Connected and Exposed: Cybersecurity Risks, Regulatory Gaps, and Public Perception in Internet-Connected Vehicles

TL;DR

This paper examines cybersecurity risks, regulatory gaps, and public perceptions related to internet-connected vehicles, combining analysis of standards with a user survey to inform safer and more transparent smart mobility solutions.

Contribution

It provides a comprehensive analysis of international regulations and user attitudes, highlighting gaps and informing future policy and design improvements for connected vehicles.

Findings

Regulatory standards vary widely in strength and technical detail.

Many users lack awareness of data privacy risks in connected vehicles.

Consumers have mixed trust levels and demand better information transparency.

Abstract

The rapid advancement of Internet-connected vehicle technologies has introduced a new era of smart mobility, while simultaneously raising significant cybersecurity and privacy concerns. This paper explores the evolving threat landscape associated with connected vehicles, focusing on risks such as unauthorized remote access and the potential leakage of personal data. To assess the current state of protection, we conducted a comprehensive analysis of 16 international standards and regulations, evaluating them from multiple perspectives including regulatory strength, technical specificity, treatment of supply chain risks, and approaches to personal data handling. In parallel, we carried out a user-focused survey designed to map consumer attitudes toward smart cars. The survey investigated which types of vehicles users trust and prefer, the reasons behind rejecting certain car types, their awareness of data-related risks, and whether they feel adequately informed about how their vehicles handle data. By combining regulatory analysis with user perception insights, this study aims to contribute to a more holistic understanding of the challenges and expectations surrounding connected vehicle ecosystems.