{"id":8308,"date":"2021-09-29T08:28:42","date_gmt":"2021-09-29T08:28:42","guid":{"rendered":"https:\/\/www.securitytoday.de\/2026\/04\/02\/post_id-2996\/"},"modified":"2026-07-06T15:16:13","modified_gmt":"2026-07-06T15:16:13","slug":"cybersecurity-as-a-competitive-advantage-in-connected-vehicles","status":"publish","type":"post","link":"https:\/\/www.securitytoday.de\/en\/2021\/09\/29\/cybersecurity-as-a-competitive-advantage-in-connected-vehicles\/","title":{"rendered":"Cybersecurity as a Competitive Advantage in Connected Vehicles"},"content":{"rendered":"

Vehicle connectivity is surging rapidly, driven by the rollout of 5G and other emerging technologies. It\u2019s not just the vehicles themselves that are becoming more connected – drivers and passengers, too, are increasingly integrated into the automotive ecosystem. These innovations elevate the driving experience to a new level – yet they also open another door for cyber threats.<\/strong><\/p>\n

As a result, security is moving firmly into the spotlight for drivers and passengers alike. The swift revolution toward a new era of mobility means cybersecurity will be central to both safety and customer trust. It therefore deserves top priority in any corporate strategy centered on the connected car.<\/p>\n

Data Centers on Wheels<\/h2>\n

The automotive industry is in the midst of a profound transformation. C.A.S.E. – C<\/strong>onnected, A<\/strong>utonomous, S<\/strong>hared, and E<\/strong>lectrified – is redefining the very concept of the automobile. Cars are evolving into integral parts of our social lives, seamlessly linked to countless services.<\/p>\n

Today\u2019s vehicles already pack an astonishing array of technologies. Capabilities continue to expand as demand for connectivity fuels innovation: app-based remote monitoring and control, autonomous driving, advanced driver-assistance systems (ADAS), and in-vehicle entertainment – to name just a few. These new features require massive real-time data transactions. Vehicles are transforming into data centers on wheels – collecting, processing, and exchanging enormous volumes of data with backend systems. This evolution hinges ever more heavily on software and communication protocols, making the entire automotive ecosystem significantly more complex – and thereby offering attackers far more potential entry points. That\u2019s why learning from IT history – and proactively closing these security gaps – is essential.<\/p>\n

\"\"<\/a><\/p>\n

In the IT world, we\u2019ve learned that the adage \u201cOpportunity makes thieves\u201d<\/em> holds true here, too – and opportunities abound in connected vehicles. Attackers almost always act out of financial motive. Most often, they target (user) data to extort ransom payments. Connected cars have thus become prime targets for cybercriminals, presenting a wide range of potential attack surfaces:<\/p>\n

    \n
  1. Classic data theft:<\/strong> Harvesting data collected, generated, or stored by vehicles. Experts predict connected vehicles will soon consume the largest share of 5G network bandwidth – making them the next \u201cdata goldmine.\u201d<\/li>\n
  2. Vehicle theft via remote deactivation or full takeover of control.<\/strong><\/li>\n
  3. Attacks targeting vehicle network and processor resources – and the vehicle itself.<\/strong><\/li>\n<\/ol>\n

    Growing User Concerns Around Cybersecurity<\/h2>\n

    Hacking attacks on connected vehicles are no longer science fiction – they\u2019re happening now. Real-world incidents already number in the dozens. Hackers exploit numerous attack vectors – not only against the vehicle itself, but also against its supporting networks and backend infrastructure. Here<\/a> are two documented cases: One hacker stole up to 100 luxury vehicles by compromising a car-sharing app. A second incident<\/a> involved a major OEM (original equipment manufacturer). A research team successfully hijacked vehicle controls by exploiting a software vulnerability – prompting a recall of millions of vehicles.<\/p>\n

    Trend Micro<\/a> demonstrated how ransomware could be delivered directly to a vehicle\u2019s CAN bus via malicious commands. The number of successful attacks rises year after year – making robust cybersecurity non-negotiable.<\/p>\n

    \"Wettbewerbsvorteil<\/a><\/p>\n

    A study<\/a> found that rising demand for safe, efficient, and comfortable driving is the primary driver behind the growing adoption of connected vehicles. Yet the same study reveals a critical shift in consumer priorities: Over 70 percent express concern about vehicle and system security. In short, cybersecurity will soon play a decisive role in brand choice.<\/p>\n

    Preparing for Change<\/h2>\n

    Threat scenario analysis makes it clear that, from the user\u2019s perspective, cybersecurity is far more than an add-on feature hidden behind flashy innovations like autonomous driving. Instead, it has become a core functionality – one that automakers can leverage to gain a competitive edge. Cybersecurity must therefore move to the center of corporate strategy.<\/p>\n

    So how can automotive decision-makers implement an effective, efficient cybersecurity strategy? Our analysis shows that the attack chain targeting connected vehicles closely mirrors typical IT cyberattacks. Once attackers breach a system through a vulnerability, they exploit lateral movement across internal networks – just as they do in enterprise IT environments. This is unsurprising: Connected vehicles rely on hardware, software, and communication protocols that closely resemble those used in IT. Given these parallels, we recommend applying proven methods grounded in IT best practices – and informed by forecasts of future threats:<\/p>\n

      \n
    1. Intelligent threat detection<\/li>\n
    2. Multi-layered security<\/li>\n
    3. Security spanning the entire ecosystem<\/li>\n
    4. Vehicle Security Operations Center (VSOC)<\/li>\n<\/ol>\n

      Trend Micro delivers a comprehensive solution built around these principles. Together, we can secure the ever-evolving world of mobility.<\/p>\n

      \"Wettbewerbsvorteil<\/a>

      Trend Micro offers a broad portfolio of cybersecurity solutions. (Source: Trend Micro)<\/p><\/div>\n

      Learn more on our website<\/a>.<\/p>\n

      We also recommend reading our research paper<\/a>, \u201cIdentifying Key Cybersecurity Focus Areas in Connected Vehicles Based on UN WP.29 Regulation No. 155: Attack Vectors and Related Aspects,\u201d<\/em> to implement effective measures against the attack vectors outlined in UN R155 – and other identified threats.<\/p>\n

       <\/p>\n

      Key Facts<\/h2>\n

      Dwell time:<\/strong> On average, attackers remain undetected inside corporate networks for 204 days.<\/p>\n

      SMEs in the crosshairs:<\/strong> 43 percent of all cyberattacks target small and medium-sized enterprises.<\/p>\n

      Frequently Asked Questions<\/h2>\n

      Every question is locked. A tap unlocks the answer.<\/p>\n

      \nWhat\u2019s the difference between data privacy and data security?<\/strong><\/summary>\n

      Data privacy governs the lawful handling of personal data – including legal basis, purpose limitation, and data subject rights. Data security encompasses the technical and organizational measures designed to protect all<\/em> data against loss, tampering, or unauthorized access.<\/p>\n<\/details>\n

      \nDoes every company need a Data Protection Officer (DPO)?<\/strong><\/summary>\n

      Under German law, appointing a DPO is mandatory if at least 20 people regularly process personal data using automated systems – or if special categories of personal data (e.g., health data) are processed.<\/p>\n<\/details>\n

      \nWhat rights do data subjects have under the GDPR?<\/strong><\/summary>\n

      The right of access, rectification, erasure (\u201cright to be forgotten\u201d), restriction of processing, data portability, and objection. Companies must respond to such requests within one month.<\/p>\n<\/details>\n

      Related Articles<\/h2>\n