As electric vehicle (EV) adoption accelerates in Singapore (per BloombergNEF, 32% of new car registrations were EV in the first half of 2024), Singapore faces critical cybersecurity challenges tied to its expanding EV infrastructure. Rebecca Law, country manager for Check Point Software Technologies in Singapore, highlights the risks associated with the burgeoning number of EV charging stations and related systems.
With the government's Green Plan 2030 aiming for cleaner energy models and 60,000 charging points, it’s essential to address the vulnerabilities of this digital transformation.
Law emphasises that the interconnected nature of EVs and charging infrastructure creates a complex ecosystem susceptible to cyberattacks. "The rise of EV infrastructure introduces new digital vulnerabilities that cybercriminals are eager to exploit," she warns. As urban infrastructure integrates further with digital services, robust cybersecurity measures become crucial for maintaining consumer trust and operational resilience.
Key cybersecurity concerns
- API Security Vulnerabilities: APIs handle everything from user authentication to transaction processing. With API attacks in the automotive sector surging by 380%, ensuring their security is vital. Law notes that poorly protected APIs can lead to data theft or service disruptions, making it imperative for Singapore to minimize these vulnerabilities.
- Man-in-the-Middle (MitM) Attacks: Charging stations face threats where hackers can intercept communications between vehicles and charging points, potentially manipulating sessions or stealing payment information.
- Ransomware Attacks: Ransomware has already disrupted several charging stations, causing significant operational and financial consequences. In 2022, ransomware attacks surged by 90%, indicating a growing threat to the EV sector [2].
- Vehicle-to-Grid (V2G) Vulnerabilities: This technology allows EVs to return power to the grid, introducing risks where a successful cyberattack could lead to unauthorized energy transfers or grid disruptions.
Strategies for mitigation
To counter these risks, Law suggests several strategies, including:
- API Protection and Encryption: Securing APIs with encryption and robust authentication mechanisms is essential.
- Zero Trust Architecture: This model ensures that every interaction within the network is authenticated, limiting lateral movement in case of a breach.
- Securing Payment Systems: Strong encryption of payment data and multi-factor authentication can prevent unauthorized access.
- Regular Software Updates: Implementing regular updates and over-the-air (OTA) systems to keep devices secure with the latest security patches.
- Collaboration with MSSPs: Partnering with Managed Security Service Providers can enhance cybersecurity capabilities.
In conclusion, while the shift to electric vehicles promises significant benefits, it is crucial for Singapore to prioritize cybersecurity in its EV infrastructure. By adopting comprehensive strategies and adhering to industry standards, the nation can secure its electric vehicle future, ensuring that the transition to greener transportation is both safe and sustainable.
