At the annual Kaspersky Cyber Security Weekend META, the company announced that it has developed an Automotive Gateway to help manufacturers meet the new UN Cybersecurity Requirements for Smart Vehicles.
Kaspersky is developing Kaspersky Automotive Secure Gateway (KASG), based on the KasperskyOS operating system, a platform for developing inherently secure solutions. The gateway can be installed in the telematics or central unit of a vehicle with ARM architecture. Such a solution would protect the car from hacking, enable secure remote updating of both the gateway and the car's electronic components, allow collection of log files from the car's internal network and send them to the security monitoring centre.
The process started after the release of legal documents on cybersecurity in the automotive industry. These reports were prepared by the UN Commission WP.63, which covers 29 countries. Some of the documents went into effect in 2022. By 2024, new demands must introduce a certification system that mandates manufacturers to comply with cybersecurity requirements and integrate security solutions into cars at the assembly line stage.
The legal framework stipulates that new systems for automobiles must be designed and developed according to the Safe Design principle. This means that security must be built into solutions during the design and development phase. Kaspersky provides this principle with its own Cyber Immunity operating system, KasperskyOS.
Kaspersky offers Kaspersky Automotive Secure Gateway to not only cybersecurity demands, but also zamIt is currently developing in accordance with the international functional safety standard (Safety) ISO 26262.
Andrey Suvorov, Head of KasperskyOS Business Unit: “Safety issues in connected cars are such an important topic today that they are being discussed at the level of international organizations. This is an example of how the industry itself is turning to cybersecurity experts for a solution and is ready to make them mandatory for certification. The legal demands of the UN Commission WP.29 have given a serious impetus to the development of the information security market in the automotive industry. We started developing Kaspersky Automotive Secure Gateway by analyzing the requirements of the new regulation and creating a threat model for internet-connected vehicles. “We expect many manufacturers to be interested in our development.”