQH¿WV RXWZHLJK WKH SRWHQWLDO LQFUHDVH LQ WRWDO PLOHV WUDYHOHG DQG WKH OLNHO\ GHFUHDVH LQ WKH QXPEHU RI SURIHVVLRQDO GULYLQJ MREV

Vulnerabilities 7RGD\ ODUJH VFDOH KDFNV DUH ERWK LQHI¿FLHQW DQG H[SHQVLYH EHFDXVH FDUV XVH GLIIHUHQW FRPSXWHU V\VWHPV $V FDUV EHFRPH LQWHJUDWHG WKURXJK DGYDQFHG FRPPXQLFDWLRQV V\VWHPV DQG YHKLFXODU QHWZRUNV KRZHYHU ODUJH VFDOH KDFNV PD\ EHFRPH SRVVLEOH 0RUHRYHU KDFNV RI LQGLYLGXDO FDUV DUH DOUHDG\ SRVVLEOH WZR KDFNHUV IRU H[DPSOH ZHUH DEOH WR FRQWURO WKH VWHHULQJ EUDNLQJ DQG DFFHOHUDWLRQ RI D MHHS WKURXJK WKH FDU¶V 8FRQQHFW V\VWHP 7KH MHHS¶V HQWHUWDLQPHQW V\VWHP ZDV FRQQHFWHG WR LWV VWHHULQJ DQG EUHDNLQJ FRQWUROV WKURXJK LWV FRPSXWHU QHWZRUN NQRZQ DV WKH ³&$1 EXV ´39 $9V KDYH HYHQ PRUH FRQQHFWLRQV ZLWK WKH RXWVLGH ZRUOG DQG JUHDWHU FRPSXWHUL]HG FRQWURO RI WKH FDU¶V V\VWHPV WKDQ WKH KDFNHG MHHS LQFUHDVLQJ WKH YXOQHUDELOLW\ RI WKHVH W\SHV RI FDUV 8EHU UHFHQWO\ KLUHG WKH WZR KDFNHUV WR LPSURYH LWV RZQ YHKLFOHV¶ VHFXULW\ 40 &DU PDQXIDFWXUHUV PXVW SURDFWLYHO\ SURWHFW $9V IURP KDFNV GLUHFWHG DW VRIWZDUH XSGDWHV VHQVRUV DQG FRPPXQLFDWLRQV QHWZRUNV )LUVW DOWKRXJK VRIWZDUH XSGDWHV DUH QHFHVVDU\ IRU $9V WR IXQFWLRQ HIIHFWLYHO\ WKH\ DUH DOVR D PDMRU YXOQHUDELOLW\ 41 ,I WKH XSGDWHV DUH LQVWDOOHG RQOLQH WKH V\VWHP EHFRPHV HYHQ PRUH DW ULVN 42 6HFRQG $9V¶ VHQVRUV FDQ EH IRROHG ,I DQ $9 PLVWDNHQO\ GHWHFWV D SHGHVWULDQ RQ WKH URDG WKH FDU FRXOG VXGGHQO\ VWRS 43 ,QGHHG OLGDU VHQVRUV FDQ EH IRROHG ZLWK D VL[W\ GROODU ODVHU 44 There is also D ULVN WKDW GULYHUV FRXOG ³MDLOEUHDN´ WKHLU FDUV RU KDFN WKHLU RZQ YHKLFOHV WR FKDQJH WKH ZD\ WKDW WKH\ EHKDYH 45 2ZQHUV ZKR ³MDLOEUHDN´ WKHLU FDUV ZRXOG LQFUHDVH FRQWURO EXW ULVN VHFXULW\ 7KDW ULVN LQFUHDVHV ZKHQ D MDLOEURNHQ FDU GULYHV QHDU DQ RUGLQDU\ FDU WKDW H[SHFWV LW WR DFW LQ D FHUWDLQ ZD\ )LQDOO\ WKH IDFW WKDW $9V ZLOO EH FRQQHFWHG WR HDFK RWKHU E\ FRPPXQLFDWLRQV QHWZRUNV ZLOO FDXVH DGGLWLRQDO YXOQHUDELOLWLHV $WWDFNV RQ 9 9 9 , DQG *36 FDQ WDUJHW VDIHW\ XVHU DFFHSWDQFH DQG SULYDF\ 47 9 9 FRPPXQLFDWLRQ LV WKHUHIRUH YXOQHUDEOH WR ERWK FRPSXWHU QHWZRUN H[SORLW &1( DQG FRPSXWHU QHWZRUN DWWDFN &1$ &1( DJDLQVW DQ $9¶V FRPPXQLFDWLRQV FRXOG WDUJHW WKH YLFWLP¶V SULYDF\ 'DWD DERXW ZKHUH D FHUWDLQ GULYHU WUDYHOHG FRXOG WKHQ EH XVHG DJDLQVW KLP RU KHU &1$ DJDLQVW DQ $9 FRXOG JHQHUDWH DQG UHSRUW ¿FWLRQDO LOOHJDO DFWLYLW\ FDXVLQJ XQIRUWXQDWH UHSHUFXVVLRQV IRU WKH GULYHU 49 +DFNHUV

ANDREW TABAS | PEDAL TO THE METAL?THE RACE TO DEVELOP SECURE AUTONOMOUS CARS

RI 9 9 FRPPXQLFDWLRQV FDQ WDUJHW NH\V VRIWZDUH VHQVRUV DQG RXWJRLQJ FRPPXQLFDWLRQV 50 'R6 DWWDFNV FRXOG RYHUORDG WKH FDU ZLWK LQIRUPDWLRQ RU SUHYHQW WKH FDU IURP VHQGLQJ VLJQDOV 51 /DFH\ LGHQWL¿HV WKUHH W\SHV RI DWWDFN DJDLQVW 9 9 DQG 9 , FRPPXQLFDWLRQV $ KDFNHU FDQ XVH ³PHVVDJH OLQNLQJ´ DQG WUDFN WKH 9 9 ³%DVLF 6DIHW\ 0HVVDJH´ WR GLVFRYHU WKH ORFDWLRQ RI D FDU ,Q D ³IUDPLQJ DWWDFN ´ WKH KDFNHU ¿UVW VWHDOV WKH FDU¶V RQOLQH FHUWL¿FDWH WKHQ VHQGV LQFRUUHFW PHVVDJHV WR VKRZ ¿FWLRQDO LOOHJDO GULYLQJ $ ³IUDPLQJ DWWDFN´ FRXOG FDXVH WKH DUUHVW RI DQ LQQRFHQW GULYHU ,Q D ³6\ELO DWWDFN ´ D KDFNHU VWHDOV FHUWL¿FDWHV RI PDQ\ FDUV WKHQ VHQGV PHVVDJHV IURP HDFK FDU WKDW SRLQW WR D VLQJOH FDU¶V LOOHJDO GULYLQJ 52 $ ³6\ELO DWWDFN´ FRXOG DOVR IUDPH D ODZ DELGLQJ GULYHU (DFK RI WKHVH YXOQHUDELOLWLHV UHSUHVHQWV DQ REVWDFOH RQ WKH UDFH FRXUVH WR GHYHORS VHFXUH $9V $V PDQXIDFWXUHUV DQG WHFKQRORJ\ FRPSDQLHV ¿QG QHZ VROXWLRQV WKH\ ZLOO PRYH FORVHU WR YLFWRU\

Hacking Motivations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³GUDPDWLFDOO\´ DQG GLG QRW UHFRYHU XQWLO 53 $9V FRXOG DOVR EH D XVHIXO ZD\ IRU WHUURULVWV WR DVVDVVLQDWH VSHFL¿F WDUJHWV $ ZHOO GLVJXLVHG DWWDFN RQ D VLQJOH FDU PD\ UHJLVWHU DV D WHFKQLFDO PDOIXQFWLRQ +DFNHUV FRXOG DOVR WDUJHW $9V WR WU\ WR EODFNPDLO FRQVXPHUV RU WKH 86 JRYHUQPHQW ,I D FRQVXPHU UHFHLYHG D QRWL¿FDWLRQ IURP WKHLU FDU WKDW WKH FDU ZRXOG GHOLEHUDWHO\ FUDVK XQOHVV PRQH\ ZDV VHQW WR DQ RQOLQH DFFRXQW WKH FRQVXPHU PD\ EH IRUFHG WR FRPSO\ 6LPLODUO\ D FULPLQDO RUJDQL]DWLRQ FRXOG WHOO WKH 86 JRYHUQPHQW WKDW LW KDG KDFNHG VHYHUDO XQLGHQWL¿HG FDUV ,W FRXOG WKHQ IRUFH WKH JRYHUQPHQW WR PHHW LWV GHPDQGV RU WKUHDWHQ WR ODXQFK D PDVVLYH DWWDFN /XFNLO\ DQ HFRQRPLFDOO\ PRWLYDWHG KDFNHU ZRXOG ¿QG WKH SURFHVV RI KDFNLQJ DQ $9 WR EH H[SHQVLYH 54 +DFNLQJ $9V ZLOO RQO\ EH DWWUDFWLYH LI KDFNHUV FDQ ¿QG D ZD\ WR PDNH D SUR¿W 55 ,Q DGGLWLRQ DV RQH white hat hacker points out, the people who have the technical knowledge

Cyber, Intelligence, and Security | Volume 1 | No. 1 | January 2017

127

ANDREW TABAS | PEDAL TO THE METAL?THE RACE TO DEVELOP SECURE AUTONOMOUS CARS

Cyber, Intelligence, and Security | Volume 1 | No. 1 | January 2017

128

QHFHVVDU\ WR KDFN FDUV¶ FRPPXQLFDWLRQV V\VWHPV JHQHUDOO\ GR QRW ZDQW WR NLOO SHRSOH $ JUDYHU ULVN LV SROLWLFDO EODFNPDLO 7KH JURXS $QRQ\PRXV IRU H[DPSOH FRXOG KDFN $9V WR GHPDQG WKDW WKH 86 JRYHUQPHQW FKDQJH FHUWDLQ SROLFLHV )RUHLJQ JRYHUQPHQWV DUH OHVV RI D WKUHDW WKDQ WHUURULVWV DQG FULPLQDOV 7KH\ FRXOG WDUJHW $9V¶ FRPPXQLFDWLRQV QHWZRUN EXW WKH UHVXOWLQJ GLVUXSWLRQ RI WKH 86 HFRQRP\ ZRXOG OLNHO\ DIIHFW WKHLU RZQ HFRQRP\ DV ZHOO ,W LV ULVN\ KRZHYHU WR UHO\ RQ RWKHU JRYHUQPHQWV WR PDNH WKLV FDOFXODWLRQ

Potential Solutions 7R UHGXFH WKH SUREDELOLW\ RI F\EHUDWWDFNV RQ $9V LW LV QHFHVVDU\ WR VHFXUH FORXG LQIUDVWUXFWXUH SURWHFW WHOHFRPPXQLFDWLRQV DQG H[DPLQH WKH YXOQHUDELOLWLHV VSHFL¿F WR $9V 7KH ¿QDO FDWHJRU\ LQFOXGHV D UDQJH RI WHFKQLFDO DQG OHJDO VROXWLRQV 3URWHFWLQJ FORXG LQIUDVWUXFWXUH IURP F\EHUDWWDFNV LV HVVHQWLDO IRU WKH VHFXULW\ RI $9V 7R VHFXUH WKH FORXG WHFKQRORJ\ FRPSDQLHV VKRXOG EH UHTXLUHG WR IROORZ ³EHVW SUDFWLFHV RI DSSOLFDWLRQ VHFXULW\´ WR EH JUDQWHG DFFHVV WR WKH QHWZRUN 57 Rigorous testing and reporting practices will help to ensure a VHFXUH QHWZRUN )LQDOO\ F\EHUVHFXULW\ WHDPV PXVW DFW OLNH ³¿UH¿JKWHUV ´ UHDG\ WR UHVSRQG WR F\EHUDWWDFNV TXLFNO\ 59 3URWHFWLQJ WHOHFRPPXQLFDWLRQV LQFOXGLQJ 9 9 DQG 9 , LV HVVHQWLDO IRU SULYDF\ DQG VHFXULW\ (GXFDWLRQ FROODERUDWLRQ WKDW UHVSHFWV SULYDF\ ULJKWV ODZV DQG OHDGHUVKLS FDQ SURWHFW WHOHFRPPXQLFDWLRQV LQIUDVWUXFWXUH IURP F\EHUDWWDFNV )RU HIIHFWLYH 9 9 DQG 9 , FRPPXQLFDWLRQ YHKLFOHV FDQ VHQG RXW RQH ZD\ XQHQFU\SWHG ³%DVLF 6DIHW\ 0HVVDJHV´ WKDW FDQ EH UHDG E\ QHDUE\ YHKLFOHV LQ DGGLWLRQ WR WZR ZD\ HQFU\SWHG ³WUXVWHG DQG VHFXUH FRPPXQLFDWLRQV ´ 2QH ,VUDHOL VWDUWXS FDOOHG $UJRV IRU H[DPSOH LV GHYHORSLQJ D ZD\ WR GHWHUPLQH ZKLFK PHVVDJHV DUH OHJLWLPDWH DQG ZKLFK DUH PDOLFLRXV 7KHUH DUH DOVR SRWHQWLDO VROXWLRQV WKDW DUH VSHFL¿F WR $9V 7KHVH VROXWLRQV ZKHQ FRPELQHG UHGXFH WKH OLNHOLKRRG RI D VXFFHVVIXO DWWDFN DJDLQVW DQ $9 )LUVW GHYHORSHUV ZLOO QHHG WR KDYH D FOHDU XQGHUVWDQGLQJ RI WUDI¿F SDWWHUQV DQG WKH ZD\ WKDW $9V LQWHUDFW ZLWK RWKHU FDUV F\FOLVWV DQG SHGHVWULDQV 7KLV XQGHUVWDQGLQJ ZLOO HQDEOH WKHP WR GLVWLQJXLVK QRUPDO GULYLQJ EHKDYLRU IURP KDFNHG EHKDYLRU 6HFRQG WKH\ ZLOO QHHG WR HQVXUH WKDW D JLYHQ $9 RU VRIWZDUH XSGDWH VRXUFH FDQ EH SRVLWLYHO\ LGHQWL¿HG 3XEOLF .H\ ,QIUDVWUXFWXUH 3.,

FRXOG PDQDJH WKH LGHQWLI\LQJ FHUWL¿FDWHV RI $9V RQOLQH $ ³&HUWL¿FDWH

ANDREW TABAS | PEDAL TO THE METAL?THE RACE TO DEVELOP SECURE AUTONOMOUS CARS

129

$XWKRULW\´ ZRXOG EH UHVSRQVLEOH IRU DVVLJQLQJ RQOLQH FHUWL¿FDWHV WR $9V 7KH V\VWHP WKDW DVVLJQV WKRVH FHUWL¿FDWHV FRXOG EH ³FHQWUDOL]HG GHFHQWUDOL]HG RU K\EULG ´ 7KH FHUWL¿FDWHV ZRXOG LGHQWLI\ FDUV WKDW EHORQJ LQ WKH V\VWHP 1H[W FRPSDQLHV ZLOO QHHG WR HQVXUH WKDW FDUV FDQ LGHQWLI\ OHJLWLPDWH VRIWZDUH XSGDWHV $9V FDQ GLVWLQJXLVK EHWZHHQ OHJLWLPDWH DQG PDOLFLRXV VRIWZDUH XSGDWHV WKURXJK ³KDQGVKDNH´ PHFKDQLVPV TKHUH DUH DOVR D UDQJH RI WHFKQLFDO VROXWLRQV WKDW HQDEOH FDUV¶ FRPSXWHU V\VWHPV WR PDNH VXUH WKDW WKH\ DUH FRQQHFWHG WR WKH FRUUHFW FDU DQG WKDW WKH\ DUH UXQQLQJ OHJLWLPDWH VRIWZDUH ³3ODXVLELOLW\ FKHFNV´ OLPLW WKH VRIWZDUH WKDW FDQ UXQ RQ D FDU¶V ³HOHFWURQLF FRQWURO XQLW´ (&8 ³&RPSRQHQW LGHQWL¿FDWLRQ´ SDLUV RQH (&8 ZLWK RQH FDU 70 $QRWKHU SLHFH RI VRIWZDUH DWWHPSWV WR GHWHFW XQXVXDO GDWD 71 7KLUG $9 GHYHORSHUV VKRXOG VHSDUDWH HVVHQWLDO DQG QRQHVVHQWLDO FRPSXWHU V\VWHPV 7KH -HHS KDFN GHPRQVWUDWHG WKH YXOQHUDELOLW\ RI FDUV ZKRVH IXQFWLRQV DUH DOO OLQNHG HOHFWURQLFDOO\ &DPHN DQG RWKHUV UHFRPPHQG WKDW car PDQXIDFWXUHUV EXLOG FDUV ZLWK ³PXOWLSOH LQGHSHQGHQW OD\HUV RI VHFXULW\´ 0,/6 WKDW DUH ³DGDSWLYH´ DQG ³GLVWULEXWHG ´ ³0,/6 DUFKLWHFWXUH´ HVWDEOLVKHV D EDUULHU EHWZHHQ HVVHQWLDO DQG QRQHVVHQWLDO FRPSXWHUV LQ WKH FDU 7KH VHSDUDWLRQ RI FRPSXWHU V\VWHPV FDQ SUHYHQW D YLUXV IURP UHDFKLQJ D FDU¶V HVVHQWLDO IXQFWLRQV 72 $ ³GLVWULEXWHG´ V\VWHP ZRXOG DOORZ 0,/6 DUFKLWHFWXUH WR IXQFWLRQ DFURVV PXOWLSOH FRPSXWHUV $Q ³DGDSWLYH´ V\VWHP FDQ EH XSGDWHG ZLWK QHZ FDSDELOLWLHV 73 7KHVH HOHPHQWV ZLOO KHOS WR UHGXFH WKH OLNHOLKRRG RI DWWDFN RQ IXWXUH $9V )RXUWK PDQXIDFWXUHUV VKRXOG H[SORUH DGGLWLRQDO WHFKQLFDO VROXWLRQV ³%ODFN ER[HV ´ ZKLFK ZHUH RULJLQDOO\ XVHG LQ DLUSODQHV FDQ UHFRUG GDWD RQ FUDVKHV ZLWKRXW QHFHVVDULO\ UHFRUGLQJ SULYDWH *36 GDWD 74 7KLV GDWD FDQ EH XVHG WR XQGHUVWDQG PLVWDNHV WKDW OHG WR D FUDVK DQG FRXOG SURYLGH D FOXH DV WR ZKHWKHU WKH YHKLFOH ZDV KDFNHG $9V VKRXOG DOVR EH HTXLSSHG ZLWK D ³VDIH PRGH´ LQ ZKLFK WKH FDU¶V DXWRQRPRXV IHDWXUHV FDQ EH GLVDEOHG 75 ,Q WKH HYHQW RI D KDFN D GULYHU FRXOG WKHQ VDIHO\ JDLQ FRQWURO RI WKH YHKLFOH )RU D ³VDIH PRGH´ WR H[LVW $9V ZRXOG QHHG WR PDLQWDLQ WKH WUDGLWLRQDO VWHHULQJ ZKHHO DQG EUDNH SHGDO 0DQXIDFWXUHUV VKRXOG DOVR DGKHUH WR LQGXVWU\ VWDQGDUGV DQG H[WHQVLYHO\ WHVW WKHLU YHKLFOHV )LIWK ZKLOH PDQ\ HIIRUWV KDYH EHHQ WDNHQ WR SURWHFW $9V IURP WHFKQLFDO FKDOOHQJHV LW LV XVHIXO WR H[SORUH OHJDO VROXWLRQV 7KH ULJKW ODZV FRXOG ERWK GHWHU KDFNHUV DQG PDNH KDFNLQJ PRUH GLI¿FXOW ,QGHHG YDULRXV VWDWHV DUH DOUHDG\ LPSOHPHQWLQJ ODZV DERXW WKH WHVWLQJ RI DXWRQRPRXV YHKLFOHV 77 The

Cyber, Intelligence, and Security | Volume 1 | No. 1 | January 2017

ANDREW TABAS | PEDAL TO THE METAL?THE RACE TO DEVELOP SECURE AUTONOMOUS CARS

Cyber, Intelligence, and Security | Volume 1 | No. 1 | January 2017

130

VWDWHV VKRXOG DLP WR LPSOHPHQW ODZV WKDW UHTXLUH $9 PDNHUV WR IROORZ VHFXULW\ EHVW SUDFWLFHV 6WDWH DQG QDWLRQDO OHJLVODWXUHV FDQ DOVR PDNH OHJLVODWLRQ WKDW SURWHFWV FHUWL¿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

Ethical Dilemmas $9V DSSO\ FORXG LQIUDVWUXFWXUH WR OLIH DQG GHDWK VLWXDWLRQV DQG WKHUHIRUH UDLVH PDQ\ HWKLFDO TXHVWLRQV :KLOH D IXOO HWKLFDO GLVFXVVLRQ LV EH\RQG WKH VFRSH RI WKLV SDSHU LW LV XVHIXO WR UHYLHZ VRPH RI WKH H[LVWLQJ OLWHUDWXUH DQG RQJRLQJ TXHVWLRQV (WKLFDO V\VWHPV FDQ IRFXV RQ XWLOLWDULDQLVP ULJKWV MXVWLFH WKH ³FRPPRQ JRRG ´ RU YLUWXHV , EHJLQ ZLWK D XWLOLWDULDQ DSSURDFK EHFDXVH $9V VHHN WR VDYH DV PDQ\ OLYHV DV SRVVLEOH $FFRUGLQJ WR $OH[DQGHU .RWW ³VHOI GULYLQJ FDUV ZLOO NLOO SHRSOH EXW IHZHU SHRSOH ´ )URP D XWLOLWDULDQ SRLQW RI YLHZ WKH REYLRXV FKRLFH LV WR LPSOHPHQW DXWRQRP\ Turck goes a VWHS IXUWKHU DQG DUJXHV WKDW DQ $9 VKRXOG EH SURJUDPPHG QRW RQO\ WR VDYH OLYHV EXW DOVR WR NHHS WUDI¿F ÀRZLQJ VPRRWKO\ IRU PLOOLRQV RI RWKHU GULYHUV 6LQFH $9V¶ DOJRULWKPV DUH ZULWWHQ LQ DGYDQFH HYHU\ WUDGHRII LQ WHUPV RI OLYHV DQG FRQYHQLHQFH LV PDGH DKHDG RI WLPH :KHQ FRGHUV SURJUDP $9V¶ DOJRULWKPV WKH\ ZLOO QHHG WR PDNH WKH DOJRULWKPV ³FRQVLVWHQW ´ DYRLG ³SXEOLF RXWUDJH ´ DQG ³QRW >GLVFRXUDJH@ EX\HUV ´ $9 PDNHUV ZLOO QHHG WR FKRRVH EHWZHHQ NLOOLQJ SHGHVWULDQV DQG GULYHUV )URZH DUJXHV WKDW E\ FKRRVLQJ WR JHW LQWR D FDU D GULYHU DVVXPHV UHVSRQVLELOLW\ DQG WKHUHIRUH VKRXOG ULVN EHLQJ NLOOHG EHIRUH D SHGHVWULDQ 3V\FKRORJLVWV DQG SROOLQJ GDWD ZLOO EH UHTXLUHG WR FRQVWUXFW DFFHSWDEOH DOJRULWKPV DV LQGLYLGXDOV FRXOG EH UHOXFWDQW WR JHW LQ D XWLOLWDULDQ YHKLFOH WKDW PD\ NLOO WKHP EXW PD\ VDYH D SHGHVWULDQ &RQVLVWHQF\ LQ DOJRULWKPV LV DOVR HVVHQWLDO RWKHUZLVH WKHUH FRXOG EH HFRQRPLF GLVFULPLQDWLRQ DV WKRVH FDSDEOH RI SXUFKDVLQJ FDUV WKDW SURWHFW WKH GULYHU ZLOO GR VR

ANDREW TABAS | PEDAL TO THE METAL?THE RACE TO DEVELOP SECURE AUTONOMOUS CARS

,W LV DOVR FKDOOHQJLQJ WR H[DPLQH ZKR LV UHVSRQVLEOH IRU D FUDVK $V $9V EHFRPH PRUH FRPPRQ LW ZLOO EH QHFHVVDU\ WR GHWHUPLQH ZKHWKHU PDQXIDFWXUHUV RU WKH SHUVRQ LQ WKH IURQW VHDW RI WKH $9 LV UHVSRQVLEOH The answer could GHSHQG RQ ZKHWKHU WKH FDU LV DXWRQRPRXV /HYHO RU VHOI GULYLQJ /HYHO

)LQDOO\ WKHUH LV WKH LVVXH RI DQ DXWRQRPRXV YHKLFOH QHWZRUN WKDW WDNHV DZD\ LQGLYLGXDO IUHHGRPV ,I WKH JRYHUQPHQW FRQWUROV WKH QHWZRUN LW FRXOG GHWHUPLQH QRW RQO\ GULYHUV¶ VSHHG EXW DOVR WKHLU GHVWLQDWLRQ $ FROOHFWLYH YHKLFXODU QHWZRUN FRXOG WKHUHIRUH JLYH ULVH WR D JRYHUQPHQW WKDW FRQWUROV LQGLYLGXDOV¶ WUDQVSRUWDWLRQ

Implications and Areas of Further Research 6R VKRXOG DXWRPDNHUV WKURZ LQ WKH WRZHO" $UH WKH XQLTXH VHFXULW\ DQG WHFKQLFDO FKDOOHQJHV VR JUHDW WKDW WHFKQRORJ\ FRPSDQLHV DQG FDU PDQXIDFWXUHUV VKRXOG SXW $9V RQ KROG XQWLO WKH\ DUH PRUH VHFXUH" $EVROXWHO\ QRW $9 GHYHORSHUV VKRXOG FRQWLQXH WR UDFH DKHDG EHFDXVH $9V HYHQ ZLWK WKHLU LPSHUIHFWLRQV FDQ SUHYHQW FUDVKHV DQG VDYH OLYHV (ORQ 0XVN WKH IRXQGHU RI 7HVOD UHFHQWO\ PDGH WKLV SRLQW +H ZURWH WKDW WKH FRPSDQ\ LV QRW ZDLWLQJ WR UHOHDVH $9V EHFDXVH ³ZKHQ XVHG FRUUHFWO\ >DXWRQRP\@ LV DOUHDG\ VLJQL¿FDQWO\ VDIHU WKDQ D SHUVRQ GULYLQJ E\ WKHPVHOYHV DQG LW ZRXOG WKHUHIRUH EH PRUDOO\ UHSUHKHQVLEOH WR GHOD\ UHOHDVH VLPSO\ IRU IHDU RI EDG SUHVV RU VRPH PHUFDQWLOH FDOFXODWLRQ RI OHJDO OLDELOLW\ ´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

Cyber, Intelligence, and Security | Volume 1 | No. 1 | January 2017

131

ANDREW TABAS | PEDAL TO THE METAL?THE RACE TO DEVELOP SECURE AUTONOMOUS CARS

Cyber, Intelligence, and Security | Volume 1 | No. 1 | January 2017

132

Notes ,VDDF $VLPRY ³6DOO\ ´ LQ Nightfall Two )URJPRUH *UDQDGD

-DPHV 0 $QGHUVRQ 1LGKL .DOUD .DUO\Q ' 6WDQOH\ 3DXO 6RUHQVHQ &RQVWDQWLQH 6DPDUDV DQG 2OXZDWREL $ 2OXZDWROD Autonomous Vehicle Technology: A Guide for Policymakers 6DQWD 0RQLFD 5$1' S ³:K\ $XWRQRPRXV DQG 6HOI 'ULYLQJ &DUV $UH 1RW WKH 6DPH ´ Economist -XO\ KWWS ZZZ HFRQRPLVW FRP EORJV HFRQRPLVW H[SODLQV HFRQRPLVW H[SODLQV (ORQ 0XVN ³0DVWHU 3ODQ 3DUW 'HX[ ´ Tesla EORJ , -XO\ KWWSV ZZZ WHVOD FRP EORJ PDVWHU SODQ SDUW GHX[ ³86 'HSDUWPHQW RI 7UDQVSRUWDWLRQ 5HOHDVHV 3ROLF\ RQ $XWRPDWHG 9HKLFOH 'HYHORSPHQW ´ NHTSA 0D\ KWWS ZZZ QKWVD JRY $ERXW 1+76$ 3UHVV 5HOHDVHV 8 6 'HSDUWPHQW RI 7UDQVSRUWDWLRQ 5HOHDVHV 3ROLF\ RQ $XWR PDWHG 9HKLFOH 'HYHORSPHQW ,ELG 7 Anderson and others, Autonomous Vehicle Technology S ,ELG S ,ELG SS ± ,ELG ,ELG S ,ELG S ³+RZ 'RHV D 6HOI 'ULYLQJ &DU :RUN"´ Economist, April 29, 2013, KWWS ZZZ HFRQRPLVW FRP EORJV HFRQRPLVW H[SODLQV HFRQRPLVW H[SODLQV KRZ VHOI GULYLQJ FDU ZRUNV GULYHUOHVV"IVUF VFQ IE ZO EO WU VW KRZGRHVDVHOI GULYLQJFDUZRUN 14 Anderson and others, Autonomous Vehicle Technology, S ,ELG &KULVWRSK 3RQLNYDU DQG +DQV -RDFKLP +RI ³2YHUYLHZ RQ 6HFXULW\ $SSURDFKHV LQ ,QWHOOLJHQW 7UDQVSRUWDWLRQ 6\VWHPV 6HDUFKLQJ IRU +\EULG 7UXVW (VWDEOLVKPHQW 6ROXWLRQV IRU 9$1(7V ´ 6HFXUHZDUH 7KH 1LQWK ,QWHUQDWLRQDO &RQIHUHQFH on Emerging Security Information, Systems and Technologies HGV 5DLQHU )DON &DUOD 0HUNOH :HVWSKDOO DQG +DQV -RDFKLP +RI :LOPLQJWRQ '( ,$5,$

KWWS WRF SURFHHGLQJV FRP ZHEWRF SGI ,ELG S $QGHUVRQ DQG RWKHUV Autonomous Vehicle Technology, S 'RXJODV /DFH\ Vehicle-to-Vehicle Technologies for Intelligent Transportation Systems: Development, Challenges and Security Proposals 1HZ <RUN 1RYD 6FLHQFH S 8QLWHG 6WDWHV *RYHUQPHQW $FFRXQWDELOLW\ 2I¿FH ³,QWHOOLJHQW 7UDQVSRUWDWLRQ 6\VWHPV 9HKLFOH WR 9HKLFOH 7HFKQRORJLHV ([SHFWHG WR 2IIHU 6DIHW\ %HQH¿WV EXW D 9DULHW\ RI 'HYHORSPHQW &KDOOHQJHV ([LVW ´

21 Anderson and others, Autonomous Vehicle Technology S -HUU\ / $UFKHU ³,QWHUQDWLRQDO (QJDJHPHQW RQ &\EHU 9 6HFXULQJ &ULWLFDO ,QIUDVWUXFWXUH ´ Georgetown Journal of International Affairs S

ANDREW TABAS | PEDAL TO THE METAL?THE RACE TO DEVELOP SECURE AUTONOMOUS CARS

Cyber, Intelligence, and Security | Volume 1 | No. 1 | January 2017

133 $QGUHDV 5LHQHU ³:KR &DUHV DERXW 7UXVW *UDGH RI 7UDYHOLQJ DQG 4XDOLW\ RI 8VHU ([SHULHQFH LQ D :RUOG RI $XWRQRPRXV &DUV"´ $XWRPRWLYH8, µ $GMXQFW 3URFHHGLQJV RI WKH 6L[WK ,QWHUQDWLRQDO &RQIHUHQFH RQ $XWRPRWLYH 8VHU ,QWHUIDFHV DQG ,QWHUDFWLYH 9HKLFXODU $SSOLFDWLRQV SS ± 1LFN /DYDUV ³6HOI GULYLQJ 7UXFN +LWV WKH +LJKZD\ LQ :RUOG )LUVW ´ New Atlas, 2FWREHU KWWS QHZDWODV FRP GDLPOHUV SURGXFWLRQ DXWRQRPRXV WUXFN GHEXWV SXEOLF URDGV 'DYLG 6HGJZLFN ³$UP\ (\HV 6HOI 'ULYLQJ &RQYR\V ´ Automotive News $XJXVW KWWSV ZZZ DXWRQHZV FRP DUWLFOH 2(0 DUP\ H\HV VHOI GULYLQJ FRQYR\V %HQMDPLQ 6Q\GHU ³7HVOD &(2 (ORQ 0XVN -XVW 7ROG 8V :KHQ $OO &DUV :LOO %H 6HOI 'ULYLQJ ´ Fortune, 1RYHPEHU KWWS IRUWXQH FRP WHVOD HORQ PXVN VHOI GULYLQJ FDUV 8QLWHG 6WDWHV *RYHUQPHQW $FFRXQWDELOLW\ 2I¿FH ³,QWHOOLJHQW 7UDQVSRUWDWLRQ 6\VWHPV 9HKLFOH WR 9HKLFOH 7HFKQRORJLHV ([SHFWHG WR 2IIHU 6DIHW\ %HQH¿WV EXW D 9DULHW\ RI 'HYHORSPHQW &KDOOHQJHV ([LVW ´ S ³8SVHWWLQJ WKH $SSOH &DU ´ Economist )HEUXDU\ KWWS ZZZ HFRQRPLVW FRP QHZV EXVLQHVV HVWDEOLVKHG FDUPDNHUV QRW WHFK ¿UPV ZLOO ZLQ UDFH EXLOG YHKLFOHV 1LNKLO *RZGD :HQG\ -X DQG .LUVWHQ .RKOHU ³'DVKERDUG 'HVLJQ IRU DQ $XWRQRPRXV &DU ´ $XWRPRWLYH8, ¶ $GMXQFW 3URFHHGLQJV RI WKH 6L[WK ,QWHUQDWLRQDO &RQIHUHQFH RQ $XWRPRWLYH 8VHU ,QWHUIDFHV DQG ,QWHUDFWLYH 9HKLFXODU $SSOLFDWLRQV SS ± 8QLWHG 6WDWHV *RYHUQPHQW $FFRXQWDELOLW\ 2I¿FH ³,QWHOOLJHQW 7UDQVSRUWDWLRQ 6\VWHPV 9HKLFOH WR 9HKLFOH 7HFKQRORJLHV ([SHFWHG WR 2IIHU 6DIHW\ %HQH¿WV EXW D 9DULHW\ RI 'HYHORSPHQW &KDOOHQJHV ([LVW ´ S /DFH\ Vehicle-to-Vehicle Technologies for Intelligent Transportation Systems, S 31 Anderson and others, Autonomous Vehicle Technology, SS ± 8QLWHG 6WDWHV 6XEFRPPLWWHH RQ +LJKZD\V DQG 7UDQVLW ³+RZ $XWRQRPRXV 9HKLFOHV :LOO 6KDSH WKH )XWXUH RI 6XUIDFH 7UDQVSRUWDWLRQ ´ S YLL ,ELG ,ELG S 7KH 7HVOD 7HDP ³$ 7UDJLF /RVV ´ Tesla EORJ -XQH KWWSV ZZZ WHVOD FRP EORJ WUDJLF ORVV ,ELG 37 Anderson and others, Autonomous Vehicle Technology, S ,ELG S [YLL $QG\ *UHHQEHUJ ³+DFNHUV 5HPRWHO\ .LOO D -HHS RQ WKH +LJKZD\²:LWK 0H LQ ,W ´ Wired, -XO\ KWWSV ZZZ ZLUHG FRP KDFNHUV UHPRWHO\ NLOO MHHS KLJKZD\ 5REHUWR %DOGZLQ ³-HHS +DFNHUV *HW 1HZ -REV DW 8EHU¶V $XWRQRPRXV FDU /DE ´ Egadget $XJXVW KWWSV ZZZ HQJDGJHW FRP XEHU MHHS KDFNHUV 41 Anderson and others, Autonomous Vehicle Technology, S

ANDREW TABAS | PEDAL TO THE METAL?THE RACE TO DEVELOP SECURE AUTONOMOUS CARS

Cyber, Intelligence, and Security | Volume 1 | No. 1 | January 2017

134 ,ELG ,ELG S $QQD 3HHO ³6HOI 'ULYLQJ &DUV &DQ %H 'LVDEOHG ZLWK /DVHUV ´ ValueWalk, 6HSWHPEHU KWWS ZZZ YDOXHZDON FRP VHOI GULYLQJ FDUV FDQ EH GLVDEOHG ZLWK ODVHUV 45 Anderson and others, Autonomous Vehicle Technology, S ,ELG S /DFH\ Vehicle-to-Vehicle Technologies for Intelligent Transportation Systems, S ,ELG S ,ELG ,ELG SS ± ,ELG S ,ELG SS ± 8QLWHG 6WDWHV 'HSDUWPHQW RI 7UDQVSRUWDWLRQ 5HVHDUFK DQG ,QQRYDWLYH 7HFKQRORJ\ $GPLQLVWUDWLRQ ³$LU 7UDYHO 6LQFH ´ Bureau of Transportation Statistics Issue Brief, QR 'HFHPEHU KWWS ZZZ ULWD GRW JRY EWV VLWHV ULWD GRW JRY EWV ¿OHV SXEOLFDWLRQV VSHFLDOBUHSRUWVBDQGBLVVXHBEULHIV LVVXHBEULHIV QXPEHUB KWPO HQWLUH KWPO -DPHV *X\ DQG 0DW *UHHQ¿HOG ³&DQ 'ULYHUOHVV &DUV (YHU %H 0DGH +DFN 3URRI"´ Guardian, 0DUFK KWWSV ZZZ WKHJXDUGLDQ FRP WHFKQRORJ\ PDU GULYHUOHVV FDUV VDIH KDFNHUV JRRJOH ,ELG ,ELG -HUU\ / $UFKHU ³'\QDPLF DQG (IIHFWLYH 6HFXULW\ LQ WKH 5DSLGO\ (YROYLQJ *OREDO &ORXG &RPSXWLQJ &\EHUVSDFH ´ Georgetown Journal of International Affairs

S ,ELG ,ELG 7DUHN 6DDGDZL DQG +DLGDU &KDPDV ³6HFXULQJ 7HOHFRPPXQLFDWLRQV ,QIUDVWUXFWXUH DJDLQVW &\EHU $WWDFNV ´ Georgetown Journal of International Affairs ±

/DFH\ Vehicle-to-Vehicle Technologies for Intelligent Transportation Systems, S .REH /LDQL ³,VUDHOL 6WDUW 8S :LOO 3URWHFW <RXU &DU >IURP@ &\EHU 7HUURULVP ´ Walla 0DUFK KWWS FDUV ZDOOD FR LO LWHP /DFH\ Vehicle-to-Vehicle Technologies for Intelligent Transportation Systems, S ,ELG S &KULVWRSK 3RQLNZDU DQG +DQV -RDFKLP +RI ³2YHUYLHZ RQ 6HFXULW\ $SSURDFKHV LQ ,QWHOOLJHQW 7UDQVSRUWDWLRQ 6\VWHPV 6HDUFKLQJ IRU +\EULG 7UXVW (VWDEOLVKPHQW 6ROXWLRQV IRU 9$1(7V ´ SECUREWARE ± KWWSV ZZZ WKLQNPLQG RUJ GRZQORDG SKS"DUWLFOHLG VHFXUZDUHB B B B ,ELG

ANDREW TABAS | PEDAL TO THE METAL?THE RACE TO DEVELOP SECURE AUTONOMOUS CARS

Cyber, Intelligence, and Security | Volume 1 | No. 1 | January 2017

135 $QGHUVRQ DQG RWKHUV Autonomous Vehicle Technolog\ S /DFH\ Vehicle-to-Vehicle Technologies for Intelligent Transportation Systems, S ,ELG S ,ELG S ,ELG ³)LYH 6WDU $XWRPRWLYH &\EHU 6DIHW\ 3URJUDP ´ , $P WKH &DYDOU\ )HEUXDU\ KWWSV ZZZ LDPWKHFDYDOU\ RUJ GRPDLQV DXWRPRWLYH VWDU 73 $OH[DQGHU *HRUJ &DPHN &KULVWLDQ %XFNO DQG $ORLV .QROO ³)XWXUH &DUV 1HFHVVLW\ IRU DQ $GDSWLYH DQG 'LVWULEXWHG 0XOWLSOH ,QGHSHQGHQW /HYHOV RI 6HFXULW\ $UFKLWHFWXUH ´ HiCoNS ¾ 3URFHHGLQJV RI WKH 6HFRQG $&0 ,QWHUQDWLRQDO &RQIHUHQFH RQ +LJK &RQ¿GHQFH 1HWZRUNHG 6\VWHPV

SS ¹ ³)LYH 6WDU $XWRPRWLYH &\EHU 6DIHW\ 3URJUDP ´ ,ELG ,ELG 77 Anderson and others, Autonomous Vehicle Technology, SS ¹ /DFH\ Vehicle-to-Vehicle Technologies for Intelligent Transportation Systems, S -HUU\ / $UFKHU ³,QWHUQDWLRQDO (QJDJHPHQW RQ &\EHU 9 6HFXULQJ &ULWLFDO ,QIUDVWUXFWXUH ´ Georgetown Journal of International Affairs S 0DQXHO 9HODVTXH] 'HQQLV 0REHUJ 0LFKDHO - 0H\HU 7KRPDV 6KDQNV 0DUJDUHW 5 0F/HDQ 'DYLG 'H&RVVH &ODLUH $QGUp DQG .LUN 2 +DQVRQ ³$ )UDPHZRUN IRU 7KLQNLQJ (WKLFDOO\ ´ Markkula Center for Applied Ethics, August KWWSV ZZZ VFX HGX HWKLFV HWKLFV UHVRXUFHV HWKLFDO GHFLVLRQ PDNLQJ D IUDPHZRUN IRU HWKLFDO GHFLVLRQ PDNLQJ $OH[DQGHU .RWW /HFWXUH DW *HRUJHWRZQ 8QLYHUVLW\ :DVKLQJWRQ '& 0LWFK 7XUFN ³$Q $XWRQRPRXV &DU 0LJKW 'HFLGH <RX 6KRXOG 'LH ´ Backchannel, 0DUFK KWWSV EDFNFKDQQHO FRP UHLQYHQWLQJ WKH WUROOH\ SUREOHP I G OQSM I O -HDQ )UDQoRLV %RQQHIRQ $]LP 6KDULII DQG ,\DG 5DKZDQ ³$XWRQRPRXV 9HKLFOHV 1HHG ([SHULPHQWDO (WKLFV $UH :H 5HDG\ IRU 8WLOLWDULDQ &DUV"´ 2FWREHU $U;LY RUJ &RUQHOO 8QLYHUVLW\ DU;LY Y >FV &<@ KWWS DU[LY RUJ SGI Y SGI 2OLYLD *ROGKLOO ³6KRXOG 'ULYHUOHVV &DUV .LOO 7KHLU 2ZQ 3DVVHQJHUV WR 6DYH D 3HGHVWULDQ"´ Quartz 1RYHPEHU KWWS T] FRP VKRXOG GULYHUOHVV FDUV NLOO WKHLU RZQ SDVVHQJHUV WR VDYH D SHGHVWULDQ %RQQHIRQ DQG RWKHUV ³$XWRQRPRXV 9HKLFOHV 1HHG ([SHULPHQWDO (WKLFV ´ $OH[DQGHU +HYHONH DQG -XOLDQ 1LGD 5 PHOLQ ³5HVSRQVLELOLW\ IRU &UDVKHV RI $XWRQRPRXV 9HKLFOHV $Q (WKLFDO $QDO\VLV ´ Science and Engineering Ethics 21, QR ¹ ,QWHUYLHZ E\ WKH DXWKRU ZLWK )U 'HQQLV 0F0DQXV 'HFHPEHU (ORQ 0XVN ³0DVWHU 3ODQ 3DUW 'HX[ ´ Tesla EORJ , -XO\ KWWSV ZZZ WHVOD FRP EORJ PDVWHU SODQ SDUW GHX[

ANDREW TABAS | PEDAL TO THE METAL?THE RACE TO DEVELOP SECURE AUTONOMOUS CARS

Cyber, Intelligence, and Security | Volume 1 | No. 1 | January 2017

136 $QGHUVRQ DQG RWKHUV Autonomous Vehicle Technology, S -RQ )LQJDV ³7KH 86 1DY\ :DQWV WR 3URWHFW ,WV 'URQHV DJDLQVW +DFNV ´ Egadget, 0D\ KWWSV ZZZ HQJDGJHW FRP XV QDY\ ZDQWV KDFN UHVLVWDQW GURQHV 0DWW 5LFKWHO DQG &RQRU 'RXJKHUW\ ³*RRJOH¶V 'ULYHUOHVV &DUV 5XQ LQWR 3UREOHP &DUV ZLWK 'ULYHUV ´ New York Times 6HSWHPEHU KWWS ZZZ Q\WLPHV FRP WHFKQRORJ\ SHUVRQDOWHFK JRRJOH VD\V LWV QRW WKH GULYHUOHVV FDUV IDXOW LWV RWKHU GULYHUV KWPO"BU ³6DIHU DW $Q\ 6SHHG"´ Economist 0DUFK KWWS ZZZ HFRQRPLVW FRP QRGH