Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

Can a Virus Hitch a Ride in Your Car?
The New York Times ^ | March 13, 2005 | Tom Zeller Jr. and Norman Mayersohn

Posted on 03/13/2005 4:49:54 AM PST by MississippiMasterpiece

A virus can wreak havoc on computer files, hard drives and networks, but its malicious effects tend to be measured in wasted time, lost sales and the occasional unfinished novel that evaporates into the digital ozone. But what if viruses, worms or other forms of malware penetrated the computers that control ever more crucial functions in the car?

Could you find yourself at the wheel of two tons of rolling steel that has malevolent code coursing through its electronic veins?

That frightening prospect has had Internet message boards buzzing this year, amid rumors that a virus had infected Lexus cars and S.U.V.'s. The virus supposedly entered the cars over the Bluetooth wireless link that lets drivers use their cellphones to carry on hands-free conversations through the cars' microphones and speakers.

The prospect is not so implausible. A handful of real if fairly benign cellphone viruses have already been observed, in antivirus industry parlance, "in the wild."

Still, a virus in a cellphone might muck up an address book or, at worst, quietly dial Vanuatu during peak hours. But malicious code in cars, which rely on computers for functions as benign as seat adjustment and as crucial as antiskid systems that seize control of the brakes and throttle to prevent a crash, could do far more harm.

The Lexus tale, based on murky reporting and a speculative statement by Kaspersky Labs, a Moscow antivirus company, seems to have been unfounded. "Lexus and its parent companies, Toyota Motor Sales USA Inc. and Toyota Motor Corporation in Japan, have investigated this rumor," the carmaker said in a statement last month, "and have determined it to be without foundation."

But the question lingers: Could a car be infected by a virus passed along from, say, your cellphone or hand-held computer? Or worse, by a hacker with a Bluetooth device within range of the car's antennas?

The short answer is, not yet.

"Right now this is a lot of hype rather than reality, the idea that cars could be turning against us," said Thilo Koslowski, a vice president and lead analyst for auto-based information and communication technologies at Gartner G2, a technology research firm. "We won't see John Carpenter's 'Christine' becoming a reality anytime soon."

But Mr. Koslowski and others are quick to point out that the elements for mischief are slowly falling into place:

First, vehicles are increasingly controlled by electronics - to the point that even the simple mechanical link between the gas pedal and engine throttle is giving way to "drive by wire" systems.

Second, more data is being exchanged with outside sources, including cellphones and real-time traffic reports.

Finally, the interlinking of car electronics opens up the possibility that automotive worms could burrow into a memory storage area in ways that engineers never imagined.

Since the early 1990's, the various computers that manage a car's engine, transmission, brakes, air bags and entertainment systems have been increasingly linked in networks much like the ones that offices use to let workers share printers, scanners and backup storage drives. Benefits of interconnecting the electronic devices include less wiring - a luxury car can contain miles of copper cables - and reduced weight, an important factor in improving performance and fuel economy.

Less obvious are the advantages of having the components communicate: an antiskid system, designed to help keep a car from spinning out of control, links sensors in the steering, brakes and throttle, and can effectively seize control from the driver.

Other systems in which computers essentially take over, if only for a second, include emergency-brake assist, which provides maximum braking force when sensors detect the need for a panic stop, and "active steering," a feature now exclusive to BMW in which computers can compensate for a driver's recklessness.

The latest versions of in-car information systems, known as telematics, include the ability to diagnose vehicle maladies. General Motors' OnStar can forward readings from sensors throughout the car for troubleshooting, a process called remote diagnostics. (All G.M. cars will include OnStar by the end of 2007.)

The data, read from the engine-control computer, is transmitted over the OnStar cellphone link. Several automakers have discussed plans to use this conduit to update a vehicle's software or even perform electronic repairs, though no automaker is currently doing this regularly. Microsoft has entered this business, too, having recently signed a deal to provide software for a telematics and diagnostics system to be installed in all Fiats, starting this year.

By design, the various controls are not isolated from other in-car processors, since they need to share information to operate effectively and avoid the need for redundant sensors, wiring and microprocessors. Also, automakers have begun to share in-car processing power and memory capacity over the network, said Paul Hansen, the publisher of an industry newsletter, The Hansen Report on Automotive Electronics.

In a car with a stand-alone cellphone installation there would be no pathway for pernicious computer code to enter the vital electronic systems. But as automakers work to take advantage of linked processors, ready exchanges of data - and malware - become possible.

Possible does not, however, mean easy. Unlike the anonymous and remote world of PC viruses delivered over the Internet, a ne'er-do-well would need, in most cases, a few moments alone with a car to impregnate it with malware - for now.

Marko Wolf, a research associate at Ruhr-Universität in Bochum, Germany, and co-author of a recent study of security in automotive networks, said a rogue mechanic with under-the-hood access could make short work of planting malicious code. And as internal networking reaches the exposed extremities of a car - its side mirrors, say, or its lights - the number of potential access points increases.

"Cars have extended their bus wires and controllers even into their electronic mirrors" and to receivers for global-positioning signals, Mr. Wolf said, conjuring a "Mission: Impossible" plot: "One can easily hack into the internal communication system just by breaking away that outside part and connecting the bare bus wires with a P.D.A. or laptop." (A bus is essentially a collection of wires linking one part of a computer - or a car - to another.)

Looking ahead, a proliferation of remote access points - OnStar-type services, for instance, or short-range Bluetooth connections - will raise the odds that virus writers will eventually try to beam a bug across the ether. Just as such services let the car send data to the outside world, malware writers could try to use those wireless conduits to send destructive payloads into cars.

Systems like OnStar, known for providing emergency assistance or concierge services (its operators will make restaurant reservations for you), in fact hold deep conversations with the car's networks. Besides the ability to provide engine diagnostics and unlock the doors by remote to rescue forgotten keys, an advanced level of OnStar - now on about a dozen G.M. models - will report detailed data about a collision to emergency medical personnel.

Navigation systems, which have used only a time signal from satellites to determine a car's location, are adding traffic information. The Acura RL is the first with this service; updates about congestion or construction delays are sent to the car and displayed on the navigation screen.

Despite these potential pathways, creating a virus that would spread within the car would be no small feat. In the Windows-dominated PC universe, "the programmer only has to know the PC processor" to do damage, said Egil Juliussen of Telematics Research Group of Minnetonka, Minn., a firm that tracks the rise of in-car networking.

"The auto is a very different environment," he said. "The infotainment system may have multiple processors and operating systems. The navigation system has one processor or operating system, the telematics system may have another one and the radio may have a third one."

Getting a virus to propagate from one system to another would be akin to designing malware that could pass from a Windows environment to a Macintosh system and on to a Linux machine - infecting them all.

"The point is that the virus writer needs to expand his knowledge by a factor of 10 or more over the PC world," Mr. Juliussen said. Even then, he said, with operating systems - particularly those that control crucial mechanical systems - remaining varied and proprietary, a successful virus could function in only a small fraction of cars.

"It's feasible," Mr. Juliussen said, "just a lot harder."

Whether virus writers can overcome the hurdles remains an open question, but evidence from the PC world suggests that as on-board networking becomes more widespread and standardized, they will certainly try. Early speculation, like the Lexus rumors, may help focus attention on the potential problem before car malware has a chance to flourish.

"I am very happy to see as many rumors of that sort as believable as possible as soon as possible," said Peter B. Ladkin, a professor of computer networks and distributed systems at the University of Bielefeld in Germany. "Because it means that more automakers will pay attention to what they're doing."


TOPICS: Business/Economy; Culture/Society; News/Current Events
KEYWORDS: bluetooth; virus
Navigation: use the links below to view more comments.
first 1-2021-31 next last

1 posted on 03/13/2005 4:49:54 AM PST by MississippiMasterpiece
[ Post Reply | Private Reply | View Replies]

To: MississippiMasterpiece

There may be viruses in my '67 mustang, but they aren't in the electronics.


2 posted on 03/13/2005 4:55:33 AM PST by brooklin
[ Post Reply | Private Reply | To 1 | View Replies]

To: MississippiMasterpiece

..sounds like one of the 'Millenium bug' fear merchants.


3 posted on 03/13/2005 4:56:10 AM PST by Banjoguy (Don't be brain dead.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: MississippiMasterpiece

"rumors that a virus had infected Lexus cars and S.U.V.'s"

Well, that must explain all the accidents, death and destruction done by those nasty SUV's. ;~ )


4 posted on 03/13/2005 4:57:27 AM PST by nuconvert (No More Axis of Evil by Christmas ! TLR)
[ Post Reply | Private Reply | To 1 | View Replies]

To: MississippiMasterpiece
an antiskid system, designed to help keep a car from spinning out of control, links sensors in the steering, brakes and throttle, and can effectively seize control from the driver.

The computer takes over my car in an emergency? I don't THINK so. The PC I'm working is untrustworthy as hell just for surfing the net. I'm not trusting my life to a computer to manage my car's steering. Not yet any way.

I will say that when I saw that Microsoft was getting involved in the competition to create auto electronics, the possibility of viruses becomes much more real. You'd have to go to AutoZone to buy anti-virus software if they were involved.

5 posted on 03/13/2005 5:07:39 AM PST by Hardastarboard
[ Post Reply | Private Reply | To 1 | View Replies]

To: MississippiMasterpiece
The more we depend upon something, the more vulnerable we become. Cars are one example, but also consider the newer airplanes with all glass cockpits. Almost no mechanical gauges anywhere. All fly-by-wire or fly-by-light controls for all aspects of aircraft control. It's just a matter of time. Not if, but when. It's a common theme in science fiction that will soon be science reality.

Have you ever watched Battlestar Gallactica? The machines, the Cylons, were able to take over because all of the humans' computer systems were linked. When the Cylons attacked, they sent a command over all of the linked computer systems telling them to shut themselves down. Then the Cylons attacked and the humans couldn't defend themselves.

Perhaps the computer virus will be the terrorist's next weapon of choice.

6 posted on 03/13/2005 5:07:58 AM PST by GBA
[ Post Reply | Private Reply | To 1 | View Replies]

To: nuconvert
We've had 

"My homework assignment was ready but a computer virus erased it"

and 

"I did remember our anniversary honey, but a computer virus said it was tomorrow and not today."

Now it's:

"Why no officer, a computer virus made the car drive too fast."

7 posted on 03/13/2005 5:11:19 AM PST by expat_panama
[ Post Reply | Private Reply | To 4 | View Replies]

To: MississippiMasterpiece
I found a computer cutie!


8 posted on 03/13/2005 5:11:53 AM PST by Enterprise (President George W. Bush - the leading insurgent detergent.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: brooklin

You just need to wave a rubber chicken over that kind;)


9 posted on 03/13/2005 5:21:55 AM PST by ChefKeith (Apply here to be added to the NASCAR Ping List, Daytona is done but we got 34 more races to go...)
[ Post Reply | Private Reply | To 2 | View Replies]

To: brooklin

LOL!


10 posted on 03/13/2005 5:24:34 AM PST by KevinB
[ Post Reply | Private Reply | To 2 | View Replies]

To: MississippiMasterpiece
This issue should be extended to the much-touted "fly by wire" control systems of modern airliners.

Imagine someone who had been a programmer at an airplane manufacturer turning postal and selling the codes and the method of overriding them to someone like Al-Queda!

They wouldn't even have to be aboard the aircraft to take it over and fly it into a skyscraper somewhere.

"Drive-by wire", or "fly-by-wire" could conceivably have a serious downside.

11 posted on 03/13/2005 5:35:23 AM PST by nightdriver
[ Post Reply | Private Reply | To 1 | View Replies]

To: MississippiMasterpiece
It depends on rather the drive-by-wire system is connected to the (car navigation) computer by network and is accessible. It may also depend on the operating system and the computer language it use. If the drive-by-wire is a stand alone system from a network, the chance that it may cause accident is low.
12 posted on 03/13/2005 5:43:45 AM PST by Wiz
[ Post Reply | Private Reply | To 1 | View Replies]

To: brooklin

LOL!!!!


13 posted on 03/13/2005 5:48:10 AM PST by ConservativeMan55 (DON'T FIRE UNTIL YOU SEE THE WHITES OF THE CURTAINS THEY ARE WEARING ON THEIR HEADS !)
[ Post Reply | Private Reply | To 2 | View Replies]

To: Hardastarboard

The anti skid system on most cars less than 10 years old does exactly that. It senses when the tires are skidding like on ice or in an emergency, and pumps the brakes, so the driver has steering. Why is this so scary to you? Hell, computers have been flying the airplanes you ride in for the last 20 years.


14 posted on 03/13/2005 6:01:39 AM PST by Lokibob (All typos and spelling errors are mine and copyrighted!!!!)
[ Post Reply | Private Reply | To 5 | View Replies]

To: GBA

Air traffic control is computer based.

Traffic lights are computer controlled.


15 posted on 03/13/2005 6:07:22 AM PST by Lokibob (All typos and spelling errors are mine and copyrighted!!!!)
[ Post Reply | Private Reply | To 6 | View Replies]

To: nuconvert

Or someone will just happen to have something for sale to prevent a autocomputer problem for a SMALL fee.When you want to sell something first you have to create a need to sell the widget.


16 posted on 03/13/2005 6:32:06 AM PST by Vaduz (and just think how clean the cities would become again.)
[ Post Reply | Private Reply | To 4 | View Replies]

To: brooklin

LOL! I've had several virus's in my Pony also! There was the one that caused all the metal in the trunk area to rot away, the one which won't let me pass 80MPH with a stock 289 and a C-4(that has over 200,000 miles on it), and the virus that makes all the repairs and upgrades so bloody expensive!!!


17 posted on 03/13/2005 6:36:27 AM PST by Sarajevo (Sarajevo is the beginning of 20th century history.)
[ Post Reply | Private Reply | To 2 | View Replies]

To: MississippiMasterpiece

I think all of the faulty code is between the ears of certain operators. Lke the interlocks which should inhibit drinking and driving.


18 posted on 03/13/2005 6:38:23 AM PST by HangThemHigh (Entropy is not what it used to be.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: MississippiMasterpiece
SkyNet has become self-aware and has taken over my Jeep!
19 posted on 03/13/2005 6:40:53 AM PST by CrazyIvan (What's the difference between Joseph Goebbels and Michael Moore? About 150 pounds.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: brooklin

Yep. One more reason to keep the old cars around.


20 posted on 03/13/2005 6:44:03 AM PST by R. Scott (Humanity i love you because when you're hard up you pawn your Intelligence to buy a drink.)
[ Post Reply | Private Reply | To 2 | View Replies]


Navigation: use the links below to view more comments.
first 1-2021-31 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson