A blog by Oleg Shilovitsky
Information & Comments about Engineering and Manufacturing Software

Will PLM and ALM prevent a car from being hacked?

Will PLM and ALM prevent a car from being hacked?
Oleg
Oleg
23 July, 2015 | 4 min for reading

wired-jeep-hack-plm-alm-integration

Integration of hardware and software is a topic in mind of many manufacturing companies these days. PLM was traditionally focused on mechanical and lately on electronic topics cannot ignore more software. Software developers are using a different set of tools for configuration management. For long time ALM (Application Lifecycle Management) tools took a separate stand from PLM tools. All these things in the past. Software vendors and manufacturing companies cannot ignore complexity of modern product literally powered by software in every part. I’ve been blogging about it long time ago – PLM and ALM: How to blend disparate systems and lately – How to combine engineering and software BOMs.

In one of my last posts – The importance of software BOM for hardware security, I pointed out how important to get an access to right information about software and electronic running in your products. For many manufacturing companies the information about mechanical, electronic and software components is siloed in different data management systems.The importance of new tools capable to manage multidisciplinary product information is raising. Software BOM security is just one example of the trend. The demand to provide systems able to handle all aspect of product BOM is increasing.

The article in WIRED magazine few days ago brings an interesting perspective on the importance of software security in automotive products. Navigate to the following article – Hackers remotely killed a Jeep on the highway – with me in it. The story is fascinating and gives a lot of “food to think about”. Here is my favorite passage:

All of this is possible only because Chrysler, like practically all carmakers, is doing its best to turn the modern automobile into a smartphone. Uconnect, an Internet-connected computer feature in hundreds of thousands of Fiat Chrysler cars, SUVs, and trucks, controls the vehicle’s entertainment and navigation, enables phone calls, and even offers a Wi-Fi hot spot. And thanks to one vulnerable element, which Miller and Valasek won’t identify until their Black Hat talk, Uconnect’s cellular connection also lets anyone who knows the car’s IP address gain access from anywhere in the country. “From an attacker’s perspective, it’s a super nice vulnerability,” Miller says.

From that entry point, Miller and Valasek’s attack pivots to an adjacent chip in the car’s head unit—the hardware for its entertainment system—silently rewriting the chip’s firmware to plant their code. That rewritten firmware is capable of sending commands through the car’s internal computer network, known as a CAN bus, to its physical components like the engine and wheels. Miller and Valasek say the attack on the entertainment system seems to work on any Chrysler vehicle with Uconnect from late 2013, all of 2014, and early 2015. They’ve only tested their full set of physical hacks, including ones targeting transmission and braking systems, on a Jeep Cherokee, though they believe that most of their attacks could be tweaked to work on any Chrysler vehicle with the vulnerable Uconnect head unit.

While story is still under development, it is already raised many questions. Some of them led to discussion about standards for cars’ defense against hackers. I’m expecting an increased demand for software capable to manage traceability and tests of mechanical, electronic and software systems together to insure car is not vulnerable to potential hacks.

Manufacturing business technology article echoed the same topic –Software Integration With Hardware Crucial For Manufacturing. It confirms that hardware – software integration is complex and very few companies are doing it in a right way. It gives interesting recommendations how to improve that – common data model, integrated requirement and change management tools and a framework independent from software tools. A common data model is my favorite. Here is a quote:

A common data model. Unified ALM-PLM defines a common data model and change management processes for managing an entire system, both hardware and software data, without duplicating data management or business processes across those systems. The two primary integration points are, first, tying back the requirements to the software and hardware bill of materials and, second, linking defects back to change requests and change orders so PLM can reflect them.

While all recommendations make sense to me, I have a concern about their implementations in real life. How feasible to create a common data model using existing PLM and ALM software tools? A dream data and lifecycle management system should be flexible enough to handle all system definitions from mechanical, electronic and software as well as system behavior related to that.

What is my conclusion? The complexity of modern products is creating demand for new capabilities to support by PLM and ALM software. While integration is usually hardest part of PLM implementation, not all PLM system are flexible enough to maintain demanded “common data model” to handle all bill of materials and related information. Just my thoughts…

Best, Oleg

picture credit WIRED article

Recent Posts

Also on BeyondPLM

4 6
31 March, 2011

Social Media and Networking are important. There are vendors in the business world that are paying attention to the importance...

6 December, 2012

Have you heard about OWA (Open World Assumption)? If you completed your Math 101 and Mathematical Logic time ago, refresh...

6 January, 2011

Mobile communication is evolving. Lots of new things happen. iPhone was a revolutionary device that introduced back-end camera and allowed...

29 July, 2014

We like to compare stuff. Gadgets, cars, hotels, software. We can compare iPhone to Samsung, Canon to Nikon, Honda to...

29 November, 2018

Earlier this month in Chicago, I attended PI PLMx conference. One of my favorite sessions vendors’ panel about standards. Check...

4 May, 2010

Yesterday, I had chance to read the new paper by Jim Brown: Issue in Focus: The Integrated ERP-PLM Strategy. There are...

20 November, 2012

User experience. You can hear this combination of words quite often these days. PLM space is not an exclusion from...

17 August, 2010

I want to continue the discussion started last week in my post ‘PDM vs. PLM: A Data Perspective‘. Thank you...

14 October, 2023

It is almost 40 years after PLM was introduced by American Motors Corporation (AMC). Digital Engineering article PLM Stays Relevant...

Blogroll

To the top