Ruter identifies cybersecurity risks in connected electric buses during tests - Sustainable Bus
Briefly

Ruter identifies cybersecurity risks in connected electric buses during tests - Sustainable Bus
"The trial confirmed that while the VDL buses do not support autonomous software updates Over-The-Air (OTA), the Yutong bus does, providing the manufacturer with direct digital access for software updates and diagnostics. In theory, this access could allow the bus to be stopped or rendered inoperable, though the low level of integration between critical systems makes it possible to isolate the vehicle from external contact and monitor updates before they take effect."
"Vulnerabilities in the Chinese software update platform were reported and have since been addressed. However, it must be stressed that these risks cannot be attributed to the origin of the product, but rather to technological innovation introduced in new generations of buses, which now incorporate OTA updates. This applies not only to Yutong models but also to other modern buses, as the OTA capabilities are also introduced on the new Mercedes eIntouro for instance."
Ruter conducted isolated mountain tests of electric buses, using a new Yutong and a three-year-old VDL, to assess cybersecurity risks. The trials found that Yutong supports Over-The-Air (OTA) updates, granting manufacturers direct digital access for updates and diagnostics, while the VDL lacked autonomous OTA capability. In theory OTA access could stop or render a bus inoperable, but low integration of critical systems allows isolation and monitoring of updates before activation. Vulnerabilities in the Chinese software update platform were identified and have been addressed. Ruter is implementing fleet security measures and coordinating with national authorities to define clear cybersecurity standards.
Read at Sustainable Bus
Unable to calculate read time
[
|
]