Securing the Future of Automotive Cybersecurity: The Past, Present, and Future of IoT/OT Security

Securing the Future of Automotive Cybersecurity: The Past, Present, and Future of IoT/OT Security

Blog

4 December 2024 seperator dot

The landscape of connected vehicles is evolving at a breakneck pace. From software-defined vehicles (SDVs) to autonomous driving, the automotive industry has become a nexus for innovation and vulnerability. As Ran Ish-Shalom, Chief Product Officer at Argus Cyber Security, aptly stated during a recent session:

“By 2030, 95% of vehicles sold will be connected. Once connected, it’s no longer about physical access but the myriad of digital entry points that must be secured.”

Brian Carpenter from CyberArk reinforced this, emphasising the growing complexity of managing identities across both human and machine ecosystems. With over 45 machine identities per human identity in typical organisations, safeguarding the automotive supply chain requires unprecedented vigilance and collaboration.

A Retrospective: The Past Challenges of IoT/OT Security

Historically, automotive cybersecurity was primarily mechanical, focusing on physical security and reliability. Early connected systems, such as infotainment units, represented a significant shift, bringing vulnerabilities like outdated software and unsecured network connections. Cybersecurity was often an afterthought, with many automakers addressing threats reactively.

The Current State: A Growing Complexity

Today, vehicles are “software on wheels.” They house an average of 150 Electronic Control Units (ECUs) and over 100 million lines of code. While these advancements have revolutionized functionality and safety, they have also created expansive attack surfaces.

As Ish-Shalom noted, modern thieves use cyber techniques to steal cars in seconds. With ransomware attacks quadrupling year-over-year, protecting these ecosystems has become a regulatory and operational priority. Regulations such as ISO 21434 and UNECE WP.29 mandate cybersecurity across the entire vehicle lifecycle, urging OEMs and suppliers to adopt proactive security measures.

Key statistics:

  • 75% of organizations are pursuing security vendor consolidation ​(Securing the Future Rid…).
  • The automotive cybersecurity market is projected to grow from $2.6 billion in 2022 to $5.3 billion by 2027 at a CAGR of 15%​(Securing the Future Rid…).

The Future: AI, Convergence, and Collaboration

The future of IoT/OT security lies in AI-driven defenses and holistic integration. AI enables predictive analysis of anomalies, supporting faster detection of potential threats across complex ecosystems. However, as Carpenter warned, attackers are also leveraging AI to create more sophisticated cyber threats.

The convergence of IT and OT security is pivotal. As Argus and CyberArk collaborate within Microsoft’s ecosystem, they demonstrate how integrated solutions can offer end-to-end protection, from R&D to the vehicle’s retirement. These partnerships align with industry trends where cybersecurity solutions evolve to cover the entire lifecycle of connected systems.

Microsoft’s initiative in bringing together leaders like Device Authority, Argus, and CyberArk exemplifies the power of ecosystem collaboration. As Carpenter explained:

“By integrating tools, we not only improve security but also enhance efficiency, offering organisations a comprehensive view of their attack surfaces.”

 

Conclusion: A Collective Responsibility

Automotive cybersecurity is not just a technical challenge but a collective responsibility. From manufacturers to consumers, every stakeholder must prioritise security as the industry navigates toward a connected and autonomous future. The evolution of IoT/OT security in the automotive sector mirrors the broader journey of technological transformation—highlighting both its promise and its perils.

In this dynamic environment, collaboration between key players and adherence to regulatory standards will define success. As the automotive world becomes increasingly connected, ensuring that security evolves alongside innovation is not optional; it is imperative.

Want to dive deeper into the challenges and opportunities of IoT/OT security in healthcare? Watch the full webinar, Securing the Future Ride: Cybersecurity in Connected Cars, featuring insights from Ran Ish-Shalom of Argus & Brian Carpenter of CyberArk. Discover how cutting-edge technologies are shaping the future of connected healthcare and learn actionable strategies to enhance your organisation’s security and efficiency.

Watch the Full Webinar Now

Don’t miss this opportunity to gain expert knowledge and practical tips from industry leaders!

Share