Welcome to section 3 point 3, and this is an overview of
future mobility security. And what that means, for
the industry, in this section. I will be
introducing you to some of the very real future Mobility Solutions. How
they work, how vulnerable, and potentially dangerous, these Solutions
become once they're compromised, and most importantly, what
you can do to secure them. So future Mobility depends on
lots and lots of connectivity.
And when we think about for Mobility future Mobility, we think
of drones, autonomous vehicles and shared Mobility Solutions. Like
uber. But how do these systems work? And then so
in this section will cover these Concepts and how they're all this
connectivity. Creates, massive security, risks and
threats.
So, let's quickly have a discussion about drones and
how their work. Obviously, in this diagram. You're
seeing the kind of interconnections and dependencies on both the
Drone. As a device, the manufacturer, the companies and
the data is they collect, and sometimes the
pilots themselves. So what kind of drones are we talking about? There
are lots of sizes and kinds of drones that move through the air
water and land as I discussed in the last section, sometimes
these drones are piloted, but today's drones can be operated completely
autonomously. So think of Ubers autopilot and
those
That's essentially a drone and also.
Yeah, so as mentioned the drones can move people their
goods and services. They can be they
fly these drones the drones operate or they can
move depending on different GPS systems
video, cameras lidar, which is 3D scanning
of the surroundings. And of course radar. The
operating systems are owned and managed by the original manufacturer
of the company or the system providers. And
there's a lot of data is being provided like location.
Speed altitude duration about the Drone itself, but
these systems also produce thoughts of personal data to
like names and addresses account types, preferences flight
histories and much, much more. So, in this
scenario, we're looking at it not
only from the data security level, but
also what happens if the control of the Drone was compromised or
breach, we can only imagine what kind of harm it would do to
people or Properties or even critical infrastructures.
Likewise for AV autonomous vehicles. It's
important to maybe. For those of you
that don't know, explain how they work. And
there's lots of different types of connections and network dependencies
for these types of autonomous vehicles.
So for example on the left,
what you're looking at here are all the kind of full stack kinds
of
Yeah, the mechanics of how,
any of these things work. So you have the car
production. You have the car battery of
charging points and solar energy that maybe fuel those
charging points. And that's talking to, let's say
our friends Tesla's Tesla who is collecting
all the data and storage and processing. And
that data is shared
with various individuals and
is, you know,
In recent media, perhaps entire
commercial police like taxis and
Lisa at least least companies that are
providing these cars to businesses and so forth. All
of those, whether the you're
an individual or an employer that has at least car, you
need to know where those charging points are and
Tesla has his wonderful ecosystem, where perhaps the
energy is collected from those
solar voltaic.
At their manufacturing and producing on the rooftops of
their factories or homes. And
so, they have this kind of really interconnected
ecosystem of one, company
controlling, so much connectivity
of your own car.
Another example is Uber or Lyft.
It really doesn't matter. But there's what you would. We
were all experienced as an, Uber has really transformed or
cities faster than any authorities or designers.
Master planners could have anticipated policymakers for
that matter. And so, Uber goes
Way Beyond these days from a
driver, which could be a
small car van, or it could be a bike.
I could be a step and
then you have a
lot of different types
of consumers that have different kinds of requests different
types of payment plans, Privileges, and
likewise with with companies, Uber
is now getting into Air transport
and Freight. So it's moving
more, not just people but goods and
so all of this kind of these
Missions. Go back to basically the storage and
the in the processing agreements. And this
is a really complicated drawing. But it's important for
to illustrate all of those interconnections
that are exposed and potentially vulnerable to
hackers and ransomware people,
that can exploit these kinds of systems. So
let's move on to explore how we can keep our
feature Mobility systems, safe and secure. And I'm going to
be talking about the various types of
Threats to the transportation systems, how
we can mitigate some of these Mobility risks and very
concrete examples of specific attack types.
So let's look back, five years and talk
about some concrete examples of the various security threats to
our transportation systems. Uber is again, the favored
candidate. It's not just about a ride sharing
platform. There's also lots and lots of
data that were stolen from
57 million people back in 2017, to
2019 in Dublin. There
was an actual attack on the Dublin, transportation system
of the Metro another scary.
Situation from Tesla, whether that was that hackers were able to
trick the computer vision system that
navigates the car. The
the autonomous car and that scare, you
can imagine what can happen on the roadway when that happens likewise
in much and Metro Vancouver,
another ransomware attack again,
the transportation industry isn't
normally up to stop. So these are type of easy targets for
hackers. And in
this
This case, it was ransomware event. There
was also attacking
Goods. So the CMA CGM attack
was a famous example where hackers
were able to. Again, use cyber ransomware to
attack the shipping company and
the most scary one last. This
year was a drone attack on the energy, which is the first drone
attack, that attack the Pennsylvania's electricity substations, so
it's not just the data.
Not just the hacking into the, the
operational or the vehicular control.
Sometimes, it's also attacking the actual infrastructures
which are exposed and
very, very vulnerable.
So, let's explore some examples of how to mitigate future
Mobility risks. One example is multiple
ownership and there's a lot of personalized data around
users making it attention Target for theft. That's
so simplifying. That ownership
model makes sense the
dependence on the all the interconnection. So example, the
autonomous vehicles are connected with each other for safety Communications
which provide opportunities for. Yeah,
right.
Where it acts as a mentioned in the last slide service
providers. These providers have a
holistic idea of the users lives from where
they visit, how long they visit and a purpose. So in terms of digital
rights and data privacy, we have to make sure
that these providers are up to Snuff as they
say. In terms of their security systems vehicle
to everything. Communication is also a
very tricky one which can lead to all sorts
of Unfortunate Events.
Events on the road. So we
have to be very, very careful about hackers
and other malicious, come
agents taking control of these vehicles as
they become more and more connected
to each other.
So let's talk about some of the favorite ways of attacking
these feature Transport Systems. Fake services
are is a great example of how attackers
are flooding, the cysts servers and systems to
block or prevent delivery services to
the users. Fake messages are basically
attackers way of delaying or playing messages back like
adding fake objects to the lidar, scan or feed. So in
other words if you're if the car is driving on the road and it
thinks it's see something that doesn't
Just horrible things can happen. Fake
objects, attackers can try to modify your
duties fate objects into the change. The response of the computer vision,
algorithms. Similarly, the
lidar or the radar detects, something that's
not there. Again, creating a situation that's
very, very dangerous for the passengers and the
public alike vandalism. This is the old-fashioned way
of just using laser pointers or jamming systems
to stop the communications.
Of the of the vehicles, drones or transportation
services. And these are all very,
very dangerous situations for everybody.
So here's a couple illustrations of
attacks and some solutions to solve
these kinds of attacks. In this case. I'm going to
be talking about working with a CD here in Amsterdam how they
are tacking. This growing pandemic of drones
in the air and what the what
the security officials are doing to stop it.
So, here in Amsterdam, I'm working with
the chief technology officer, and they
have a very wonderful kind of dashboard to
sense. What kinds of
drones are being flown in the city of Amsterdam. We're really
close to the schiphol airport. So there's a very strict line
of what is
allowed to be flown. And
in this case, they have a dashboard that gives
officials and and
Raiders real-time insights about what kinds of
drones are being flown. Where and when and how often what
types of drones those drones are being flown from a certain
kind of Wi-Fi frequency. So it's very
very equal dead. Very easy to detect those
types of drones. And this detection
system is important to see the
kinds of violations, but also explore what kinds of
prevention measures mechanisms. They can deploy.
So for example, if you're an operator and you're flying a
drone with how the City Works is that they can,
they have this kind of detection system
that says, okay
above this, kind of category or weight class.
This drone is not allowed to be flown, and
that sent sends a signal to
the operators, and The Operators can
make an evaluation assessment to deploy a
van.
It has another kind of Jammer system that can neutralize that
that threat. And so this
is a really crude illustration, but you can imagine
the future when Amazon and everybody are
flying kinds of goods and services above our city. How
do we make sure that we can defend our
city from those aerial threats? If
necessary at all?
So that sums up the future Mobility. Obviously, the
last example is quite explicit, but you get the idea of
that it's not security is not only about the
data breaches. And the opportunities, the
person that can beat the interconnectivity presents to hackers
and and so forth. But also what
cities are doing right now to defend the are in
the streets and waterways from these autonomous threats,
potentially. And this next section. We're going
to be
talking about completing something completely different is iot and internet
of things and how the cities are
becoming more and more digital. Thanks to these little devices.