A blog by Oleg Shilovitsky
Information & Comments about Engineering and Manufacturing Software

Will PLM and ALM prevent a car from being hacked?

Will PLM and ALM prevent a car from being hacked?
Oleg
Oleg
23 July, 2015 | 4 min for reading

wired-jeep-hack-plm-alm-integration

Integration of hardware and software is a topic in mind of many manufacturing companies these days. PLM was traditionally focused on mechanical and lately on electronic topics cannot ignore more software. Software developers are using a different set of tools for configuration management. For long time ALM (Application Lifecycle Management) tools took a separate stand from PLM tools. All these things in the past. Software vendors and manufacturing companies cannot ignore complexity of modern product literally powered by software in every part. I’ve been blogging about it long time ago – PLM and ALM: How to blend disparate systems and lately – How to combine engineering and software BOMs.

In one of my last posts – The importance of software BOM for hardware security, I pointed out how important to get an access to right information about software and electronic running in your products. For many manufacturing companies the information about mechanical, electronic and software components is siloed in different data management systems.The importance of new tools capable to manage multidisciplinary product information is raising. Software BOM security is just one example of the trend. The demand to provide systems able to handle all aspect of product BOM is increasing.

The article in WIRED magazine few days ago brings an interesting perspective on the importance of software security in automotive products. Navigate to the following article – Hackers remotely killed a Jeep on the highway – with me in it. The story is fascinating and gives a lot of “food to think about”. Here is my favorite passage:

All of this is possible only because Chrysler, like practically all carmakers, is doing its best to turn the modern automobile into a smartphone. Uconnect, an Internet-connected computer feature in hundreds of thousands of Fiat Chrysler cars, SUVs, and trucks, controls the vehicle’s entertainment and navigation, enables phone calls, and even offers a Wi-Fi hot spot. And thanks to one vulnerable element, which Miller and Valasek won’t identify until their Black Hat talk, Uconnect’s cellular connection also lets anyone who knows the car’s IP address gain access from anywhere in the country. “From an attacker’s perspective, it’s a super nice vulnerability,” Miller says.

From that entry point, Miller and Valasek’s attack pivots to an adjacent chip in the car’s head unit—the hardware for its entertainment system—silently rewriting the chip’s firmware to plant their code. That rewritten firmware is capable of sending commands through the car’s internal computer network, known as a CAN bus, to its physical components like the engine and wheels. Miller and Valasek say the attack on the entertainment system seems to work on any Chrysler vehicle with Uconnect from late 2013, all of 2014, and early 2015. They’ve only tested their full set of physical hacks, including ones targeting transmission and braking systems, on a Jeep Cherokee, though they believe that most of their attacks could be tweaked to work on any Chrysler vehicle with the vulnerable Uconnect head unit.

While story is still under development, it is already raised many questions. Some of them led to discussion about standards for cars’ defense against hackers. I’m expecting an increased demand for software capable to manage traceability and tests of mechanical, electronic and software systems together to insure car is not vulnerable to potential hacks.

Manufacturing business technology article echoed the same topic –Software Integration With Hardware Crucial For Manufacturing. It confirms that hardware – software integration is complex and very few companies are doing it in a right way. It gives interesting recommendations how to improve that – common data model, integrated requirement and change management tools and a framework independent from software tools. A common data model is my favorite. Here is a quote:

A common data model. Unified ALM-PLM defines a common data model and change management processes for managing an entire system, both hardware and software data, without duplicating data management or business processes across those systems. The two primary integration points are, first, tying back the requirements to the software and hardware bill of materials and, second, linking defects back to change requests and change orders so PLM can reflect them.

While all recommendations make sense to me, I have a concern about their implementations in real life. How feasible to create a common data model using existing PLM and ALM software tools? A dream data and lifecycle management system should be flexible enough to handle all system definitions from mechanical, electronic and software as well as system behavior related to that.

What is my conclusion? The complexity of modern products is creating demand for new capabilities to support by PLM and ALM software. While integration is usually hardest part of PLM implementation, not all PLM system are flexible enough to maintain demanded “common data model” to handle all bill of materials and related information. Just my thoughts…

Best, Oleg

picture credit WIRED article

Recent Posts

Also on BeyondPLM

4 6
24 January, 2012

I want to talk about a social-networking topic again. I was reading Gartner Top Vertical Industry Prediction for 2012 and...

29 September, 2012

Even if PLM (as a buzzword, business strategy and software) has a relatively short history, we can talk about some...

20 March, 2009

 I’d like to start  a wide topic for discussion – BOM. Yes, Bill of Material. This may seem like an...

15 January, 2009

For many years, data management was considered as something that burdens the activity of designers and engineers focused on CAD...

1 September, 2013

The core fundamental part of every PDM/PLM application is database and related data model. The history of data modeling is...

29 January, 2023

It is 2023 and any manufacturing company in the world at a certain moment of its existence will ask a...

27 February, 2021

One of the most frequent debates in the BOM management discipline is around the so-called single-BOM vs multi-BOM approach. My...

8 September, 2014

  PLM implementation discussions are usually brings lots of controversy. Vendors, analysts, advisers, service companies, customers are all involved into...

7 January, 2019

If you’re looking for PLM jobs in Boston, you’re in luck. Many CAD / PLM companies are located in Massachusetts...

Blogroll

To the top