Fescaro's Comprehensive Cybersecurity Strategy for Modern Vehicles
In today's rapidly evolving automotive landscape, vehicles have transformed into intricate systems heavily reliant on software and technology. As vehicles increasingly function as 'computers on wheels', the threats of cyberattacks loom larger than ever, necessitating a robust and comprehensive cybersecurity approach. Lee Hyun-jung, the Chief Technology Officer of Fescaro, a mobility software solutions provider based in Suwon, Gyeonggi Province, discusses these pressing issues and the steps his company is taking to ensure vehicle safety and security.
Lee states, "As vehicles are continuously connected to external environments, interacting with urban infrastructure, other vehicles, and personal devices, the software within them must be fortified against potential hacking threats." He emphasizes that enhancing cybersecurity solely for vehicles is insufficient; rather, there must be a systemic methodology that safeguards the broader mobility ecosystem. A cybersecurity breach at one point in this interconnected network could have dire consequences across the entire value chain.
Amidst regulatory pressures, automotive manufacturers across the globe—including those within the European Union, China, and Korea—are required to implement systematic management of vehicle cybersecurity throughout the entire product lifecycle. This entails a focus on cybersecurity from design to production and even disposal. As Lee points out, “Korean car manufacturers are now pursuing European certifications for their cybersecurity management systems and software update management processes to comply with regulatory requirements in those markets.”
Fescaro plays a pivotal role in assisting these manufacturers in acquiring essential certifications, including the ISO/SAE 21434, an international standard dedicated to automotive cybersecurity engineering. Developed by the ISO and the SAE, this standard is critical for manufacturers aiming to ensure their products meet security protocols.
Lee elaborates on Fescaro’s contributions in this area, noting that the firm collaborates with automakers to create integrated IT infrastructure systems. These systems unify all cybersecurity management tasks onto a singular platform and automate processes that enhance operational efficiencies. "We designed the system to monitor security events and potential vulnerabilities even post-production, following the launch of vehicle models," Lee states. This long-term, forward-thinking approach is vital for addressing varied aspects of vehicle cybersecurity.
In recognition of Fescaro's impactful role in security certification processes, KG Mobility—one of Korea's leading makers of sport utility vehicles—has acknowledged the company as an excellent business partner for 2024. Lee foresees an escalation in the importance of vehicle cybersecurity, especially as technologies such as electric vehicles (EVs) and autonomous driving systems gain prevalence.
He comments, "With the rise of autonomous driving, vehicles are expected to connect with external networks, requiring heightened security measures to ensure safe navigation and recognition of environmental factors.” Lee also underscores the cybersecurity imperative for EV chargers, which directly interface with vehicles in a way that could jeopardize sensitive data, including personal payment information.
Reflecting on the overarching necessity of evolving cybersecurity mechanisms, Fescaro is developing an innovative platform known as the 'CSMS Portal' (Cybersecurity Management System Portal). Lee describes the portal's purpose: to provide constant assistance and monitoring while simplifying the management of cybersecurity frameworks for mobility firms. By integrating Fescaro's extensive experience with existing mobility companies, the CSMS Portal seeks to enable streamlined processes and support ongoing cybersecurity maintenance.
Scheduled for a launch in the first half of 2025, the CSMS Portal aims to address the mobility sector's challenges while enhancing competitiveness for its adopters. Lee concludes with a hopeful perspective, expressing, "We aspire to contribute meaningfully to the mobility industry's evolution, providing solutions that not only enhance security but also foster overall growth.”
As the era of connected vehicles unfolds, companies like Fescaro are at the forefront, pushing the boundaries of what cybersecurity must encompass in the automotive field.