The Changing Scope of Automotive Cybersecurity SHIFTING GEARS About Honda The plant floor environment The world two years ago The world today Finding solutions and balance Six Operating Regions 150 Manufacturing Facilities ID: 771094
Download Presentation The PPT/PDF document "The Changing Scope of Automotive Cyberse..." is the property of its rightful owner. Permission is granted to download and print the materials on this web site for personal, non-commercial use only, and to display it on your personal computer provided you do not modify the materials and that you retain all copyright notices contained in the materials. By downloading content from our website, you accept the terms of this agreement.
The Changing Scope of Automotive Cybersecurity
SHIFTING GEARS About Honda The plant floor environment The world two years ago The world todayFinding solutions and balance
Six Operating Regions – 150 Manufacturing Facilities Europe/Middle East/Africa Operations South America Regional Operations North America Regional Operations China Operations Japan Regional Sales Operations Asia/Oceania Operations
Honda North American Operations HMIN HAM HSC HDM HPE Honda Aero HACI HTM HPPG PMC HMA HCM 13 Manufacturing Plants 5 Automobile Mfg. Plants 11 Auto Production Lines 18 Honda / Acura Products
Honda - not just an auto manufacturer EnginesTillersLawn mowers Robotic lawn mowersRiding mowersTrimmersBlowersSprayersMotorcycles Hedge trimmersSnow throwersGeneratorsPumps Outboard engines Inflatable boatsElectric 4-wheel scootersLocksRobots Honda Global is the largest manufacturer of internal combustion engines in the world!
HMA Quick Facts - 2018 Associates 4,500 Plant size 3.7 million square feet Site size 1,350 acres Capital investment $2.2 billion Models Odyssey, Pilot, Ridgeline, V-6 enginesProduction capacity 340,000 vehicles & engines annually2 & 3 shift operations
HMA Production 2001-2009 HMA Production Peak: 313,957 (2007) 2017 HMA Production 357,316! 2009 HMA Production 181,873!
Flexible Manufacturing Line 2 Pilot Line 1 Odyssey & Ridgeline Engine
HMA Quick Facts - 2018 HMA is a vertically integrated manufacturing plant. Operations performed on-site: Steel and aluminum blanking and stamping, welding, painting, plastic injection molding, aluminum casting, aluminum and ferrous machining, engine assembly, vehicle assembly, testing and quality assurance.
HMA Network – 2 years ago
Our Global Network
HMA Network – 2 years ago Key Point : In the past…. we believed that the probability of a virus spreading from the Office Network to the Factory Network was low…
HMA Network - Today Key Point : In the past…. we believed that the probability of a virus spreading from the Office Network to the Factory Network was low… but the risk is now high with emerging and complex malware.
Plant Floor Environment
Plant Floor Equipment - Plant Floor PCs - 273 (OS Used: Win NT, Win 98, Win 2000, Win XP, Win 7 and Win 10)- Thin Clients - 789 - Windows Embedded Devices - 636- HMIs (Human Machine Interface) - 547- Conveyor Systems - 300+- Robots - 900+- PLCs - 1800+- IoT (Internet of Things) – 4500+ Equipment ranges from new to 25 years oldRobot Brands: - Fanuc- Motoman - ABB - Yaskawa PLC Brands:- Allen Bradley- Omron- Mitsubishi- Siemens
2017-18 Cybersecurity Timeline Reaction / Mitigation Proposed common security standards Gap analysis / Root cause identification New Plan Execution New Business Plans
Roadmap Base Expectations Next Steps Advanced 2017 2018 2019 2020 Enhance Detection and Minimize Impact Compare- hensive Security Measures Establish Self-standing Security Activities Internal company/office network communication management Devices managed by IT department Devices managed by user department Establish security information collection Establish method for application of security patches Effective security measures through support of IT department Establish security training formation Establish support formation by IT Conduct user department training Provide planning support tools/self-checking list and support Security management activities by user departments Start PDCA activities Implement log management/device control software Establish PDCA activities Application of security patches and control risk for not applying patches Network connection restriction （ pre-registration ） Manufacturing offices ・ Major companies/offices All companies/offices Installation of AV software to all devicesInter-company/office network communication management
Growth Items Scope / Item Description What it looks like now Global / Standards Even distributed organizations need common standards when sharing assets Very simple expectations with freedom to execute Regional / Basics IT cross-functional processes updated, new roles established, new tools employedUpdated EUC processes, new analyst roles, new tools HMA / CommunicationIt was difficult to communicate to senior management in the middle of the crisis because we didn’t prepare them well In our quarterly meetings, we educate and inform about cybersecurity risk situation HMA / Management “Stop viruses and recovery quickly” is not a good plan and doesn’t provide focus to the staffWe established a very simple target that clarifies the overall effort…
Growth Items 4 HOUR RECOVERY TIME TARGET
QUESTIONS?