NEWS & REPORTS

Cybersecurity Best Practices for Aftermarket Electronics and Telematics in Heavy Vehicles

Jul 28, 2020 | Reports

Read the entire report here.

Goal:

To develop a set of best practices and guidelines focused on minimizing cyber risks for aftermarket electronic systems intended for use in the commercial motor vehicle (CMV) industry.

Background:

Heavy vehicle fleet operators routinely integrate a variety of aftermarket electronic systems into the trucks and buses they operate. Such systems include telematics units, navigation, infotainment, vehicle diagnostics, cargo monitoring and vehicle anti-theft systems, as well as a variety of driver monitoring, crash avoidance and other systems that may aid in compliance or operation of the vehicle. Often, these devices and systems are integrated into the vehicle’s electrical architecture including potential linkages with the vehicle’s CAN databus, driver display systems, or other electronic sub-systems on the vehicle.  Further, the aftermarket/telematic devices themselves will often incorporate a wireless or wired connection, (or perhaps a manual input interface) that allows for connecting the device to its intended interface entity. Such interfaces, with their integration into the vehicle’s electronic systems, offer a potential cyber vulnerability or a “point of entry” that may allow “bad actors” to gain access first to the aftermarket system, and then subsequently to the vehicle’s control sub-systems, including driver interface, braking, throttle and or steering systems. Such connections may possibly be “hacked” to allow malicious attacks such as retrieving propriety data stored on the vehicle, or creating congestion on the vehicle networks such that normal and safe operation of the vehicle is compromised.  As telematic and related aftermarket electronic devices and systems continue to proliferate the heavy vehicle marketplace, such cyber threats are of a growing concern to the Federal Motor Carrier Safety Administration (FMCSA), the National Highway Traffic Safety Administration (NHTSA) and the heavy vehicle industry.

Summary:

For this joint project with NHTSA, the contractor will build on existing heavy vehicle cybersecurity research to more narrowly focus on cyber threats and vulnerabilities associated with the integration and use of a variety of aftermarket and telematic systems intended for heavy vehicle application. The output of this research will be a set of best practices and guidelines for both the design and integration of aftermarket electronic systems focused on minimizing cyber risks. To this extent, the output of this work may be used by both the suppliers of such systems as well as by end users.

About the Author

NEWS & REPORTS

Update on Relevant U.S. Regulations

FMCSA Requests Comments on Application for Certificate of Registration for Foreign Motor Carriers and Foreign Motor Private Carriers ICR On Feb. 16, the Federal Motor Carrier Safety Administration (FMCSA) requested comments on the Application for Certificate of...

Accident Response Tips

By Alyssa Adams The moment an accident occurs is not the time to put your company’s accident response plan into place.  Having an accident response plan in place, including training your dispatchers on the policy, will allow you to act as soon as an accident occurs. ...

The hidden connection between fleet safety and efficiency

Jim Perkins The harsh weather of winter months naturally brings fleet safety more into focus. At face value, fleet safety is keeping drivers out of harm’s way. Beneath the surface, safety is a key factor in boosting efficiency and decreasing total cost of ownership....

Pennsylvania Lawyer Employs Creative Strategy in Crash Case

Eric Miller The crash occurred on a chilly morning in Bensalem Township, Pa., between a tractor-trailer and a passenger vehicle traveling at what witnesses described as a “relatively fast speed.” The truck driver wasn’t injured, but the driver of the passenger car was...

CATEGORIES