Security risk in automotive software: External applications lead the way
Research conducted by the University of Gothenburg and Chalmers University of Technology has revealed that the majority of security vulnerabilities in automotive software stem from externally connected applications. Experts emphasize that vehicle systems must be isolated from external connections.
Researchers at the University of Gothenburg and Chalmers University of Technology in Sweden examined automotive software security vulnerabilities between January 2022 and September 2024. According to the study published in the Journal of Software Quality, external applications constitute the largest risk factor in automotive security at 36.2 percent.
Researcher Srijita Basu stated that mobile applications, web services, and cloud services integrated into cars store sensitive information such as the vehicle's location and usage data. The study warns that if the boundaries between entertainment and telematics systems and functions critical to driving safety are insufficient, attackers could infiltrate the system.
In a separate analysis of 20 open-source automotive projects conducted as part of the research, 827 vulnerable libraries were identified. Experts state that manufacturers must regularly scan software components and isolate driving systems from external connections.
Sources
- trthaber.com · Link