The rapid development of e-mobility, in addition to new ways for people to travel, has also offered hackers new targets to explore.
Like any other networked machine, everything across the e-mobility spectrum – from charging points to electric vehicles and e-scooters – can have security vulnerabilities. Since e-mobility is still considered a new industry, the level of investment in cybersecurity for each product varies by manufacturer and supplier.
“E-mobility faces big cybersecurity challenges,” says Andy Barratt, CEO of Coalfire. “Some companies, like electric vehicle maker Rivian, have created dedicated security departments.”
Most vulnerabilities in modern vehicles are found around battery management and the main digital interface . A malware on a USB could also attempt to control a specific area of the car, with hackers then aiming to exert even greater control by gaining access to the car 's entire network .
For self-driving cars, the threat is greater as they would be connected to each other and also to networked road systems. “A nation state or a serious organized crime group could cause vehicles at high speed. Attackers looking to damage critical national infrastructure could force all traffic to try to pass through specific areas, creating major traffic jams,” says Vic Harkness at F-Secure Consulting, a security consultant.
The risks with e-mobility vehicles are increasing because cybersecurity researchers do n’t have as much experience dealing with them. “The cybersecurity industry is pretty mature at detecting and stopping threats on things like Windows devices , Macs , and Android phones ,” says Andrew Tsonchev, chief technology officer at Darktrace, a cybersecurity group. “With electric cars, we can’t say the same is true because there are so many ways to compromise them.”
Mr Tsonchev doesn't think e-scooters pose as much of a threat as they only have Bluetooth and no Wi-Fi. However, he says they could be used indirectly to launch an attack on something more valuable – perhaps by gaining access to the user's phone for additional data. An attacker could also demand a ransom to unlock a car or e-scooter they've gained access to.
“The most worrying scenario is someone driving such a device and at that moment falling victim to a hacking attack – that is a real risk,” says Mr. Tsonchev.
Several experts have called for the introduction of safety by design – the concept that safety is not an afterthought but is built into products from the start. “E-mobility is a new technology and safety by design is still in its early stages – but you’ll see a lot of those in the autonomous vehicle industry starting to develop safety and take it seriously,” says Mark Adams, former chief safety engineer at Lyft.
There are also privacy concerns. E-bike rentals, for example, feature real-time GPS location data and also require users to log in with information such as social media accounts or credit card details. “That’s an incredibly dangerous set of data for criminals to get their hands on . That’s why the broader infrastructure that’s being built around these smart devices is also very concerning in terms of how it can be compromised,” he says.
There are multiple layers of security and multiple entry points for attackers in these vehicles, making it essential for manufacturers to prioritize security and work together, says Mr. Tsonchev. “If a supplier discovers a vulnerability in one of its systems, there should be a framework in which that information can be shared with other suppliers,” says Ms. Harkness.
