Government and Private Sector Conduct Cybersecurity Training for Vehicles

The government and private sector are conducting joint simulated training to prepare for potential hacking incidents that could cause critical vehicle systems, such as steering, to operate contrary to the driver's intentions.

The Ministry of Land, Infrastructure and Transport announced that it will hold a 'Joint Public-Private Cybersecurity Incident Response Simulation Training' at Hyundai Motor's Pangyo AVP headquarters.

This training aims to assess the response procedures and coordination among relevant agencies following the implementation of the Automotive Cybersecurity Management System (CSMS) in the event of an actual incident. Instead of hacking real vehicles or systems, the training will simulate a staged incident, allowing each agency to report and respond as they would in a real situation.

The scenario will involve a server of an automotive parts supplier being hacked, leading to the distribution of malicious software through an over-the-air (OTA) update, causing the vehicle to malfunction. As vehicles become increasingly reliant on software, the security management of the supply chain, including parts manufacturers and software suppliers, is becoming a critical factor in automotive safety.

The training will proceed in stages, starting with incident detection and reporting, followed by cause analysis and inter-agency cooperation, short-term measures for vehicle recovery, final measures to address vulnerabilities and enhance supply chain security, and concluding with verification of the adequacy of actions taken and incident closure.

When Hyundai detects an anomaly and reports the incident, the Korea Automotive Technology Institute (KATRI) will handle technical reviews and report to the Ministry of Land, Infrastructure and Transport. The Korea Internet & Security Agency (KISA) will analyze the cause of the breach, while the National Police Agency will be responsible for tracking the hacker and conducting investigations, thereby testing the inter-agency cooperation system.

Following the incident, software distribution will be halted, and improved software will be deployed to restore the vehicle. The entire process, from tracking unaddressed vehicles to strengthening vehicle defense layers and supplier security, will be carried out according to actual procedures to prevent further incidents.

Park Jun-hyung, head of the Ministry's Mobility and Automotive Bureau, stated, "Automotive cybersecurity incidents directly impact the lives and safety of the public, unlike general cybersecurity incidents. Through this joint public-private training, we will continue to enhance the roles and cooperation among relevant agencies and establish an automotive cybersecurity environment that prioritizes national security and public safety."