Cybersecurity is one of the biggest challenges for autonomous vehicles due to a large number of Internet-enabled software systems. The high dependence on Internet connectivity for navigation, telematics and information services makes autonomous vehicles highly vulnerable to network-based cyber attacks. For example, Denial of Service (DoS) attacks can block autonomous vehicles from receiving critical over-the-air (OTA) updates while connection hacking can be used to tamper software or re-task OTA instructions. Additionally, the automotive industry’s global supply chain is vulnerable to malware that propagates to critical vehicle systems from cloud environments. In response to the potential loss of life due to cyber attacks, the US government is introducing new legislation that mandates strict cybersecurity requirements for all networked software. This webinar will introduce participants to a new cybersecurity architecture called Software Defined Perimeter (SDP) that provides OEMs and application developers a framework to meet emerging government requirements to ensure safe autonomous vehicle operations. SDP utilizes a control channel to verify the identity and integrity of hardware and software systems before allowing automotive OTA transactions. Additionally, SDP’s application-aware connectivity ensures that malware cannot propagate through network connections. Key Take-Aways: Why are the existing cybersecurity solutions not suitable for the current auto industry? How can SDP meet the new US government auto cybersecurity requirements? Why the automotive industry should embrace SDP as a key technology for the next-generation cybersecurity solution?

1. 1www.movimentogroup.com
Protecting Autonomous Vehicles
and Connected Services with
Software Defined Perimeter
November 7, 2017
Live Webinar Series

2. 2www.movimentogroup.com
Session Host Guest Speaker
Follow me on
Mahbubul Alam
CTO & CMO
Movimento Group
Follow me on
Junaid Islam
CTO & Founder
Vidder
Mahbubul Alam is an international entrepreneur,
technology and business executive with broad
management experience. A frequent author, speaker
and multiple patent holder, he currently holds the
position of CTO/CMO at Movimento, a Delphi
company, reinventing the company’s technology and
strategy. He has been honored with the ‘2016 Bay Area
CIO of the Year’ award finalist by the Silicon Valley
Business Journal and the San Francisco Business Times.
Junaid is a well known cybersecurity expert with
30 years of networking and security experience.
He is the CTO of Vidder which is the leading
provider of SDP-based secure systems. In
addition to his work in the private sector, Junaid
also supports a number of US national
cybersecurity initiatives.

3. 3www.movimentogroup.com
Agenda
Ø Industry Direction
Ø Cyber Attack Vectors
Ø Automotive Cyber Risk
Ø Secure Enclave Design
Ø Software Defined Perimeter
Ø Key Takeaways
Ø Q&A

4. 4www.movimentogroup.com
The Evolution of the Automotive Industry
2000 20302015
Past Future
Ø Thousands of Transistors
Ø 100 Thousands Lines of Code
Ø Manual Diagnostics
Ø Limited Connectivity
Ø Digital Radio Services
Ø Basic HMI
Ø No Cyber Threats
Ø Billions of Transistors
Ø 100 Millions Lines of Code
Ø Automated Diagnostics
Ø Moderate Connectivity
Ø Apps Integration
Ø Limited Virtual Assistance
Ø Basic Cybersecurity
Ø Quantum Transistors
Ø Billions Lines of Code
Ø Self-Diagnostics
Ø Integral Connectivity
Ø Connected Services
Ø Cybernetic
Ø Default Cybersecurity

5. 5www.movimentogroup.com
Industry Direction: Connected Services Ecosystem
OEM / RETAIL / FLEET
PLATFORM
CUSTOMER VEHICLE
Flow of Data Flow of Money
DATA CONSUMERS
• Vehicle information
database
• Multi-module OTA
update
• Secure content delivery
• Big Data capture
• CT-EDGE data methods
• Highly configurable
acquisition logic
• Data Strategy
alignment with Business
Value
• Fleet management
3RD PARTY
DATA EXCHANGE
Unlocking The Turnkey Monetization Opportunities
externalinternal
D e l p h i ( A P T I V )

6. 6www.movimentogroup.com
Connected Ecosystem
Telematics
Machine
Learning
100+ ECU/Sub-systems connecting to Frontend & Backend Applications.
Frontend
Apps
Backend
Partners
Ecommerce
OEM

7. 7www.movimentogroup.com
Connected Ecosystem
Multiple
identities and
entitlements
inside and
outside the
vehicle.
Bi-directional
communications
from different
processes.
Backend
partners
communicating
with in-vehicle
systems.

8. 8www.movimentogroup.com
Attack Vectors
Location Spoofing
Laterally Moving
Malware
OTA Re-Tasking
Credentials Theft DNS Spoofing
Connected Services
Exploitation

9. 9www.movimentogroup.com
Potential Outcomes
Vehicle Theft Hijack/Ransom Terrorism
Data Theft Poor Operation Non-Operation

10. 10www.movimentogroup.com
Cybersecurity Challenges
Autonomous
Vehicles are in
a state of
constant
upgrades.
New
applications
(e.g. car
sharing) will
add to the
complexity.
Global supply
chain provides
many points of
entry for cyber-
attacks.

11. 11www.movimentogroup.com
Secure Enclave Security Model
Secure Enclaves utilize dedicated connectivity to a trusted compute environment
Frontend
Apps
Backend
Partners
Telematics
Machine
Learning
Ecommerce

12. 12www.movimentogroup.com
Software Defined Perimeter
Ø Control channel based architecture
Ø Attribute based access control
Ø Attestation & federated identity
Ø Edge-based forwarding
Ø Multi-protocol support
Ø IPv4/IPv6 addressing
SDP
Gateway
SDP
Client
SDP
Controller
SDP
Gateway
SDP
Gateway
IdentityAttestation Policy

13. 13www.movimentogroup.com
SDP Enables Secure Enclaves
Ecommerce
SDP
Controller
SDP
Client
SDP
Gateway
Hardware
Identity
Software
Attestation
Service
Plan

14. 14www.movimentogroup.com
SDP Enables Secure Enclaves
Hardware
Identity
Software
Attestation
Service
Plan
SDP
Controller
SDP
Client Ecommerce
SDP
Gateway

15. 15www.movimentogroup.com
SDP Enables Secure Enclaves
Vehicle
Identity
Driver
Identity
Service
Plan
SDP
Controller
SDP Data Channel
SDP
Client Ecommerce
SDP
Gateway

16. 16www.movimentogroup.com
SDP Connected Ecosystem
Telematics
Machine
Learning
SDP enables us to partition networks, manage connectivity and enforce security policies
Frontend
Apps
Backend
Partners
Ecommerce
SDP
Gateway
SDP
Gateway
SDP
Gateway
SDP
Gateway
SDP
Gateway
SDP
Client
Policy

17. 17www.movimentogroup.com
Movimento
Client
Content
Delivery
Infotainment
Service
App
Store
Software
Updates
OTA
SDP
Client
OEMs
Tier-1
Suppliers
Service
Providers
Content
Providers
Goal: Secure Closed Loop Architecture
SDP
Secure Over-The-Air Delivery
Secure Over-The-Air Data
Movimento Unified OTA Cloud Platform
App Delivery
OTA
Software
Updates
Infotainment
Service
Management Content
Delivery
Software
Management
Big
Data
Cyber
Security

18. 18www.movimentogroup.com
Key Takeaways
Connected ecosystem foundational to future.
Multiple cyber attack vectors must be mitigated.
Secure enclaves are an ideal security model.
Software Defined Perimeter enables secure enclaves.
Proactive security requires closed-loop architecture.

19. 19www.movimentogroup.com
Q & A

20. 20www.movimentogroup.com
Securing the Software Defined Car™ Using
Artificial Intelligence and OTA Updates
Date: Tuesday | 14 November, 2017
Time: 8 AM PST / 11 AM EST / 5 PM CET / 9:30 PM IST
Saving Lives Using Artificial Intelligence and
Context-based Automotive OTA Software Updates
Date: Tuesday | 5 December, 2017
Time: 8 AM PST / 11 AM EST / 5 PM CET / 9:30 PM IST
Upcoming Webinars

21. 21www.movimentogroup.com
www.movimentogroup.com
www.linkedin.com/company/movimento
@movimentoauto