Kaspersky is developing the Kaspersky Automotive Secure Gateway (KASG) based on the KasperskyOS operating system – a platform for developing solutions that are inherently secure. The gateway can be installed on the telematics or central unit of a car with ARM architecture. Such a solution will protect the car from hacking, provide a safe update of both the gateway itself and the car’s electronic components over the air, allow the collection of logs from the car’s internal network and send them to the security monitoring centre.

The development started after the publication of regulatory documents on cyber security in the automotive industry. They were prepared by the UN Commission WP.29, which includes 63 countries. Some of the documents were enforced in 2022. By 2024, according to the new requirements, a certification system must be introduced, obliging manufacturers to comply with cyber security requirements and integrating security solutions into cars at the assembly line stage.

The regulatory framework stipulates that new systems for cars should be designed and developed according to the Secure-by-Design principle. This means that security must be built into solutions at the design and development stage. Kaspersky provides this principle with its own cyber immune operating system – KasperskyOS.

Kaspersky developed the Kaspersky Automotive Secure Gateway in accordance with the requirements not only for cyber security, but also with the international standard for functional security (safety) ISO 26262.

“The safety issues of connected cars are so important today that they are being discussed at the level of international organisations. This is an example of how the industry itself comes to cyber security experts for solutions and is ready to certify them and make them mandatory. The regulatory requirements of the UN Commission WP.29 gave serious impetus to the development of the information security market in the automotive industry. We started developing Kaspersky Automotive Secure Gateway by analysing the requirements of the new regulation and creating a threat model for connected vehicles. We expect that many manufacturers will be interested in our development,” comments Andrey Suvorov, head of KasperskyOS business unit at Kaspersky.