Securing connected vehicles with Digital Security by Design technologies, a market demonstrator and study.

With the Digital Security by Design (DSbD) programme seeking business led demonstrators, an automotive focused project is essential: road vehicles are becoming increasingly software-based and connected and the impact of cyber security is obvious as breaches can result in risk to life, serious injury or massive financial penalties. For example, in September 2021 Elon Musk said that a fleet wide hack of Tesla would be "the end of Tesla".

The 2016 Jeep cyber attacks are reported to have cost vehicle manufacturers up to $1 billion and security researchers have demonstrated taking over braking functionality from drivers.

We will therefore demonstrate and review the use of DSbD technologies for cyber critical and safety critical applications in the automotive sector. Specifically, four connected vehicle use cases will be developed and tested. They have been selected as they vary in safety and time criticality and therefore demonstrate the versatility of DSbD. For each, the impact of DSbD technologies on security, safety and performance will be assessed.

* Over-the-air software updates. Cyber-critical. Not safety-critical. Timeliness \\\> 1hour. * Vehicle diagnostic data sent from vehicle to cloud. Cyber-critical. Not safety-critical. Timeliness < 1 minute.

* Traffic or accident ahead advisory sent from road infrastructure to vehicle with acknowledgment from vehicle (Vehicle to Infrastructure "V2I"). Cyber-critical Safety-critical. Timeliness 1-3 seconds. * Remote control and teleoperation of vehicle. Cyber-critical. Safety critical with possible risk to life. Timeliness