PROTECTING OUR ROBOTIC CHAUFFEURS: CYBER SECURITY POLICY RECOMMENDATIONS FOR SELF-DRIVING CARS

Abstract

This thesis presents the risks of cyber attacks on next-generation automobiles and proposes policy solutions for mitigating them. While recent research has shown that even today’s cars are vulnerable to hackers, scholars, the automotive industry, and the federal government have only recently begun to address the concern. We propose a threepronged policy suite that contains measures to prevent cyber crime, enforce the adoption of safe systems, and respond effectively to crises. We conducted a series of interviews with industry leaders, law and policy experts, software engineers, and scholars, to accurately characterize the policy challenges at this intersection of computing, engineering, and policy. We first reframe recent advances in the auto industry to guide policymakers’ understanding of the field. Then, we present a model for a cyber attack on a car to facilitate the policy discussion. Next, we argue for the federal government to take a leadership role in vehicle cyber security by presenting arguments for its authority as well as the tools it has at the ready. Finally, we present the unique policy challenges in automotive computing and suggest measures to overcome them. This work should support cyber security policy work from other institutions and help policymakers come to informed decisions as they navigate this growing area.