New MSP opportunity: Tapping into the growing field of transportation cybersecurity

The transportation vertical is rapidly growing, yet it is often overlooked by managed service providers (MSPs). However, hackers have taken notice. From 2017 to 2022, transportation vertical experienced a 400 percent increase in cyberattacks, and the pace shows no sign of slowing.

“The transportation industry is undergoing a massive change due to the rise of autonomous vehicles, IoT-based smart transportation, and fleet management systems that use artificial intelligence,” says Dinesh Besiahgari, an engineer at Amazon Web Services (AWS). Besiahgari also notes that as more transportation companies digitize their operations, the risk of cyberattacks is increasing rapidly. “This in turn presents a great opportunity for MSPs to move in and provide specific cybersecurity services that are suitable for this environment.”

Here is a Q&A with Besiahgari about the increasing opportunities for MSPs in transportation.

Why should MSPs pay attention to transportation cybersecurity?

The transition to connected and autonomous transportation systems presents a great opportunity but also poses significant risks. Cybercriminals target IoT devices, V2I communication channels, and even cloud-based transportation management systems.

For instance, in 2015, security researchers remotely controlled a Jeep Cherokee through its internet-enabled infotainment system. This event revealed weaknesses in automotive cybersecurity and made manufacturers improve the network security of their vehicles.

Similarly, ransomware attacks on transportation systems have increased. In 2020, the New York Metropolitan Transportation Authority (MTA) was targeted by a cyberattack originating from foreign entities. This highlighted the vulnerability of smart transit infrastructure. For MSPs, it signals a growing demand for cybersecurity expertise in areas such as connected vehicle security, fleet management, and transportation networks.

How can an MSP break into the transportation cybersecurity market?

MSPs planning to enter this vertical should focus on these key areas:

• Securing IoT and smart transportation devices: Autonomous trucks, bright traffic lights, and connected vehicle sensors are becoming the norm; therefore, IoT devices must be secured. MSPs should provide IoT security solutions that include:
  • Authenticating and encrypting devices to prevent unauthorized use.
  • Segmentation of the network to make sure critical transportation systems are not affected by external threats.
  • IoT endpoint threat monitoring to discover vulnerabilities before they are exploited.
• Vehicle-to-Everything (V2X) security: New car technologies include communication with infrastructure (V2I), pedestrians (V2P), and other vehicles (V2V). A compromised V2X network can cause traffic jams or even accidents. To avoid such a case, MSPs can provide Anomaly detection and Cybersecurity monitoring services for V2X networks.
• Cybersecurity for fleet management platforms: Fleet operators handle vehicle tracking, predictive maintenance, and automatic dispatching through cloud-based platforms. MSPs can secure these systems through:
  • Applying multi-factor authentication (MFA) and role-based access control (RBAC) techniques to enhance security.
  • Offering endpoint detection and response (EDR) for fleet management software to detect and respond to threats.
  • Providing protection against ransomware to avoid being extorted.

What skills and technologies do MSPs need to succeed in transportation cybersecurity?

To be successful in this area, MSPs must have:

• Cloud security and edge computing: Most transportation systems are cloud-based. MSPs must know how to secure transportation data per the best practices identified for AWS, Azure, and Google Cloud.
• IoT security frameworks: It is crucial to know NIST’s Cybersecurity Framework for IoT, the device authentication protocols, and firmware security.
• AI-driven threat detection: Since transportation systems are programmable, they produce a large amount of data on which MSPs should use machine learning for cybersecurity to detect real-time anomalies.
• Compliance and regulations: Understanding NHTSA cybersecurity guidelines, ISO 21434 (New Automotive Cybersecurity Standard), and GDPR-like rules for transportation data will give you a competitive advantage.

Is the transportation market competitive, and is there room for more players?

Yes, but there’s still room for niche MSPs specializing in transportation cybersecurity. Even though big brands provide cybersecurity solutions for enterprises, mid-size transportation companies cannot access specialized security services easily. This is where MSPs can provide affordable, managed security services specifically for fleet operators, autonomous vehicle startups, and smart city projects.

Act now

The transportation industry is slowly integrating connected and autonomous vehicles, but cybersecurity is still an issue. For MSPs, this is a door to growth. MSPs can gain prominence in the transportation cybersecurity market by developing IoT security skills, protecting V2X networks, and providing cloud-based threat management.

If MSPs want to make their businesses future-proof, they should consider expanding to the transportation cybersecurity industry.