Tuesday, July 21, 2015

Could Hollywood improve cyber security?

The digerati know that vehicles using Chrysler's Uconnect can be compromised remotely. You can read more in the Wired Article (Hackers Remotely Kill Jeep). The problem is that the general public, nor their elected representatives know or care much about it. If they did, they might understand how this is a threat to both our nation's economy and security.

Q: How do you raise awareness?
A: Motion Pictures.

The basic idea: Standard fare action adventure movie. Someone pretending to be a valet at a car park slaps a device into the OBD port of the target's car. They drive away and are remotely executed in what looks like a plausible car crash.

Now you need a few reviewers to point out that this is not fiction, and possible today. With that you might generate some justified public concern. Make the movie target an elected representative and you might get some actual movement in our laws.

Senators Markey and Blumenthal have introduced a bill which addresses these issues. (http://www.markey.senate.gov/news/press-releases/sens-markey-blumenthal-introduce-legislation-to-protect-drivers-from-auto-security-privacy-risks-with-standards-and-cyber-dashboard-rating-system, http://www.markey.senate.gov/imo/media/doc/SPY%20Car%20legislation.pdf). It is a great start, but it misses one point. It should not simply say "such as penetration testing". It should require "penetration testing by multiple independent third parties".

Well, I seemed to have gotten a little off topic here, but I do think it would make a great plot element in a film. I'm claiming copyright on that idea. I won't require much in residuals.


No comments: