Automotive / Mobility
Cybersecurity for Connected Vehicles and Transportation Infrastructure
The increasing digitization and connectivity in transportation also heighten the vulnerability of all types of infrastructure and vehicles to IT security risks. Modern vehicles are equipped with electronic control units (ECUs) featuring numerous interfaces that communicate with their surroundings and the Internet. This connectivity significantly expands the attack surface—not only for connected cars and commercial vehicles, but also for aircraft and public transportation. Furthermore, transportation infrastructure is classified as critical infrastructure (KRITIS), which means stricter regulations must be observed.
The sheer number of these interfaces makes vehicles and transportation infrastructure particularly vulnerable to attacks. An effective security strategy must therefore take all levels into account: from onboard electronics to cloud connectivity to the supply chain.
The potential consequences of such attacks range from the disruption of individual functions to the loss of sensitive data and even a threat to operational and traffic safety. For manufacturers in the mobility sector, this represents not only a significant security risk but also the potential for financial losses and damage to their reputation—for example, due to product recalls, contractual penalties, or liability claims.
Most Common Points of Entry
Interfaces and Communication Channels
- Bluetooth and USB Ports
- Smartphone integration (e.g., via Android Auto, Apple CarPlay)
- Telematics systems for remote diagnostics, e-Call, and fleet management
- Over-the-Air (OTA) updates without sufficient authentication
- Vehicle-to-X (V2X) communication (vehicle-to-vehicle or vehicle-to-infrastructure)
Sensors and Embedded IoT Components
- Cameras, radar, and lidar sensors with internet access
- Tire pressure sensors and other wireless vehicle modules
- Keyless entry and access systems
Outdated and Unpatched Systems
- Legacy Systems in Rail or Air Transportation
- Control units without up-to-date safety mechanisms
- Software components in vehicle architecture that are no longer supported
Supply Chain and Third-Party Systems
- Unsafe components from suppliers
- Lack of security testing during development
- Attacks via maintenance systems or backend infrastructures
What We Offer
Our scientists help manufacturers, operators, and government agencies identify, assess, and effectively mitigate cyber risks at an early stage. We support you throughout the entire IT security lifecycle—from concept review and testing procedures to the implementation of specific protective measures.
Safety Tests at the Automotive Test Lab
In our Automotive Test Lab, we test the safety of control units, communication interfaces, and vehicle electrical system architectures under realistic conditions. To do so, we use tools and test methods we have developed in-house within flexible test environments tailored to current vehicle architectures.
Our Range of Services
Proof-of-concept developments for validating new security solutions
Safety certification and testing procedures in accordance with recognized standards (e.g., SAE J3061)
Support for funded projects (e.g., BMDV, EU Horizon Europe)
Technical consulting, as well as the development and review of IT security policies
Consortium projects with OEMs, government agencies, and technology partners
AI-based attack detection strategies (e.g., malware detection in control units and networks)
Resilience Research Using AI to Strengthen Safety-Critical Systems
Services
Our customized tests provide reliable results for development departments, IT security managers, and suppliers. In this way, we help you identify existing vulnerabilities and secure your products for the long term.
Manufacturers benefit from our experience in reviewing and evaluating security architectures, as well as in conducting practical penetration tests. With our expertise, we help ensure that the increasing complexity of connected transportation systems is designed securely—both now and in the future.