Polish Investment and Trade Agency (PAIH) organizes a special working visit to Poland with the participation of media representatives from Turkey within the scope of the "Poland Business Forward" program.
The program, carried out in line with the "Brand HUB" initiative of the Polish Ministry of Development and Technology, introduces the innovative potential of the country's small and medium-sized enterprises (SMEs) in electromobility and sustainable automotive solutions.
In this context, the "New Mobility Congress" held in Katowice was visited.
Answering the questions of the AA correspondent here, NASK Cyber Security Expert Karol Bojke stated that new generation vehicles face significant cyber security threats and noted that the risks may vary depending on the configuration of the vehicle and communication systems.
Bojke stated that, first of all, the communication itself must be secure and said, "It must be uninterceptable, unalterable. Therefore, it must be verified at both ends, both at the end where the data is sent and at the end where the data is received. It must be encrypted, and if we can at least do this, then we will have a secure communication to some extent. There will be attempts to hijack this communication, and we must try to prevent this. Therefore, we must secure some kind of key that is unique for the vehicle itself and the data sender, so that, for example, someone can open a car dealership." "There should be no problems when you try to imitate it and then turn that imitation into a takeover of the car itself." he said.
“Manufacturers need to comply with regulations and innovate in cybersecurity.”
NASK Cyber Security Expert Bojke stated that in addition to strengthening the system itself, the driver, that is, the user of the system, should be trained on the possibilities of various dangers.
Bojke continued:
"Even if we have a completely safe vehicle, updated to the highest standards and generally properly maintained, if there are some vulnerabilities in our phones, other devices or even drivers, and if an attacker can trick the driver into authenticating with a dubious service, this can bring down the entire system. What we really need to think about is strengthening the system itself, as well as educating the driver or user of the system about the possibilities of various dangers."
Pointing out that companies and governments should cooperate on cyber security, Bojke stated that joint efforts are very important in this regard.
Karol Bojke emphasized that governments have to set standards on this issue and said, "They should not only determine them and give examples, but also try to implement them, try to motivate producers and users to act according to these standards and use them to be effective." he said.
Stating that manufacturers should comply with the regulations and attach importance to innovation in this field, Bojke said that companies should take into account that they are responsible for the safety of the products they develop.
Bojke emphasized that companies should provide appropriate support systems and said:
"Because when you build something, especially hardware like a phone or a computer or a car, you can't just abandon it. Because the biggest threats that are emerging in technology right now are about finding new vulnerabilities and then not patching them. Because once a vulnerability is patched, as long as the user can bring in that patch, update their software, all is well, but if we're dealing with what we call 'abandoned software', hardware that no longer receives any software updates, then once someone finds a vulnerability, they can freely exploit it for the rest of the life of the product." Therefore, manufacturers must guarantee that they will support their products as long as they are in use.”
“It is inevitable that innovation will always precede regulations”
In his assessment of the adequacy of the measures taken against cyber security threats in Europe, Karol Bojke stated that it is inevitable for innovation to advance ahead of regulations.
Pointing out that people are generally afraid of things they do not know, Bojke said, "This fear has some basis. Because what we often hear is that the development of technology requires some sacrifices or some kind of risk. But all of these need to be in regulation. Therefore, we must come together and work together to provide a safe and understandable experience for users." made his assessment.
