Are Autonomous Vehicles a National Security Risk?

With innovation comes risk that must be mitigated

Christopher M. Gage
The Political Prism
4 min readMay 15, 2024

--

Self driving car in New York. Is this a national security threat?
Image generated via Open AI Dall-E

Back in 2004 I was attending a seminar at Oxford University on the new technology of autonomous vehicles. At the time I was a young graduate working in defense, and I was thinking about the implications for the future. Fast forward 20 years and the advancement of autonomous vehicles, or AVs, has marked a major breakthrough in the transport technology sector. Powered by rigorous algorithms and equipped with a multitude of sensors, AVs offer the promise of revolutionizing commuting, reducing accidents, and optimizing the flow of traffic.

Subscribe to get my stories directly by email.

With the advancement of these intelligent machines, however, comes the need to appreciate their multilayered threats. Particularly those that AVs could unleash on national security.

The very attributes that make autonomous vehicles efficient — connectivity, autonomy, and dependence on data — also make them potential targets for malicious activities.

In this thought piece, we delve deeper to understand why it is important for national policymakers, security experts, and technology developers to look into these risks as part of the larger implementation of AV technology.

Defining and understanding the national security risks of autonomous vehicles

An autonomous vehicle is capable of operating at any level without the need for a human operator. The core of these systems is a mixture of artificial intelligence, or AI, machine-learning algorithms, and large sensor arrays — including LiDAR, GPS, and cameras — that enable the vehicle to perceive its environment, make decisions, and navigate safely.

Current Use Cases

Adoption of AVs are on the rise worldwide. In the United States, companies like Tesla and Waymo have been leading the charge by road-testing fully autonomous cars.

In China, firms like Baidu have launched ambitious AV efforts, complemented by policies encouraging rapid adoption of new technology. These developments signal a shift to a much more automated transport system, where not only are there distinct changes in how vehicles are operated, but there will also be major changes in urban planning, logistics, and personal mobility.

Possible National Security Risks of Autonomous Vehicles

Autonomous vehicles are quite complex and require real-time data to function in a coherent manner. Given the data requirements, they have the potential to become a cybersecurity nightmare.

A merging of internet connectivity and vehicle-to-vehicle communication introduces many attack vectors for cybercriminals. For instance, a successful hack will allow nefarious actors to assume control of important functions such as speed and navigation, therefore posing greater risks to passengers and public safety.

These risks can be extrapolated to wider traffic disruptions with a compromised fleet or even more catastrophic situations where vehicles are used as part of coordinated attacks.

Case Studies: Cyber Threats in Action

One hypothetical scenario could be the following: there is a breach in the software of a major AV manufacturer, allowing hackers to remote-access a fleet of vehicles.

Imagine the chaos of having all vehicles change their routes, or worse, all of them shutting down at the same time during peak traffic hours. This is of course a hypothetical scenario, but similar vulnerabilities have been exposed in real-life situations, such as the Jeep Cherokee hack in 2015, where researchers were able to remotely control a vehicle’s air conditioning, radio, and even disable the brakes.

AVs have these same vulnerabilities, but at a grander scale.

Comparative analysis: varying responses to AV national security threats

Different nations have adopted varied approaches to securing AV technologies.

  • United States: The U.S. has AVs running in highly controlled testing environments and safety protocols, but it still lacks comprehensive AV cybersecurity legislation.
  • European Union: The EU has been proactive in the GDPR regulation, which is having a major impact on data privacy and security in autonomous vehicles. It also mandates robust cybersecurity measures.
  • China: In China, the approach has been to integrate AV security into the larger national cybersecurity strategy, complemented by strict control over data and system security through legislation and state supervision.

Mitigation strategies of national security risks

To mitigate national security risks stringent regulatory frameworks are necessary. Such regulations must be related not only to vehicle safety but also to cybersecurity standards and data protection. An international take on the regulations would require that AV manufacturers have secure development practices for their software and periodic security audits. International cooperation can also play a role in setting global standards and sharing best practices.

Technological safeguards must include state-of-the-art cybersecurity measures, such as encryption, intrusion detection systems, and secure communication protocols. Security features must be incorporated into autonomous vehicle systems, designed with a ‘security by design’ approach. Updating and monitoring autonomous vehicle systems will also help to mitigate attacks and eliminate vulnerabilities.

This will require close cooperation between the government, AV companies, cybersecurity experts, and academia. Some of the critical things public-private partnerships can do include facilitating the sharing of threat intelligence, common response strategies, and the generation of defensive technologies.

What do you think?

With the advent of autonomous vehicles come advances in transportation technology, and a range of national security threats that need coverage. As we mature our thinking regarding the security threats, issues of privacy, potential misuse in warfare, and infrastructure vulnerabilities associated with AVs are a significant risk and need to be proactively managed.

As we have seen through case studies, the threats are significant, but not insurmountable. Effective mitigation will require stringent regulatory regimes, coupled with cutting-edge technological safeguards and tight collaboration between the public and private sectors.

Enjoying my articles?

1. Like and comment — I try to reply to everyone.

2. Follow Me

3. Subscribe to get my stories directly by email.

--

--

Christopher M. Gage
The Political Prism

Ex Deloitte Strategy & A.I Director l Fractional CxO & Advisor | Melbourne Australia | Politics, Defense, Economics I Strategy I A.I I Technology