Study Uncovers Security Weaknesses in Next-Generation Vehicle Technology

Georgia Tech researchers have identified seven previously unknown security flaws in next-generation communication standards that connect in-vehicle computers. These flaws create vulnerabilities that could allow attackers to take control of key driver-assistance functions in personal vehicles.

The team also found that the new standard's core rules for sending messages and handling errors retain every known security weakness of older versions.

The vulnerabilities could allow an attacker who has already gained access to a vehicle's internal computer network to change or intercept messages, take individual vehicle computers offline, send different information to different systems, or disrupt network communication.

CAN Extra Long (CAN XL), the latest version of the controller area network (CAN), is designed for future cars and other vehicles that need to move large amounts of data between onboard computers. The technology is not yet widely deployed in production vehicles, giving manufacturers an opportunity to address security concerns before it becomes more common.