Building trust in connected and autonomous vehicles

As increased connectivity of vehicle systems - such as in-car entertainment - increases exposure to cyber threats, consumers and insurers need to be able to have confidence that vehicle manufacturers are managing cyber security appropriately. The 5StarS assurance framework sets out to build trust in the ability of manufacturers to mitigate against cyber threats and be resilient to attacks. The framework will allow them to demonstrate that they will respond quickly and effectively to attacks or vulnerabilities. 

The Roadmap to Resilience framework will enable manufacturers to gain assurance in the capabilities of their products, use resilience as a market differentiator and establish meaningful ways of communicating cyber derived risk to consumers.

Key benefits for vehicle manufacturers implementing the framework include building consumer trust in the overall safety of vehicles; highlighting vehicle countermeasures against - and resilience to - cyber attacks; cyber risk being reflected in insurance premiums, and the ability to monetise good practice in cyber security through a rating that differentiates their products from the competition in consumers’ eyes.

Jerry Williams, Managing Director for the Roke and Ricardo Digital Resilience partnership, said: “We established the Roke-Ricardo partnership to bring together the best of both organisations in developing effective solutions to the evolving cyber threat. As members of the 5StarS project since its inception, we bring a full understanding of the difficulties associated with assessing cyber security as current and emerging threats change over time. We have used this basis of understanding to build an effective vehicle testbed.”

“We’re now using our newly established, dedicated facility to assess a number of vehicles, using a methodology that is consistent with the 5StarS approach, to get a detailed understanding of how different manufacturers have approached cyber security. This allows us to identify modifications that would improve future vehicles’ resilience to cyber attack.”

Nick Tebbutt, Ricardo Business Manager for cyber security, said: “For many years now, consumers have been able to make their new vehicle purchasing decisions informed by clear and easy-to-understand crash safety ratings. Ricardo is pleased to have played an active role in this project in identifying a methodology through which cyber resilience standards can be consistently assessed. We very much welcome the publication of the 5StarS consultation paper that has been announced by the consortium today.”

Pete Lockhart, Head of Commercial Technology for Roke, said: “With major automotive manufacturers’ vision for higher levels of autonomy vehicles edging closer to fruition, the focus on security and building trust in connected vehicles dominates the sector. It’s time to make cyber security as much of a consumer-led requirement as safety has been via the existing EuroNCap rating. A digitally resilient car should become an expectation, just as much as you’d expect to see seatbelts.”