| | APRIL - 4 - 201ENTERPRISE SECURITY8With an Aim to Optimize Telematics SecurityBy Kevin Baltes, CISSP Director & CISO ­ Product Cybersecurity, General MotorsWith individuals averaging over 290 hours a year in a vehicle (AAA.com, 2016), the use of connected services and telematics has become common for drivers and passengers. Individuals are fueled by the need to be constantly connected with their surroundings and devices, and most of their environment is a part of the Internet of Things (IoT). Another "device" that is part of the IoT is the modern connected vehicle. Individuals' needs for convenience, sharing, safety, and peace of mind have extended to automobiles with advanced infotainment systems and the availability of services like General Motors (GM) OnStar. Today, GM's available infotainment systems have advanced personalization settings to store car's seat settings, radio presets, displays, etc. With the available4G LTE hotspot available in the GM vehicle, up to seven passengers can remain connected while in transit. GM has over 5 million 4G LTE connected vehicles on the road today. These connections are resulting in a large amount of data being exchanged between the vehicle and the cloud. (The "cloud" can be the manufacturer's IT back office, or IT services hosted by a third party, or a combination of both.)The modern connected vehicle helps automobile manufacturers not only create a premium vehicle A best practice is to use threat modeling and to adopt a risk-based methodology to identify assets and data that need protection, and to what degreeIn My Opinion
< Page 7 | Page 9 >