The development started after the publication of regulatory documents on cybersecurity in the automotive industry. They were prepared by the UN Commission WP.29, which includes 63 countries. Some of the documents entered into force in 2022. By 2024, according to the new requirements, a certification system must be introduced that obliges manufacturers to comply with cybersecurity requirements and integrate security solutions into cars at the assembly line stage.

The regulatory framework stipulates that new systems for cars should be designed and developed according to the Secure-by-Design principle. This means that security must be built into solutions at the design and development stage. Kaspersky provides this principle with its own Cyber Immune operating system – KasperskyOS.

Kaspersky develops the Kaspersky Automotive Secure Gateway in accordance with the requirements not only for cybersecurity, but also with the international standard for functional security (Safety) ISO 26262.

“The safety issues of connected cars are so important today that they are being discussed at the level of international organisations. This is an example of how the industry itself comes to cybersecurity experts for solutions and is ready to certify them and make them mandatory. The regulatory requirements of the UN Commission WP.29 gave a serious impetus to the development of the information security market in the automotive industry. We started developing Kaspersky Automotive Secure Gateway by analysing the requirements of the new regulation and creating a threat model for connected vehicles. We expect that many manufacturers will be interested in our development,” comments Andrey Suvorov, Head of KasperskyOS Business Unit at Kaspersky.