Re: Need to apply basic secure design principles.
But there is no reason to need to have the infotainment system on the CAN bus in the first place. It only needs to receive signals (such as speed, climate control etc) and then adjust volume or display the relevant screen.
Therefore it would just require an interpreter on the CAN bus which receives signals on the CAN bus and sends them to the infotainment system. All data is sent broadcast style with no need for an ack or allow of any data to flow back (as long as L1 is sound then everything above that is not possible in the other direction).
Any wireless signals would then be handled directly by the infotainment unit (GPS, DAB, 3G etc) and not bother the CAN bus.
However my prediction for a future attack vector - Government/Insurance mandated speed limiting based on GPS location. GPS spoofing hack slows every vehicle on the [fast moving motorway] to the lowest speed available in the system.
Biting the hand that feeds IT
