The need for security in transportation

### Overview In this presentation, Kurt Baumgartner, a principal security researcher with Kaspersky Lab's Global Research and Analysis Team (GReAT), discusses the growing cybersecurity risks within the transportation sector driven by the Internet of Things (IoT). Baumgartner explains that the rapid adoption of connected technologies across global logistics hubs, ports, and passenger vehicles is dramatically increasing attack surfaces while creating critical dependencies on potentially insecure systems.

### Key Topics - **Maritime and Port Logistics:** Baumgartner highlights ports such as a facility in Latvia that handles 250,000 tons of hazardous chemical substances annually with a staff of only 10 people operating around the clock. He points out that this setup requires heavy reliance on management consoles, Wi-Fi, and online systems. Larger ports in Europe move around 200 million tons of cargo per year, while even larger facilities in India and Singapore similarly depend on small teams and interconnected digital infrastructure. - **Automotive Surface and Connectivity:** With 250 million cars in the United States and growing vehicle counts in China, modern vehicles have become complex processing hubs. Modern cars feature around 60 different computer systems or CAN buses. The integration of cellular connections, Wi-Fi, telematics, satellite links, keyless entry, tire pressure monitoring, and ignition control exposes hundreds of millions of lines of code that were often developed without security as a primary design goal. - **Public Hub and Consumer IoT Insecurities:** The speaker addresses vulnerabilities found across private consumer devices (refrigerators, coffee makers, TVs, baby monitors) and public infrastructure like CCTV and surveillance networks used in airports and shipping ports. Public implementations often suffer from plain text transmissions, disabled or missing WPA2, default administrative credentials, and unauthenticated debug ports.

### Technical Details - **Automotive Exploits Timeline:** Baumgartner cites 2010 research from the University of Washington and University of California, San Diego, where researchers injected messages into a vehicle's CAN bus to achieve complete local control. He contrasts this with the 2015 research by Charlie Miller and Chris Valasek, who demonstrated remote car hacking that led to the recall of 1.4 million vehicles. This attack exploited the Sprint cellular network, which allowed cross-device communication between endpoints, permitting unauthorized access to exposed vehicle ports. - **Satellite Abuse by Threat Actors:** Kaspersky's research identified APT groups actively exploiting unencrypted or vulnerable legacy satellite communications. Specifically, Baumgartner references the Turla APT and Poseidon APT groups abusing legacy satellite links that cannot be easily updated or patched.

### Takeaways Baumgartner emphasizes that the transportation industry faces systemic cyber risks, noting that surveys of transportation organizations show nearly all have experienced internal or external security incidents. Vendor responses claiming that security issues will be addressed in the next hardware model fail to solve existing risks, particularly for legacy and critical infrastructure. Baumgartner calls for earlier security audits, penetration testing, and broader cross-industry collaboration before vulnerable systems are deployed.