Another problem for would-be car thieves is the fact that there are significant differences among the electronic control units in cars. Even though an attack might work on one year and model of vehicle, it's unlikely to work on another. "If you're going to hack into one of them, you have to spend a lot of time, money and resources to get into one software version," said Brian Herron, vice president of Drew Technologies, an Ann Arbor, Michigan, company that builds tools for automotive computer systems. "It's not like hacking Windows, where you find a vulnerability and go after it."

So far, carmakers have been very receptive to the university researchers' work and appear to be taking the security issues they've raised very seriously, Savage and Kohno said.

The IDG News Service