Physicists at the Georgia Institute of Technology and Multiscale Systems, Inc. have simulated what it would take for hackers to wreak widespread havoc in a city by randomly stranding cars. The researchers want to expand the current discussion on automotive cybersecurity, which mainly focuses on hacks that could crash one car or run over one pedestrian, to include potential mass mayhem.

They warn that even with increasingly tighter cyber defenses, the amount of data breached has soared in the past four years, but objects becoming hackable can convert the rising cyber threat into a potential physical menace.

Unlike most of the data breaches we hear about, hacked cars have physical consequences.

—Peter Yunker, who co-led the study and is an assistant professor in Georgia Tech’s School of Physics

With cars, one of the worrying things is that currently there is effectively one central computing system, and a lot runs through it. You don’t necessarily have separate systems to run your car and run your satellite radio. If you can get into one, you may be able to get into the other.

—Jesse Silverberg of Multiscale Systems, Inc., who co-led the study with Yunker

The research team analyzed the movements of cars on Manhattan streets with varying numbers of lanes, including how they get around stalled vehicles and found they could apply a physics approach to what they observed. (The researchers chose Manhattan for their simulations because a lot of data was available on that city’s traffic patterns.)

Whether traffic is halted or not can be explained by classic percolation theory used in many different fields of physics and mathematics.

—Peter Yunker

Percolation theory is often used in materials science to determine if a desirable quality like a specific rigidity will spread throughout a material to make the final product uniformly stable. In this case, stalled cars spread to make formerly flowing streets rigid and stuck.

The shut streets would be only those in which hacked cars have cut off all lanes or in which they have become hindrances that other cars can’t maneuver around and do not include streets where hacked cars still allow traffic flow.

In their simulations of hacking internet-connected cars, the researchers found that randomly stalling 20% of cars during rush hour would mean total traffic freeze. At 20%, the city has been broken up into small islands, where you may be able to inch around a few blocks, but no one would be able to move across town, said David Yanni, a graduate research assistant in Yunker’s lab.

Maps of Manhattan show the effect of hacking and stranding 20% of vehicles on the streets at varying times of day. The fainter the street, the slower the traffic. Streets completely faded out are gridlocked to a standstill, and very faint streets are no longer practically usable. The simulations are conservative as they do not factor in spillover traffic from blocked roads, delivery trucks, and normal traffic obstructions. Credit: Yunker lab

Not all cars on the road would have to be connected—just enough for hackers to stall 20% of all cars on the road. For example, if 40% of all cars on the road were connected, hacking half would suffice.

Hacking 10% of all cars at rush hour would debilitate traffic enough to prevent emergency vehicles from expediently cutting through traffic that is inching along citywide. The same thing would happen with a 20% hack during intermediate daytime traffic.

For the city to be safe, hacking damage would have to be below that. In other cities, things could be worse.

Manhattan has a nice grid, and that makes traffic more efficient. Looking at cities without large grids like Atlanta, Boston, or Los Angeles, and we think hackers could do worse harm because a grid makes you more robust with redundancies to get to the same places down many different routes.

—Peter Junker

The researchers left out factors that would likely worsen hacking damage, thus a real-world hack may require stalling even fewer cars to shut down Manhattan.

I want to emphasize that we only considered static situations—if roads are blocked or not blocked. In many cases, blocked roads spill over traffic into other roads, which we also did not include. If we were to factor in these other things, the number of cars you’d have to stall would likely drop down significantly.

—Peter Junker

The researchers also did not factor in ensuing public panic nor car occupants becoming pedestrians that would further block streets or cause accidents. Nor did they consider hacks that would target cars at locations that maximize trouble.

They also stress that they are not cybersecurity experts, nor are they saying anything about the likelihood of someone carrying out such a hack. They simply want to give security experts a calculable idea of the scale of a hack that would shut a city down.

The researchers do have some general ideas of how to reduce the potential damage.

Split up the digital network influencing the cars to make it impossible to access too many cars through one network. If you could also make sure that cars next to each other can’t be hacked at the same time that would decrease the risk of them blocking off traffic together.

—lead author Skanka Vivek, a postdoc in Yunker’s lab

Resources

• Skanda Vivek, David Yanni, Peter J. Yunker, Jesse L. Silverberg (2019) “Cyber-physical risks of hacked Internet-connected vehicles” arXiv:1903.00059

• Skanda Vivek, David Yanni, Peter J. Yunker, Jesse L. Silverberg (2018) “Collective behavior and emergent risks in a model of human- and autonomously-driven vehicles” arXiv:1708.03791v2 [physics.soc-ph]