The Ministry of Industry and Information Technology issued the opinions on the safety management of smart cars. The leading network security company 360 has made early arrangements.

In recent days, the safety issues of intelligent networked vehicles caused by autonomous driving have been pushed to the forefront, and the concept of "big safety" of the Internet of Vehicles has frequently "broken the circle", attracting attention from all walks of life. The "Opinions on Strengthening the Access Management of Intelligent Networked Vehicle Manufacturers and Products" (hereinafter referred to as the "Opinions") recently issued by the Ministry of Industry and Information Technology clearly requires that the main responsibility of enterprises should be strengthened, and the management of automobile data security, network security, software upgrades, functional safety and expected functional safety should be strengthened.

Zhou Hongyi, founder and chairman of 360 (stock code: 601360.SH, 360 for short), said that the release of the Opinion clarified the main responsibilities of car companies in terms of protecting car data security and network security. At the same time, he believes that the current intelligent networked cars face five major security risks: first, the number of car codes has increased sharply, and security defects have increased exponentially; second, the Internet of Things has increased the attack surface, and cloud security has become the biggest hidden danger; third, car companies have insufficient security investment, which has become a weak link in security; fourth, the risk of leakage, extortion, and abuse caused by large-scale data collection; fifth, traditional security means are no longer applicable. To this end, 360 proposed a security framework for the Internet of Vehicles with a cloud security brain as the core.

Automakers must be responsible for vehicle data security and implement full life cycle management

The "Opinion" first gives clear regulations on strengthening data security management capabilities, and proposes that automobile companies should establish and improve automobile data security management systems, fulfill data security protection obligations in accordance with the law, implement data classification and grading management, and strengthen the protection of personal information and important data.

Currently, the data collected by smart connected cars is stored locally and in the cloud, which is at risk of being stolen. Once the data is leaked, user privacy will be exposed, and the leakage of road network data, navigation data, environmental images and other data involving important sensitive areas may also endanger national security.

360 security experts believe that the Opinions clarify data collection, transmission, storage, processing, exchange and other dimensions, and pay systematic attention to the security of data throughout its life cycle: in terms of data collection, smart connected cars may collect a lot of sensitive data that should not be collected, so it must be restricted; at the same time, the collected data should be stored in China, and if the data is to be exported, it must be reviewed and compliant before it can be exported; car companies should also ensure that data will not be tampered with or leaked during transmission and processing, and user privacy must not be leaked. The Opinions will prompt relevant car companies to pay more attention to data security and personal information protection.

The key to network security lies in car companies. 360 cloud security brain fully empowers

The Opinion also clarifies that automakers must strengthen their cybersecurity capabilities. The Opinion requires that companies should establish an automotive cybersecurity management system, have technical measures to protect automotive electronic and electrical systems, components and functions from cyber threats, and have technical conditions for automotive cybersecurity risk monitoring, discovery and disposal of cybersecurity defects and vulnerabilities.

"If there is a problem with the network security of the automotive industry, it is much more serious than that of mobile phones." Zhou Hongyi said that as cars become more and more digital, the security risks are unprecedented. Attackers can remotely control cars by attacking car companies, including remote opening of doors, remote starting, and remote shutdown, which seriously threatens the safe driving of smart cars. Especially when driving a car, if there is a problem, it will be unimaginable. "Last year alone, 360 helped Mercedes-Benz find 19 vulnerabilities."

360 security experts said that the timely release of the "Opinions" can provide automakers with better guidance and norms in implementing network security protection, promote the interconnection and interoperability of network security information, and help improve the overall security of intelligent connected vehicles and vehicle networks.

In this regard, 360 security experts suggest building a car networking security framework with 360 cloud security brain as the core. It is based on security big data analysis, and uses key capabilities such as threat intelligence subscription, knowledge base, and security experts to empower car companies, and enhance the car companies' security detection and discovery capabilities for security threats. At the same time, relying on the local security brain to build the car company's security infrastructure, improve the car networking security detection and real-time detection before and after the vehicle leaves the factory, and ensure that every car leaving the factory meets the safety requirements. At the same time, through the 360 ​​car networking security monitoring platform, help car companies analyze and respond to security threats, so that threats can be perceived, visible, and traceable, thereby ensuring the safety of end users. And help car companies build a big data platform to protect the car company's network security and improve security protection capabilities.

Avoid excessive marketing: Automakers should clearly inform customers of the limitations of autonomous driving functions

The Opinion also proposes that when car companies produce automobile products with driving assistance and autonomous driving functions, they should clearly inform the vehicle's functions and performance limitations, driver's responsibilities, human-computer interaction equipment instructions, function activation and exit methods and conditions, and other information.

360 security experts believe that at a time when driving assistance and autonomous driving technologies are developing rapidly, the "Opinions" promptly makes clear regulations on the functional safety assurance of intelligent connected vehicles, which will help automakers continue to invest in technology and will be beneficial to users, industries and enterprises in the long run.

Zhou Hongyi said that artificial intelligence is not a marketing tactic and is not that magical. Autonomous driving and unmanned driving still have a long way to go and pitfalls to fill. Users should not be misled for the sake of marketing. To hype up artificial intelligence in order to sell things is actually harming the industry. He said: "The industry has not yet developed to this level. You should honestly tell consumers that this car can only achieve assisted driving in certain scenarios. In fact, human driving is still the main method. Artificial intelligence is only used for assistance and supervision, and to give advice and help to drivers. This is more realistic."

To this end, he also suggested that it should be expressed in simple concepts that ordinary users can understand at a glance, such as changing "L3 = automatic assisted driving" to "L3 = advanced assisted driving"

New energy vehicle sales hit a new high, and Internet of Vehicles security track is popular

The latest data from the Ministry of Finance shows that from January to July this year, my country's sales of new energy vehicles were 1.478 million, a year-on-year increase of 2 times, exceeding the full-year level of 2020 and 1 times the same period of 2019. Among them, in July, the sales of new energy vehicles were 271,000 units, a year-on-year increase of 1.6 times.

Industry insiders believe that with the growth in sales of new energy vehicles, the further development of intelligent connected vehicles, and the further strengthening of the country's requirements for their security assurance capabilities and the construction of a security trust system, the Internet of Vehicles security track will usher in a new round of rapid growth and become a hot spot pursued by the cybersecurity market.

According to CCID data, the scale of China's Internet of Vehicles market will reach 115 billion yuan by 2021. The Ministry of Industry and Information Technology said that it will focus on formulating and issuing relevant technical specifications for intelligent connected vehicles with autonomous driving functions.

As a leader in cybersecurity, 360 has always been at the forefront of technological research and development: in 2018, it launched the Automotive Safety Brain and participated in the co-construction of the National New Energy Vehicle Technology Innovation Center; in 2020, it reached vehicle networking-related cooperation with China Automotive Research Institute; in 2021, it led the development of the international standard X.1376 (Connected Car Security Abnormal Behavior Detection Mechanism), which was approved by the ITU-T, a standards organization under the United Nations (the first international automotive network security standard led by China), and reached vehicle networking-related cooperation with Datang Gaohong.

So far, 360 can provide a series of services from consulting, security to design to automakers, and finally form a complete set of Internet of Vehicles security solutions to help automakers monitor, analyze and respond to cyber attacks against smart connected cars. In the future, 360 will also work with automakers to create an industry benchmark for Internet of Vehicles security solutions.

As a winner of Toutiao's Qingyun Plan and Baijiahao's Bai+ Plan, the 2019 Baidu Digital Author of the Year, the Baijiahao's Most Popular Author in the Technology Field, the 2019 Sogou Technology and Culture Author, and the 2021 Baijiahao Quarterly Influential Creator, he has won many awards, including the 2013 Sohu Best Industry Media Person, the 2015 China New Media Entrepreneurship Competition Beijing Third Place, the 2015 Guangmang Experience Award, the 2015 China New Media Entrepreneurship Competition Finals Third Place, and the 2018 Baidu Dynamic Annual Powerful Celebrity.