The Cybersecurity Challenge in SDVs: Securing Displays, Telematics and In-Vehicle Networks

The automobile industry has changed significantly in just a few years with software now sitting at the heart of how vehicles operate, communicate and deliver a better driving experience. Digital instrument clusters, connected displays, telematics control units and over-the-air (OTA) updates have made modern vehicles smarter and a lot more convenient. But there is a catch, because the more connected a vehicle becomes, the more doors it opens for cyber threats. If there is a weakness in an infotainment system or a connected display, an attacker could use it as an entry point to reach other vehicle systems, depending on how the electronic architecture has been designed.

The same goes for telematics units and the vehicle-to-cloud links. If those are not secure, sensitive information could be exposed, or someone could get access they were never meant to have. And as more and more vehicle functions depend on connected technology, it is simply not enough to protect each component on its own. Manufacturers have to make
sure that the communication between systems, both inside the vehicle and outside it, stays secure at every step.

Now let us look at what happens inside the vehicle. Components talk to each other over in-vehicle networks such as the Controller Area Network (CAN) and Automotive Ethernet. As vehicles lean more on software, these networks need much stronger protection against unauthorised access and malicious activity. The idea is simple. If an attacker manages to compromise one component, the damage should stay right there and not spread to other systems. This is where network segmentation helps.

By keeping critical functions apart from less sensitive systems and cutting down on communication that is not needed, manufacturers can lower the risk considerably. Secure authentication and data encryption add another layer, protecting the information that moves between vehicles, cloud platforms and external services. OTA updates deserve special attention too. They are a
great way for manufacturers to fix software issues and roll out improvements remotely.

But every single update must come from a trusted source and be verified before it is
installed. Get that right, and attackers will find it much harder to exploit connected
features and compromise vehicle security. Here is something manufacturers need to remember. Cybersecurity cannot be a final coat of paint added just before launch. It has to be part of vehicle development from the very first stage.

That means security testing, vulnerability assessments and secure software development practices should run through the entire design process. And the job does not end when the vehicle reaches the customer. Software vulnerabilities can show up over time, and new attack methods can expose weaknesses that nobody knew about earlier.

This is why regular security updates combined with the continuous monitoring of
connected services and clear incident response procedures are so important. No single player can handle all of this alone. It requires vehicle manufacturers, component suppliers, software developers and cybersecurity specialists to work together so that risks can be spotted and fixed before it is too late. With a coordinated approach of that nature, security stays a priority across the whole lifecycle of the vehicle, from the first design and production to maintenance and software upgrades.

Let us bring this home to India where electric vehicles, connected features and software-defined architectures are all picking up pace in the country’s automotive industry, and that makes this responsibility even more important. Along with connectivity and advanced digital experiences, customers also want to feel confident that their data and vehicle systems are protected. A cybersecurity incident is not only about losing digital information as it could also affect how the vehicle operates and even have deeper implications for passenger safety.

That is why manufacturers must treat cybersecurity as a core part of vehicle quality and reliability. If they build security into the design, strengthen in-vehicle networks and keep systems updated on time, the industry can cut down risks and earn more trust from customers. The future of mobility will not depend on technological innovation alone. It will also depend on how responsibly that technology is protected. Securing connected vehicles right from the beginning will be vital to building a safer and more dependable automotive ecosystem in India.

Rajiv Warrier is Chief Strategy Officer, BD Soft. Views expressed are the author's personal.