Real-world trials in Catalonia showcase new cybersecurity tools for autonomous and connected vehicles

30/05/2025
    • Eurecat has led a European consortium comprising companies, technology centres, universities and public administrations from eight countries.
    • This R&D project delivers an end-to-end solution for OEMs, traffic operators, fleet managers and drivers to detect, respond to and mitigate cyber-attacks.
    • Validations took place on the urban section of Applus+ IDIADA’s ADAS/CAV test track in Baix Penedès, Catalonia, Spain, accurately replicating real metropolitan conditions.
    • The solution can identify vulnerable vehicles, cut the risk of security breaches and allow the vehicles themselves to protect and self-recover, guaranteeing trust and secure data exchange.

    Catalonia has hosted the pilot trials of the European Selfy project, coordinated by the Eurecat technology centre, demonstrating the effectiveness of new self-assessment and self-protection tools designed to boost the resilience and cybersecurity of autonomous and connected vehicles in smart cities.

    The demonstrations, also repeated in Vienna, Austria, identified more than 95% of vulnerable vehicles and over 90% of the security breaches.

    The partnership between companies, technology centres, universities and public administrations “allowed us to provide an innovative solution to tackle the challenges of the autonomous and connected mobility, boosting vehicle-network cybersecurity and strengthening the reliability of their operating environments,” explains Juan Caubet, Director of Eurecat’s IT&OT Security Unit.

    After three years of applied research and development, “SELFY offers automotive manufacturers, traffic managers, fleet operators and drivers a comprehensive solution to detect, respond to and mitigate cyberattacks, while fully preserving the privacy and integrity of autonomous mobility systems,” states Fanny Breuil, project coordinator and European Programme manager at Eurecat.

    With this solution, “it is possible to identify vulnerable vehicles, reduce the risk of security breaches, and enable the vehicles themselves to protect and self-recover, ensuring trust and secure data exchange,” adds SELFY’s technical coordinator, Víctor Jiménez, researcher in the IT&OT Security Unit at Eurecat.

    The first validation took place in the urban area of the ADAS/CAV test track at Applus+ IDIADA, in Catalonia, Spain, with a layout that replicates intersections, roundabouts, pedestrian crossings and driving lanes to faithfully reproduce real metropolitan traffic conditions.

    The tests recreated scenarios such as detecting a vulnerable road user while a hacked vehicle was transmitting misleading information, identifying sensor failures through infrastructure data fusion, filtering unreliable cooperative messages, and safely aborting an overtaking manoeuvre during an active cyberattack. An anonymisation algorithm was also verified, protecting sensitive data in real time, such as pedestrian faces and vehicle licence plates.

    “At IDIADA we recreated manoeuvres close to everyday traffic using dummies, real vehicles and targeted attacks. The results confirm that SELFY tools improve perception and response to security incidents without compromising privacy,” states Manel Rodríguez, Expert Engineer in cybersecurity in Applus+ IDIADA.

    In parallel, in Vienna, Austria, a demonstration in the city centre was held under live-traffic conditions with camera sensors and roadside units installed across the city. After mounting a high-resolution camera and a roadside unit on the infrastructure, the SELFY system monitored the coherence between images and CAM messages and accurately detected artificially induced mismatches, validating the infrastructure's capability to identify misaligned or tampered sensors.

    “The urban pilot confirms that the same tools that work in closed tracks are equally effective in live traffic, a key step for their adoption at a European scale,” states Gernot Lenz, Coordinator Traffic Management Systems at the City of Vienna.

    Intelligent systems for autonomous and connected driving

    The SELFY project has developed three macro-solutions focusing on situational awareness and collaborative perception, a cooperative resilience and recovery system, and a trust and data management system.

    The situational awareness and collaborative perception system fuses vehicle perception with infrastructure information to build a unified view of the environment. Its tools continuously analyse the coherence of sensors and cooperative messages to detect discrepancies and assess the reliability of each source before relying on it for driving decisions.

    Meanwhile, the tools for cooperative resilience and recovery are designed to protect Cooperative, Connected and Automated Mobility (CCAM) environments against cyberattacks and security breaches. Managed by a Vehicle Security Operations Centre (VSOC), the system enhances resilience, robustness and system trust levels, and provides a secure degraded mode for vehicles when necessary.

    The tools addressing trust and secure data management ensure information protection and privacy. They incorporate algorithms to detect malicious behaviour in both vehicles and roadside units, apply AI-based anonymisation techniques, and use software update mechanisms with post-quantum cryptography to ensure the integrity and traceability of each new version.

     

    The SELFY project has been funded with €6 million under the Horizon Europe programme. The consortium, led by the technology centre Eurecat, includes partners from 8 countries, including Spain (Eurecat, Tecnalia, AEVAC, Ficosa and Applus+ Idiada); France with CEA and Canon Research Centre; Germany with Technische Hochschule Ingolstadt and FEV.io; Austria with  Virtual Vehicle Research and City of Viena; the Netherlands with Eindoven University of Technology; Japan with Okayama University; Australia with RMIT University, and Turkey with FEV.

    Applus+ uses first-party and third-party cookies for analytical purposes and to show you personalized advertising based on a profile drawn up based on your browsing habits (eg. visited websites). You can accept all cookies by pressing the "Accept" button or configure or reject their use.. Consult our Cookies Policy for more information.

    Cookie settings panel