UK government offers £2m fund for autonomous car security

A woman reading a book in the driver's seat while the car drives itself
(Image credit: Shutterstock)

The UK government has launched a 2 million feasibility fund to encourage businesses to develop methods for testing the cyber security resilience of autonomous cars and their supporting infrastructure.

The ultimate goal is to be able to use the research to define a universal testing facility used to determine whether autonomous cars have enough hacking resilience to be allowed on British roads.

The fund is run through a partnership between The Centre for Connected and Autonomous Vehicles (CCAV), Zenzic (formally Meridian Mobility) and Innovate UK, part of UK Research and Innovation.

The 2 million will be divvied up between a maximum of five research projects, each eligible for a maximum grant of 400,000 and must cost between 50,000 and 800,000 to complete.

The scope of the project is wide; in order to be eligible for the grant, businesses must be able to identify methods to create and test vehicles' hardware, software and roadside infrastructure.

In addition, applicants should provide their thoughts on how to future-proof the testing procedures and design government-backed certification processes to ensure the facility scales alongside the advancing development of connected and autonomous cars (CAVs).

Eligibility will also hinge on a business' willingness and ability to explore commercial opportunities and provide test facility input specifications, which could be for physical or virtual facilities - or a combination of both.

The proposal must also stick to one of the five themes as set out by the CCAV which are:

  • Monitoring the cyber health of CAVs and supporting infrastructure
  • How to combat the threats to CAVs, including identifying testing procedures and mitigation techniques
  • Combatting the threats to connected vehicle networks, such as 5G which will keep cars, roadside infrastructure and other IoT sensors connected
  • Determine suitable scalable techniques that could be deployed as cyber threat countermeasures and what processes could be undertaken as risk mitigation
  • Other areas of cyber security

This isn't the first time the British government has investigated the cyber security of CAVs. Back in December, the British Standards Institute (BSI), in conjunction with the National Cyber Security Centre (NCSC), released a Public Available Specification which outlined the requirements for CAVs security standards.

The longevity of security was a common theme among these principles which stated security systems and all software must be regularly updated and secured over the course over its entire lifetime.

The PAS also said the storage and transmission of data must be controlled and secure, and every system should be resilient to cyber attacks.

Connor Jones
News and Analysis Editor

Connor Jones has been at the forefront of global cyber security news coverage for the past few years, breaking developments on major stories such as LockBit’s ransomware attack on Royal Mail International, and many others. He has also made sporadic appearances on the ITPro Podcast discussing topics from home desk setups all the way to hacking systems using prosthetic limbs. He has a master’s degree in Magazine Journalism from the University of Sheffield, and has previously written for the likes of Red Bull Esports and UNILAD tech during his career that started in 2015.