Comment: How AI is shaping automotive cybersecurity

With hackers targeting vehicles, the industry is turning to AI to fortify its defences and secure the future of connected cars, says Steve McEvoy, VP of Automotive at Expleo.

One area where AI shines is in monitoring critical vehicle systems
One area where AI shines is in monitoring critical vehicle systems - AdobeStock

Modern cars are no longer just mechanical marvels, they are also supercomputers on wheels. With around 100 million lines of code powering features like over-the-air software updates, automated parking and vehicle-to-everything (V2X) communication, the automotive industry is riding a wave of digital transformation. Yet, with this increased connectivity comes heightened vulnerability to cyber-attacks. As hackers target vehicles with greater frequency, the industry is turning to AI to fortify its defences and secure the future of connected cars.

The game-changer for automotive cybersecurity

AI is rapidly becoming a cornerstone of automotive cybersecurity, transforming how manufacturers detect and neutralise threats in real time. By processing vast amounts of data from connected systems, AI can identify irregularities, flag potential breaches and even automate responses to emerging threats.

AI can be used to detect complex anomalous patterns and provide real-time diagnostics and responses in vehicle systems. This proactive approach allows for quicker threat detection and mitigation, significantly reducing the window of opportunity for hackers.

One area where AI shines is in monitoring critical vehicle systems, like electronic control units. Hackers have increasingly targeted these systems in an attempt to corrupt data or take control of vehicle functions. With AI-enabled systems, real-time analysis can detect these intrusion attempts and respond instantly, preserving both the safety of the vehicle and the integrity of its data.

Collaborating for a safer future

Securing vehicles requires more than just advanced technology—it calls for collaboration across the industry. Open-source style cooperation, where manufacturers, suppliers and regulators share threat intelligence, cybersecurity tools and best practices, is essential. This collective approach is already being seen in action, with initiatives like the National Institute of Standards and Technology’s Community of Interest in the US and the European Commission’s Joint Research Centre driving forward standards for AI and cybersecurity in autonomous driving.

Regulations like UNECE R155, which mandate risk management standards across the automotive supply chain, are pushing this collaborative effort even further. By working together, automakers can collectively raise the bar on cybersecurity, ensuring that connected cars are secure by design.

The supplier’s role

The introduction of AI into the automotive sector not only impacts original equipment manufacturers but also transforms the responsibilities of suppliers. UNECE R155, which came into effect for new vehicles in 2022 and will apply to all existing architectures from July 2024, requires suppliers to ensure their products meet stringent cybersecurity standards. This adds complexity to the supplier’s role, as they must stay ahead of evolving threats while ensuring compliance with regulations.

Suppliers should also collaborate with OEMs to meet these new standards and ensure their products comply with regulations. This collaboration will be crucial in improving the cybersecurity management system and ensuring that all new and existing architectures benefit from state-of-the-art safety measures.

Where AI makes a difference

Despite the industry's best efforts, there are still significant vulnerabilities in connected vehicles that AI must address. One key threat is the manipulation of V2X systems, where attackers can interfere with road safety messages and traffic management systems, potentially causing dangerous situations for drivers. AI-based systems can effectively detect real-time threats and maintain vehicle safety against such cyber-attacks

Another vulnerability lies in compliance gaps. Hackers often exploit any holes in a vehicle’s cybersecurity management system, particularly if certain components or processes are not secured by design. AI helps mitigate these risks by ensuring that systems are continuously monitored and assessed for weaknesses.

As the automotive industry becomes more connected and automated, AI is set to reshape how vehicles are secured and how they adapt to new cyber threats. Collaboration between manufacturers, suppliers and regulators will be key to tackling these challenges head-on, allowing the industry to develop innovative solutions and create a more resilient ecosystem. By working together, the sector can better protect consumers and stay ahead of the evolving threat landscape.

Steve McEvoy, VP of Automotive at Expleo