Giuseppe Serio with Upstream Security

Scott MacKenzie and Giuseppe from Upstream Security discussed the critical importance of cybersecurity in the rapidly evolving field of autonomous vehicles. Giuseppe highlighted that modern vehicles, with up to 100 million lines of code, are incredibly complex and vulnerable to cyber attacks. He emphasized the need for proactive measures, such as secure-by-design principles, continuous monitoring, and resilient systems. Giuseppe also stressed the importance of education and awareness among consumers and professionals. The conversation underscored the necessity of integrating cybersecurity from the outset of connected technologies to ensure safety and security.

Action Items

• [ ] Connect with Giuseppe Serio on LinkedIn to further discuss cybersecurity in the automotive and IoT industries.
• [ ] Explore the services and solutions offered by Upstream.auto to address cybersecurity challenges.

Outline

Welcome and Introduction to Industrial Talk Podcast

• Scott MacKenzie and the Industrial Talk Podcast, emphasizing its focus on industry professionals and innovations.
• Scott MacKenzie thanks listeners and highlights the importance of industrial professionals in solving global problems.
• The podcast is being recorded at the IoT Solutions World Congress in Barcelona, Spain, with a strong recommendation for attendees to mark their calendars for the next event.
• Scott MacKenzie introduces Giuseppe from Upstream Security, focusing on cybersecurity in the automotive industry.

Giuseppe's Background and Role in Cybersecurity

• Giuseppe introduces himself, mentioning his work with Upstream Security in Frankfurt, Germany, and their focus on making mobility safe and secure.
• Giuseppe explains his 20-year background in the automotive industry, including roles at IBM and consulting.
• The conversation shifts to the complexity of modern vehicles, with up to 100 million lines of code, compared to the 2 million lines in an F-15 fighter jet.
• Giuseppe emphasizes the importance of cybersecurity in the context of autonomous vehicles, given their increasing complexity and potential vulnerabilities.

The Necessity of Cybersecurity in Autonomous Vehicles

• Scott MacKenzie and Giuseppe discuss the sophistication of autonomous vehicles and the need for robust cybersecurity measures.
• Giuseppe highlights the potential risks associated with cyber attacks on autonomous vehicles, including the possibility of causing widespread congestion or harm.
• The conversation touches on the importance of continuous monitoring and understanding of cyber threats to ensure vehicle safety.
• Giuseppe mentions the regulatory changes in 2022 and 2024, requiring compliance and risk management in the automotive industry.

Approaches to Cybersecurity in the Automotive Industry

• Giuseppe outlines the steps for building resiliency against cyber attacks, including raising the bar, building secure by design, and constant monitoring.
• The discussion includes the importance of understanding and addressing anomalies, as sophisticated cyber attacks can be difficult to distinguish from normal vehicle behavior.
• Giuseppe provides examples of how cyber attacks can manifest in real-world scenarios, such as remote car control and the potential for misuse.
• The conversation emphasizes the need for a proactive approach to cybersecurity, with regular training and preparedness for potential attacks.

The Role of Digital Twins in Cybersecurity

• Scott MacKenzie and Giuseppe discuss the use of digital twins to simulate and test potential cyber attacks on autonomous vehicles.
• Giuseppe explains how Upstream Security provides stateful digital twins to understand vehicle behavior and perform forensic investigations.
• The conversation highlights the importance of fixing the root cause of problems rather than just addressing symptoms.
• Giuseppe shares an example of how safety and security measures in vehicles can have unintended cybersecurity implications, such as the consolidation of functions in the head unit.

The Importance of Cybersecurity in Connected Assets

• Scott MacKenzie and Giuseppe agree that cybersecurity must be a priority from the design phase of connected assets, not an afterthought.
• The conversation emphasizes the interconnectedness of cybersecurity and digital connectivity, with cybersecurity being essential for successful IoT implementation.
• Giuseppe compares the current state of cybersecurity in the automotive industry to the early days of space exploration, acknowledging the challenges and the need for continuous improvement.
• The discussion concludes with a call to awareness and preparedness for cybersecurity risks, encouraging listeners to stay informed and proactive.

Closing Remarks and Contact Information

• Scott MacKenzie thanks Giuseppe for the insightful conversation and provides contact information for listeners to connect with him.
• The podcast reiterates the importance of cybersecurity in the context of connected assets and encourages listeners to reach out to Giuseppe for further discussions.
• Scott MacKenzie promotes the IoT Solutions World Congress as a must-attend event for industry professionals.
• The podcast wraps up with a reminder to stay tuned for future conversations and to continue supporting the Industrial Talk Podcast.