New cars are increasingly packed with heavy-duty technologies that offer motorists a variety of new and exciting features. However, cybersecurity is a growing industry sector, too.
To address the risks posed by cyber-attacks, global engineering, technology, and consulting services, Expleo, is said to have developed an industry-leading testing platform.
The platform called ‘Smeeta Suitcase’ can conduct security assessments, cyber forensics and written tests for the travel industry.
We spoke to Helmi Rais, head of the cybersecurity team at Expleo, to learn more about this new technology and what it can do.
Bus Auto (JA): Can you tell me a little about your role in the company?
Helmi Rais (HR): I am the cybersecurity team leader at Expleo which means I oversee all cybersecurity activities across the business, covering everything from service delivery to R&D projects.
I ensure that our teams are helping customers to integrate cyber security into product development and solutions for every industry, from automotive to BFSI. I have been with Expleo for almost three years now and have been working in the cybersecurity industry for over twenty years.
Can you explain the ‘Smeeta Suitcase’, how it came about, what functions it can do?
The ExpleoSmeeta Briefcase was created by the R&D project at Expleo, looking at how to help OEMs/Tier1s in the automotive and automotive sectors protect their assets from common cyber threats.
It combines the ExpleoSmeeta Operating System – a Linux-based open source distribution – with hardware and scripting tools from Expleo. The result is a physical “platform-in-a-box” that can perform security assessments, cyber forensics, and auto-encoders and devices.
The ExpleoSmeeta Briefcase can test wireless and physical cable connections in a modern car with the most extreme scenarios: GPS, cellular, Wi-Fi, Bluetooth and more.
We can test a car’s cyber resilience against GPS spoofing, key fob hacking or spyware installations against infotainment systems. The ultimate goal is to help OEMs and Tier1s ensure the security of their products, customers, and customer data by integrating cyber security into design and anticipating future threats.
Along with the development of ‘Smeeta Suitcase’, a cyber resilience platform-in-a-box has been developed, can you explain this?
ExpleoSmeeta Briefcase is a cyber resilience system. Our idea was to create a solution that combines hardware and software so that our engineers can go to the various test environments that our customers and partners need.
This can be in the lab, office, parking garage or anywhere else, so being able to carry and have everything we need in one package is very useful.
What are the main benefits of this new technology?
Cars are becoming more connected and controlled by apps all the time. By integrating digital technologies, driverless cars, electronics, car infotainment and new business models on the move are all possible. However, as we have seen in other industries, this opportunity comes with significant cyber risk.
Safety and security are of constant importance and thus the automotive industry must respond to the ever-changing threats.
In creating ExpleoSmeeta, we are combining the knowledge of the Internet community with Expleo’s proven expertise in the automotive and digital industries to help automakers test, secure and protect their products, making them more resilient, sustainable, and compliant with cybersecurity laws and policies. internet, and ultimately it’s safe for consumers.
Can you add on the ‘dangers’ that ‘Smeeta’ can test?
To ensure the highest standards of Internet security, it is important that security is built into all aspects of business development. It’s easier to build a new car from the ground up than it is to do it retroactively.
ExpleoSmeeta supports this integration, especially during testing and field validation. However, this is only one step and that is why we work closely with our customers to help create a secure architecture with all the necessary controls for cyber security.
The ExpleoSmeeta Briefcase allows our engineers to thoroughly test cyber security across a variety of threat vectors. This includes:
- Radio frequency devices such as RFID or GPS
- Wireless Connectivity including cellular (4G/5G), Wi-Fi, Bluetooth, and Telematics
- Vehicle sensors
- Controller Access Network (CAN) Bus
- UART-JTAG
- USB, CD and SD Cards
- Software and Software
