Product Security

Dealer-installed security hardware can cross the vehicle trust boundary without being governed like an OEM security component.

A PLM recovery problem becomes a product-assurance problem.

Detection matters only when the organisation can translate it into an owned product decision.

When regulatory evidence depends on sensors, ECUs, onboard monitoring and off-board data, integrity has to survive the complete chain.

Industrial logic can be malicious even when it was compiled and deployed by the organisation’s own trusted engineering process.

The Kia research showed how a public identifier and an over-privileged dealer workflow could become an internet-to-vehicle control path.