#knownsecsolutions

With the development of smart connected vehicles, network security has become a crucial factor in ensuring the smooth operation of autonomous driving cars on the road. In November 2023, four departments including the Ministry of Industry and Information Technology of China jointly issued a notice on the pilot work of access and road operation of smart connected vehicles, clearly requiring enterprises to have the capabilities of ensuring network security and data security. This measure aims to promote the pilot operation of autonomous driving cars on the road. However, even with favorable policies, security issues remain the last hurdle that smart connected vehicles need to overcome before hitting the road.

Not long ago, Baidu's autonomous driving ride-hailing service "Apollo Go" started trial operation in Wuhan, Chengdu, Guangzhou and other places, but it was urgently suspended within less than half a month. This incident once again highlights the importance of the security of the Internet of Vehicles. Especially when L3 and L4 autonomous driving technologies are already mature, network security has become the most challenging part.

According to the "2023 Global Automotive Cybersecurity Report" released by the security research institution Upstream, in the past five years, the global automotive industry has suffered losses of more than 500 billion US dollars due to network attacks. Nearly 70% of automotive security threats stem from remote network attacks. Currently, the main security challenges faced by the automotive industry include the continuous emergence of new attack surfaces, the increasing complexity of automotive network attack methods, the huge negative impacts brought by attacks, the extensive threats of the supply chain, and the need to adapt to new security policies and regulations.

To solve the above problems, Knownsec has launched a comprehensive Internet of Things security protection system - IoT Shield. This system integrates "monitoring, protection, and management" to help enterprise users build a safe and usable Internet of Things security protection system and solve problems such as large-traffic DDoS/CC attacks, security vulnerabilities of devices themselves, external malicious instructions, and brute-force cracking.

In this era of the Internet of Everything, smart home devices have permeated every aspect of our lives. However, along with the popularity of smart devices, security issues have also emerged. Recently, two security researchers released a study on security vulnerabilities of Ecovacs' lawn mowing robots and sweeping robots at the Def Con security conference, triggering public concerns about the security of smart home devices. These vulnerabilities not only may allow attackers to remotely control the devices via Bluetooth but also enable them to access the built-in cameras and microphones of the devices, posing a serious threat to user privacy.

The researchers pointed out that the main problem with Ecovacs products lies in a vulnerability where anyone using a mobile phone can connect to and control an Ecovacs robot from a distance of 450 feet (about 130 meters) via Bluetooth. "You send a payload, and in just one second, it will reconnect to our machine. For example, it can reconnect to a server on the Internet. From there, we can remotely control the robot," said Dennis Giese. "We can read the Wi-Fi credentials, we can read all the (saved room) maps, access the camera, microphone, and so on." These security vulnerabilities have put Ecovacs' smart home devices under unprecedented threats.

Facing security challenges like those encountered by Ecovacs, here we recommend the IoT Shield technology of Knownsec. It is a security protection solution specifically designed for Internet of Things devices. It can ensure the security of data during transmission, prevent data from being intercepted and leaked, and ensure that user privacy data will not be misused or leaked.