자동차 사이버 보안 및 데이터 보안 시장(2026년)

Cybersecurity & Data Security Research: Intelligent Connected Vehicles Enter the Era of "Systematic Offense-Defense and AI-Defined Security".

Centering on the panorama of intelligent connected vehicle cybersecurity and data security in 2026, this report analyzes core topics including vehicle full-domain attack scenarios and more attack surfaces brought by AI, vulnerability status analysis, full-link protection system, data classification & grading, and cross-border compliance. Furthermore, it systematically presents cutting-edge industry progress in compliance certification, technology implementation, and supply chain security governance through security protection practices of 41 enterprises of diverse types, covering 7 data security companies (Agile Technology, Eagle Cloud, etc.), 7 representative OEMs (Seres, NIO, BYD, etc.), 8 automotive security hardware suppliers (UniSentry Intelligent Technology, ThinkTech, etc.), 7 automotive security software suppliers (Software Security Technology, Anban Tech, etc.), and 12 Internet of Vehicles (IoV) security service providers (Vecentek, Callisto Technology, GoGoByte, etc.). Meanwhile, the report reveals new risks introduced by AI deployment on vehicles such as supply chain poisoning and prompt hijacking, summarizes security solutions for intelligent connected vehicles, and forecasts industrial development trends.

Highlights

Compliance upgrade driven by policies: From passing inspections to systematic operation

Frequent supply chain breaches: Security governance must cover full domains and full lifecycle

AI as a double-edged sword: Attack surfaces extend to the intent layer; defense requires "countering AI with AI"

Cybersecurity evolves from passive response to active threat hunting

Data security shifts from privacy compliance to full-link governance; cross-border data management becomes a mandatory task

Security needs to be transformed from a cost center into a core competitive edge

In 2026, the intelligent connected vehicle industry stands at a critical turning point. On one hand, the full enforcement of national mandatory standards represented by GB 44495/44496 marks the official transition of the industry from compliance exploration to in-depth compliance management. On the other hand, the deployment of large AI models on vehicles and normalized cross-border data flows are rapidly expanding vehicle attack surfaces, posing unprecedented security challenges. For automakers, simple passive compliance or single-point defense can no longer address complex cyber threats; transforming into systematic offense-defense operations featuring full-lifecycle, full-supply-chain, and AI-driven active defense has become inevitable.

I. Compliance Upgrade Driven by Policies: From "Passing Inspections" to Systematic Operation

In 2026, China's regulatory framework for automotive cybersecurity and data security has formed a closed loop. Based on mandatory standards including GB 44495-2024 Technical Requirements for Vehicle Cybersecurity and GB 44496-2024 General Technical Requirements for Software Update of Vehicles, plus the implementation of the Guidelines for Outbound Transfer Security of Automotive Data (2026), compliance requirements for automakers have been upgraded from previously recommended reference standards to enforceable bottom-line rules. Enterprises need to comprehensively reshape their security strategies, organizational structures, and operational workflows.

Regulation is also enforced through heavy fines. In May 2026, European data protection authorities imposed a fine of 100 million euros (approximately 801 million RMB) on the operator of ride-hailing app Yango for transferring users' personal data to Russia without implementing protective measures required by EU laws. In the same month, General Motors was fined nearly 90 million RMB for collecting and selling driving data without user consent, marking the largest penalty since the enactment of the California Consumer Privacy Act. The logic behind these penalties is clear: data is not the asset taken or sold arbitrarily by automakers.

Faced with stringent regulatory pressure, leading automakers are accelerating the shift from passive compliance to active risk prevention and control. Seres serves as a typical example. It has built an in-depth defense system covering "cloud-pipe-device-chip", and obtained China's first batch of Automotive Data Security Management System Certification and Level 3 National Data Security Maturity Model (DSMM) Certification, proving its industry-leading systematic security capabilities. Meanwhile, with its self-developed "iDDog" intelligent security platform, BYD follows a three-step logic of "diverting, purifying, and activating data" to break down data silos and build high-quality data infrastructure. It has deployed three major AI agents to boost efficiency in security operations, internalizing compliance requirements into robust operational capabilities. The "5 Compliance Inspections" initiated by the China Association of Automobile Manufacturers (CAAM) continue to advance; 49 vehicle models from 13 enterprises in the third batch and 43 vehicle models from 9 enterprises in the fourth batch have passed inspections. Requirements such as anonymization of human facial data collected outside vehicles and in-vehicle processing of cockpit data are becoming standard configurations in the industry.

Facts have proven that compliance is merely a starting point. Transforming security capabilities into sustainable operational internal strengths constitutes the competitive edges for enterprises to navigate industrial cycles.

II. Frequent Supply Chain Breaches: Security Governance Must Cover Full Domains and Full Lifecycle

If one were to ask for the most painful lesson of the automotive industry in 2025, the answer would likely be: Attackers no longer attempt brute-force intrusions, but infiltrate through trusted partner channels. The supply chain of intelligent connected vehicles is extremely complex; a single vulnerability in any link may trigger catastrophic consequences analogous to a dike collapsing due to an ant's nest.

In March 2025, hacker "Rey" leaked about 700 internal Jaguar Land Rover documents on the dark web, including source code, development logs, and employee databases-this was merely a prelude. In August of the same year, hacker group "Scattered Lapsus$ Hunters" intruded the company's global production systems, forcing full suspension of UK manufacturing plants and mandatory leave for 33,000 employees. Also in August, a design subsidiary under Nissan suffered a ransomware attack by threat actor "Qilin", resulting in the theft of 4TB of core design data. Cloud storage service provider Snowflake was breached, causing collateral damage to 165 downstream enterprises including auto parts retailer Advance Auto Parts. By late 2025, global wiring harness giant Yazaki Group had 350GB of data stolen by ransomware threat actors, containing complete documentation for components supplied to BMW and Nissan. The case of Thai OEM TRU is even more typical: 1TB of data was stolen, ESXi servers were targeted for encryption, ERP and logistics systems suffered widespread offline outages, and partial production lines were forced to switch to manual scheduling.

Collectively, these incidents reveal three clear shifts in attack patterns:

Target physicalization: Threat actors have escalated from data theft to intellectual property exfiltration and direct production paralysis;

Supply chain-oriented attack paths: Over half of all incidents are executed indirectly through cloud service providers, IT subsidiaries, and third-party suppliers, rendering supply chains the weakest link;

Targeted ransomware: Malicious actors specifically target high-value data such as design blueprints.

These exposed vulnerabilities have driven upgrades to industry countermeasures. Automakers are universally recognized as the primary responsible parties for supply chain security, transferring accountability to Tier 1 suppliers by signing Cybersecurity Interface Agreements (CIA). ISO/SAE 21434 certification has become a mandatory entry threshold for Tier 1 suppliers; without this "security letter of credit", enterprises cannot access core supply chains. For businesses targeting European markets, TISAX certification is an unavoidable requirement. Nevertheless, the overall landscape remains characterized by "leading OEMs take initiative while small and medium-sized suppliers lag behind". For small and medium Tier 2 and Tier 3 suppliers, most automakers only conduct documentary audits, with extremely low coverage of on-site verification and incomplete traceability chains.

Building a full-domain, full-lifecycle supply chain security system has been an industry consensus. Geely provides an exemplary benchmark. It constructed one of China's first national CNAS-accredited IoV cybersecurity laboratories, and conducts over 200 regular test items across 12 core testing dimensions including system security, communication security, and data security from an attacker's perspective, feeding research outcomes back into forward R&D workflows. In December 2025, Geely officially launched its Global Full-Domain Security Center and the Full-Domain Security 2.0 technical system. The 2.0 system expands its perspective from "whole-vehicle security" to an ecological view of "human-vehicle-road-cloud-satellite". While retaining four core security domains: life safety, health safety, property safety, and privacy safety, it iterates and upgrades nine major security systems to build a full-scenario, full-lifecycle protection network.

Meanwhile, the granularity of security acceptance evaluations for supply chain manufacturers is continuously refined, with several rigorous requirements implemented: Third-party components must not contain unaddressed high-risk vulnerabilities disclosed more than 6 months prior; high-risk vulnerabilities must be fixed and re-verified within 72 hours; OTA update packages must be signed with OEM proprietary keys, dual signatures by suppliers and OEMs are required in certain scenarios, and vehicle terminals must identify and intercept upgrade packages with missing, forged, or tampered signatures. For instance, Seres has streamlined its 300 Tier 1 suppliers down to 100, establishing deep embedded security collaboration with CATL and Bosch to narrow its security management radius to controllable scope. At the underlying hardware layer, for example, ThinkTech's Alioth TTA8 series MCUs integrate ASIL-D functional safety and EVITA FULL cybersecurity, filling domestic gaps in chassis domain master control chips and guaranteeing independent controllability and security of supply chains at the source.

The essence of supply chain security lies in extending the security boundary from "my vehicle" to "every line of code, every chip, and every supplier within my vehicle"-full domain and full lifecycle coverage are indispensable, with no links to be omitted.

III. AI as A Double-edged Sword: Attack Surfaces Extend to the Intent Layer, and Defense Requires "Countering AI with AI

The deployment of large models on vehicles brings not only smarter cockpits but also an entirely new attack dimension. AI-specific risks including supply chain poisoning, prompt hijacking, and excessive proxy are rapidly migrating to vehicle terminals. When vehicle large models connect tool chains for navigation, payment, charging, and vehicle control, attack chains originally limited to cloud chatbots can be intactly ported to vehicles. Particularly within MCP-connected ecosystems, high-risk attack vectors such as tool poisoning directly threaten IVI systems running Linux and Android.

Novel agents represented by OpenClaw excel at forming a closed loop from intent understanding to task completion thanks to their high-level system privileges. However, in vehicle environments, this translates to a persistent digital entity within the system that holds partial access rights to vehicle data and permissions to invoke vehicle control commands. Prompt injection can induce agents to execute unintended operations; a tampered third-party navigation plugin may act as a persistent Trojan horse leaking driving habits; benign hallucinations in Q&A scenarios can escalate to dangerous operations such as critical data deletion in proxy scenarios. What is even more thorny is the regulatory conflict: standards including ISO 26262, UN R155/R156, and GB 44495 mandate deterministic, predictable, testable, and traceable system behavior, while agents inherently feature non-determinism and emergent characteristics. The industry's solution is "empowerment rather than full delegation": deploy permission sandboxes and functional fences to restrict agents to infotainment and other low-risk domains; all vehicle control requests must be mandatorily arbitrated by a security middleware layer; high-risk operations must be confirmed via HMI, ensuring humans remain within the loop for all safety-critical decisions.

As attack surfaces evolve, defense mechanisms must advance in tandem. The industry's solution is straightforward: counter AI with AI.

Faced with the "spear" brought by AI, the industry must forge an even sharper "shield". For example, Anban Tech centers its new intelligent connected vehicle security paradigm on "AI large model-driven agent protection + vehicle communication protocol security + closed-loop supply chain security". It shifts security capabilities from traditional post-hoc patching to full-lifecycle proactive governance:

Leverage large models to parse full vehicle EE architecture documents, cross-model databases, and VSOC asset inventories via natural language, automatically identifying ECUs, sensors, communication interfaces, and other critical assets to map asset correlation frameworks. The LLM-powered intelligent TARA platform automatically generates security targets, security requirements, threat scenarios, and attack paths, enabling automated, visualized risk assessment.

During risk remediation, the platform combines impact severity, attack feasibility, and risk rating matrices to automatically generate remediation decisions and push work orders, forming an operational workflow of "AI detection - AI analysis - AI decision - AI closed-loop", drastically shortening vehicle security assessment cycles.

QAX AISOC is a representative example of this approach. It embeds 8 agents responsible for eight operational links: data collection, threat detection, intelligent judgment, intelligent investigation, intelligent response, incident eradication, optimization feedback, and report generation. Based on the OODA loop, it establishes an autonomous defense system transforming security operations from "human-initiated threat hunting" to "automated threat notification". Practical data demonstrates that a global luxury automaker utilizing AISOC has reduced the analysis and assessment time for a single alert to less than 9 seconds, with valid alert identification accuracy reaching 93.1%, a 2.7x improvement over traditional manual mode.

TARA, a traditional security analysis link, is also being rebuilt with AI. GoGoByte DefenseWeaver embeds the GoGoAI Agent, incorporating all new risk vectors such as models, training and inference data, prompt entry points, knowledge bases and tool invocation chains into the scope of TARA. Its judgment holds that risks stem not merely from code vulnerabilities, but also from misleading models, contaminated data and misused tools. This tool serves clients including FAW Bestune and Luxshare Precision, as well as national inspection institutions like CATARC, China Merchants Testing Vehicle Technology Research Institute and the CEPREI, boosting TARA efficiency by 80%. Callisto S3-TARA adopts a different approach: over ten agents work collaboratively to screen optimal solutions from 16 candidate Chains of Thought (CoT), supported by a data foundation built upon more than 100,000 causal chain datasets, over 3 million security scenario samples and over 1 million knowledge base Q&A pairs.

Automakers haven't been sitting idle, either. BYD's iDDog platform implements three AI agents targeting email phishing, terminal data leakage, and abnormal traffic, cutting security incident response time from 45 minutes to 5 minutes. Li Auto collaborated with Volcano Engine to develop an AI intelligent assistant capable of automatically creating work orders, scanning code, remediating vulnerabilities, and conducting re-verification upon receiving instructions in Feishu group chat, enabling one-stop closed-loop resolution with human authorization. AI native has transitioned from conceptual slogans to daily security operations.

IV. Cybersecurity Evolves from Passive Response to Active Threat Hunting

Within the cybersecurity domain, traditional passive defense idea can no longer keep pace with rapidly evolving attack vectors. 206 automotive security incidents and 238 newly discovered vulnerabilities were recorded in 2025 alone. Threat actors have escalated objectives from data theft to intellectual property exfiltration, and even direct paralysis of production and manufacturing operations. Automakers therefore must build combat-ready cybersecurity systems with active threat hunting capabilities covering threat detection, analysis, response and remediation.

The solution proposed by defenders lies in systematic defense. Seres deploys a multi-layer in-depth defense architecture of "cloud-pipe-device-chip", collaborating with QAX to deploy intrusion detection systems across CAN bus, on-board hosts, and Ethernet layers. Its VSOC platform monitors about 200,000 vehicles and issues "cybersecurity compliance certificates" for vehicle models exported to EU. Its intelligent security system covers over 200 vehicle usage scenarios and more than 400 security functions. In April 2026, it released Security 4.0, evolving from passive and active safety to intelligent security.

Professional security providers have also upgraded their toolkits. ACT VSOC+, a next-generation intelligent connected vehicle security operation platform, embodies this philosophy. Powered by an AI streaming computing engine, it delivers a 500% performance improvement in threat detection, constructs a vehicle security digital twin modeling over 2,800 vehicle signals, and enables triple precise threat localization across ECUs, signals, and scenarios, shortening threat detection and response cycles from day-level to minute-level.

At the underlying protocol security layer, TICPSH's SmartRocket TestSec automated intelligent fuzzy penetration testing tool executes deep fuzzy attacks and penetration testing against mainstream vehicle protocols including SOME/IP, DoIP, and CAN/CAN FD to proactively uncover latent vulnerabilities, shifting the security defense line forward to the R&D testing phase. UniSentry Intelligent Technology's SecIC-HSM firmware serves nearly 30 OEMs, achieving AES throughput of 4.8Gbps on Infineon AURIX TC4X, enabling parallel execution of OTA update verification and secure on-board communication (SecOC) without interrupting CAN bus transmission. These solutions help automakers make the leap from mandatory compliance to proactive security.

Consensus has formed across OEMs and suppliers: isolated standalone security products cannot resolve systemic security issues, and multi-layer in-depth defense and active immune systems represent the correct solutions.

V. Data Security Shifts from Privacy Compliance to Full-Link Governance, and Cross-Border Data Management Becomes A Mandatory Task

Data is the "blood" of intelligent vehicles, with its security spanning the full lifecycle of collection, transmission, storage, utilization, sharing, and destruction. The unique characteristic of automotive data security is that data carries both privacy and compliance attributes while directly supporting perception training, map services, model iteration, remote operations, and accident traceability. Improper collection, transmission, utilization, or tampering of data carries consequences extending far beyond regulatory fines, potentially exerting adverse impacts on vehicle behaviors.

On February 3, 2026, eight ministries including the Ministry of Industry and Information Technology and the Cyberspace Administration of China jointly issued the Guidelines for Outbound Transfer Security of Automotive Data (2026). The guidelines categorize outbound data into three tiers: general, important, and sensitive, while defining nine exemption scenarios including quality assurance maintenance data, OTA update data, and security vulnerability remediation materials. Clear filing thresholds are established: enterprises must conduct cross-border data transfer security assessments if transmitting important data overseas, or sharing personal information of over 1 million individuals / sensitive personal information of over 10,000 individuals with foreign entities. For China's automotive industry, which recorded a 65.3% year-on-year export growth in the first half of 2026, these guidelines eliminate the gray zone for cross-border data flows, shifting industry practices from tentative exploration to definitive compliance. Overseas regulation has simultaneously tightened: the 12-step GDPR compliance roadmap applies to export-focused OEMs; Japan's revised APPI Act introduces profit-based penalty calculations for the first time; South Korea's PIPA has entered a strict governance phase. Cross-border data flow governance has become a mandatory multi-jurisdictional compliance task.

Automakers have their own ways of responding. NIO's Sentry Mode remote view function implements end-to-end encryption and real-time data desensitization, automatically blurring license plates and human faces, with footage even NIO itself cannot decrypt, making it China's first OEM to deliver compliant remote view function. Its self-developed NPCC framework, the industry's first device-cloud integrated AI agent security framework, enforces "immediate data erasure post-computation" for sensitive data. Leapmotor adheres to an in-vehicle processing principle: in-vehicle cameras only collect feature points for local computing without cloud uploads, with all transmission traffic protected via AES-256 end-to-end encryption. ZEEKR's "Data Safe" system implements zero-trust tiered access control, activating data circuit breakers within 20 seconds upon detection of unauthorized abnormal access, with physical data destruction capabilities for storage media. Xpeng partnered with Alibaba Cloud to deploy post-quantum security algorithms on its new model P7, covering digital keys, remote vehicle control, and OTA for all vehicle modes.

"Remote View" in the "Sentry Mode" of NPCC (NIO's Industry-first Device-cloud Integrated AI Agent Security Framework)

Data security service providers have refined their solutions. Eagle Cloud Hub AI-DLP expands governance subjects from humans to dual entities of "human staff + AI staff", implementing unified identity management, consistent security policies, and standardized auditing for both, with refined control over data leakage vectors including external distribution, downloads, copying, and screen capture. Its clients include Geely Holding, Li Auto, Leapmotor, and Seres. Agile Technology's EDLP solution features an innovative architecture with deep integration of encryption and DLP. Starting from the source of data, it builds a full closed-loop prevention and control system covering "identification - classification - encryption - access control - audit", ensuring the security of core commercial secrets such as design drawings and R&D data amid the AI era. In May 2026, Agile Technology just won a 5,000-node data security project bid from a leader in the automotive industry.

For cross-border data compliance, CATARC delivers a full four-step service workflow: path planning - risk assessment - policy formulation - assessment declaration, enabling OEMs to clarify complete data flow routes and implement preventable, controllable, traceable compliance.

VI. Security Needs to Be Transformed from A Cost Center into A Core Competitive Edge

With clear trends identified, how to implement engineering? Drawing on the practices of leading companies, there are several actions automakers should take immediately:

Embed systems into core workflows rather than treating them as superficial compliance documentation. Build full-lifecycle CSMS/SUMS systems centered on ISO/SAE 21434 standards, shifting TARA threat modeling forward to concept and design phases to realize security left-shifting. Mandate SBOM and code security requirements for suppliers, cascading security accountability down via Cybersecurity Interface Agreements (CIA).

Transform VSOC (Vehicle Security Operations Center) from a mere alert dashboard into a core operations hub. Concrete efficiency improvement measures are as follows: shift alert governance from volume reduction to root-cause closed-loop management by tagging all alerts with root causes; replace static risk grading with dynamic weighting models; cut the 15-minute manual analysis time for each alert via one-click context encapsulation. Develop scenario-based emergency response cards and deploy semi-automated SOAR (Security Orchestration, Automation and Response) playbooks for high-frequency scenarios to auto-preserve evidence and generate reports automatically. Build an underlying vehicle security data center to eliminate the need for operators to log into five or six separate systems just to retrieve a single VIN. At the team level, establish SOP libraries and knowledge bases, and replace annual large-scale drills with regular small-scale practice sessions.

Implement full-link data security engineering. Data classification and grading serve as the foundation, with encryption, desensitization, access control and cross-border monitoring as core operational tools. Adopt a four-step workflow for cross-border businesses: route planning -> risk assessment -> policy formulation -> compliance declaration, shifting from ad-hoc project responses to normalized continuous operation.

Deploy AI in appropriate scenarios. Utilize AI TARA platforms to boost threat modeling efficiency, leverage AI SOC systems to reduce alert analysis overhead, and adopt digital twin technology to refine risk granularity, while enforcing permission sandboxes and functional fences for vehicle agents, retaining mandatory human approval gates for all high-risk operations.

Security development must shift from a "cost center" to a "core capability". Compliance serves as the foundation, while security operations determine the upper limit. As the industry advances deeper into the AI-defined vehicle era, this principle will grow increasingly weighty.

Table of Contents

Definitions

1 Automotive Cybersecurity

• 1.1 Intelligent Vehicle Cybersecurity Attack Scenarios
• Cybersecurity Attack Scenario 1: IVI
• Cybersecurity Attack Scenario 2: T-BOX
• Cybersecurity Attack Scenario 3: Automotive Gateway
• Cybersecurity Attack Scenario 4: OTA
• Cybersecurity Attack Scenario 5: TSP
• Cybersecurity Attack Scenario 6: OBD
• Cybersecurity Attack Scenario 7: UDS
• Cybersecurity Attack Scenario 8: ADAS
• Cybersecurity Attack Scenario 9: Charging Network System
• Cybersecurity Attack Scenario 10: Phone IoV APP
• 1.2 Intelligent Driving Cybersecurity Risks
• Protection Link 1: Hardware Security
• Protection Link 2: Firmware Security
• Protection Link 3: System Security
• Protection Link 4: Bus Security
• Protection Link 5: Radio Security
• Protection Link 6: Network System Security
• Protection Link 7: Cloud Security
• Protection Link 8: Sensor Security
• Protection Link 9: Algorithm Security
• Protection Link 10: Data Security Risks
• Protection Link 11: Business Logic Security
• 1.3 Summary of Major Automotive Security Incidents, 2025-May 2026 (1)
• 1.3 Summary of Major Automotive Security Incidents, 2025-May 2026 (2)
• 1.4 Observation Perspective 1: Cybersecurity Threat Panorama
• 1.4 Observation Perspective 2: Vulnerability Status of Intelligent Connected Vehicles (1)
• 1.4 Observation Perspective 2: Vulnerability Status of Intelligent Connected Vehicles (2)
• 1.4 Observation Perspective 2: Vulnerability Status of Intelligent Connected Vehicles (6)
• 1.4 Observation Perspective 3: Vulnerability Status of Intelligent Connected Vehicle Cloud Platforms (1)
• 1.4 Observation Perspective 3: Vulnerability Status of Intelligent Connected Vehicle Cloud Platforms (2)
• 1.4 Countermeasures: Ten Recommendations for Vehicle-Cloud Security
• 1.5 Attack Transformation Trends and Security Construction Recommendations
• 1.6 Intelligent Connected Vehicle Supply-chain Security (1)
• 1.6 Intelligent Connected Vehicle Supply-chain Security (2)
• Concept of Intelligent Connected Vehicle Supply-chain Cybersecurity
• Status Quo of Supply-chain Cybersecurity Management
• Analysis of Supply-chain Cybersecurity Issues (1)
• Analysis of Supply-chain Cybersecurity Issues (2)
• Analysis of Supply-chain Cybersecurity Issues (3)
• Supply-chain Cybersecurity Protection Architecture
• Acceptance Evaluation for Intelligent Connected Vehicle Supply-chain Cybersecurity
• Evaluation of Automotive Data Security System
• Technical Requirements and Testing Assessment (1)
• Technical Requirements and Testing Assessment (2)
• Technical Requirements and Testing Assessment (3)
• 1.7 Attack Surfaces Expanded by Introducing AI
• Analysis of New Risks Brought by AI Deployment on Vehicles
• Introducing OpenClaw Is Risky and "Safety Belt" Is Needed for Deployment on Vehicles
• Automotive Cybersecurity Construction Recommendations (1)
• Automotive Cybersecurity Construction Recommendations (2)
• AI Attack Response Case 1: QAX AISOC (1)
• AI Attack Response Case 1: QAX AISOC (2)
• AI Attack Response Case 2: AI TARA Tool DefenseWeaver
• AI Attack Response Case 3: ThreatTrace (1)
• AI Attack Response Case 3: ThreatTrace (2)
• AI Attack Response Case 4: SecZone SecONE (1)
• AI Attack Response Case 4: SecZone SecONE (2)

2 Automotive Data Security

• 2.1 Data Security Risks
• 2.2 Summary of Mandatory National Standards for Chinese Passenger Cars (1)
• 2.2 Summary of Mandatory National Standards for Chinese Passenger Cars (2)
• 2.2 Summary of Mandatory National Standards for Chinese Passenger Cars (3): Comparison between Three Standards and International Regulations
• 2.3 Policies and Regulations Related to Intelligent Driving Cybersecurity and Data Security
• 2.4 Standards Related to Intelligent Driving Cybersecurity and Data Security (1)
• 2.4 Standards Related to Intelligent Driving Cybersecurity and Data Security (2)
• 2.5 Intelligent Driving Cybersecurity Standard System: General Security and Basic Common Standards
• 2.5 Intelligent Driving Cybersecurity Standard System: Cybersecurity Standards
• 2.5 Intelligent Driving Cybersecurity Standard System: Data Security Standards
• 2.5 Intelligent Driving Cybersecurity Standard System: AI Security Standards
• 2.6 The 3rd Batch of 49 Vehicle Models Complying with 5 Automotive Data Security Compliance Requirements (1)
• 2.6 The 3rd Batch of 49 Vehicle Models Complying with 5 Automotive Data Security Compliance Requirements (2)
• 2.6 The 4th Batch of 43 Vehicle Models Complying with 5 Automotive Data Security Compliance Requirements
• 2.7 Cross-border Data Transfer as a Mandatory Task for Companies
• Guidelines for Outbound Transfer Security of Automotive Data (2026) (1)
• Guidelines for Outbound Transfer Security of Automotive Data (2026) (2)
• Guidelines for Outbound Transfer Security of Automotive Data (2026) (3)
• Nine Scenarios Exempt from Filing for Outbound Transfer of Automotive Data
• Case of Preventable, Controllable and Traceable Data Security System Solution: Agile Technology
• GDPR 12-step Compliance Roadmap
• Cross-border Data Transfer for Global Automakers: Japan-to-China, China-to-Japan (1)
• Cross-border Data Transfer for Global Automakers: Japan-to-China, China-to-Japan (2)
• Cross-border Data Transfer for Global Automakers: Japan-to-China, China-to-Japan (3)
• Cross-border Data Transfer for Global Automakers: Japan-to-China, China-to-Japan (4)
• Cross-border Data Transfer for Global Automakers: Japan-to-China, China-to-Japan (5) - Engineering Practice Recommendations
• Cross-border Data Transfer for Global Automakers: Korea-to-China, China-to-Korea (1)
• Cross-border Data Transfer for Global Automakers: Korea-to-China, China-to-Korea (2)
• Cross-border Data Transfer for Global Automakers: Korea-to-China, China-to-Korea (3)
• Cross-border Data Transfer for Global Automakers: Korea-to-China, China-to-Korea (4) - Engineering Practice Recommendations
• Case 1: CATARC Builds Full-process Service System for Cross-border Data Transfer Compliance (1)
• Case 1: CATARC Builds Full-process Service System for Cross-border Data Transfer Compliance (2)
• Case 1: CATARC Builds Full-process Service System for Cross-border Data Transfer Compliance (3)
• Case 2: EY Tech Horizon "Global Cross-border Data Transfer & Automotive Cybersecurity Compliance Platform" Solution (1)
• Case 2: EY Tech Horizon "Global Cross-border Data Transfer & Automotive Cybersecurity Compliance Platform" Solution (2)
• Case 2: EY Tech Horizon "Global Cross-border Data Transfer & Automotive Cybersecurity Compliance Platform" Solution (3)
• 2.8 Data Security Case 1: Agile Technology
• Data Security System
• Data Leakage Prevention (DLP)
• EDLP Product
• Data Security Service Clients
• 2.9 Data Security Case 2: Eagle Cloud
• AI-native Product Matrix
• "Human + AI" Unified Security Governance (1)
• "Human + AI" Unified Security Governance (2)
• Eagle Cloud Hub AI-DLP
• Clients (1)
• Clients (2)
• 2.10 Data Security Case 3: SafePloy
• Secure Access Solution for Electronic Control System Diagnostics Scenarios (1)
• Secure Access Solution for Electronic Control System Diagnostics Scenarios (2)
• 2.11 Data Security Case 4: Hongtu Technology
• Automotive Data Security Solution
• 2.12 Data Security Case 5: Jilin University Zhengyuan (JIT)
• Intelligent Data Classification & Grading System
• 2.13 Data Security Case 6: China Machinery Boye
• Xuanyuan-Moses Integrated Intelligent Data Security Platform
• Three Flagship Products Built on Xuanyuan-Moses Base Platform
• 2.14 Data Security Case 7: Sheng An Information
• Profile
• IoV Security Business Panorama
• Data Classification & Grading Platform
• Data Desensitization Platform
• Data Security Gateway
• Transparent Data Encryption Gateway

3 Cybersecurity / Data Security Practices of Representative OEMs

• 3.1 Seres
• Data Security Practices
• Cybersecurity Practices
• Intelligent Security System (1)
• Intelligent Security System (2)
• Intelligent Security System (3)
• 3.2 Leapmotor
• Data Security Practices (1)
• Data Security Practices (2)
• Data Security Practices (6)
• Cybersecurity System Construction & Certification (1)
• Cybersecurity System Construction & Certification (2)
• 3.3 Xpeng
• AI Center-based Lingxi Platform
• Post-quantum Security Practices
• Relevant Security Practices (1)
• Relevant Security Practices (2)
• Relevant Security Practices (3)
• 3.4 NIO
• Cybersecurity Construction
• NIO Independently Developed NPCC, the Industry-first Device-cloud Integrated AI-agent Security Framework (1)
• NIO Independently Developed NPCC, the Industry-first Device-cloud Integrated AI-agent Security Framework (2)
• Five-layer Data Privacy Protection System
• 3.5 Li Auto
• Self-developed Vehicle OS Security System
• Defense-in-depth System for AI Intelligent Assistant (1)
• Defense-in-depth System for AI Intelligent Assistant (2)
• Livenet: High-resilience IoV Built on NDN
• Livenet: High-resilience IoV Built on NDN
• Livenet Application Scenarios (1)
• Livenet Application Scenarios (2)
• 3.6 BYD
• iDDog Intelligent Security Platform (1)
• iDDog Intelligent Security Platform (2)
• iDDog Intelligent Security Platform (3)
• 3.7 Geely
• Quantum Security Protection Practices (1)
• Quantum Security Protection Practices (2)
• Zeekr Data Security Protection (1)
• Zeekr Data Security Protection (2)
• Zeekr Cybersecurity & Privacy Protection
• Zeekr Privacy Protection Capabilities (1)
• Zeekr Privacy Protection Capabilities (2)
• Geely Creates New Paradigm of Defense-in-depth for IoV (1)
• Geely Creates New Paradigm of Defense-in-depth for IoV (2)
• Geely Builds "Cloud-Pipe-Device" Integrated Security System
• Data Governance Work (1)
• Data Governance Work (2)
• Data Governance Work (5)
• Full-Domain Security 2.0

4 Representative Automotive Security Hardware Suppliers

• 4.1 UniSentry Intelligent Technology
• Sutra Series Cybersecurity Agent Toolchain
• Released DF30 Chip Integrating National Cryptography Algorithm and Post-Quantum Cryptography HSM Firmware
• "Ultra-lightweight" HSM Lite Hardware IP
• SecIC HSM Firmware: Hardware-software Co-control for Secure Debugging
• SecIC HSM Firmware: Parallel Execution of OTA Update Verification and Secure Communication
• SecIC HSM Firmware: OTA "Ciphertext Data Power-off Resume Transmission"
• SecIC HSM Firmware: OTA Cloud-Vehicle Collaboration Resilient against "Store now decrypt later" Attacks
• SecIC HSM Firmware: Automotive-grade Security Migration Empowers Embodied Artificial Intelligence
• SecSOL CAN Intelligent Vehicle CAN Bus Security Test Solution
• "AES+SM4" Lightweight Combined Cryptography Accelerator Hardware IP
• Summary of New Qualifications & Certifications
• Summary of Latest Ecosystem Cooperation
• 4.2 ThinkTech
• Mizar series Automotive-grade Secure Chips (1)
• Mizar series Automotive-grade Secure Chips (2)
• Alioth8 series Chips and Alioth9 Chip
• Alioth8 Product Series
• Alioth TTA8 MCU
• TTA8T8X (1)
• TTA8T8X (2)
• TTA8T8X (3)
• TTA9 MCU
• Clients
• 4.3 C*Core Technology
• Security Product Portfolio (1)
• Security Product Portfolio (2)
• Security Product Portfolio (3)
• IoV Information Security & Identity Authentication Solution
• All-round Intelligent Cockpit Security Solutions
• CCRC4XXX Series: High-performance Automotive Electronic AI MCU with "RISC-V + AI + Post-quantum" Architecture
• CCRC4XXX Series: High-performance Automotive Electronic AI MCU with "RISC-V + AI + Post-quantum" Architecture
• Cloud Secure Chip
• Quantum-secure Chip A5Q
• 4.4 Shanghai Hangxin
• Automotive-grade Secure Chip ACL16 (1)
• Automotive-grade Secure Chip ACL16 (2)
• ACL16_S IoV Secure Chip (1)
• ACL16_S IoV Secure Chip (2)
• New-generation Quantum-security-grade Chip with Built-in Post-quantum Cryptography Engine
• IoV Secure Chip: Hardware Root of Trust for V2X Communication
• C-V2X Solution: Safeguard C-V2X Communication Security
• 4.5 HSEC
• Secure Chip Series Products
• IoT Secure Chip Series Products
• Automotive-grade Secure Chip HSC32C1 (1)
• Automotive-grade Secure Chip HSC32C1 (1)
• High-performance System-level Secure Chip: HSCTU
• Terminal Secure Chip: HSCK2
• HSRU3 High-performance SOC Secure Chip
• Cybersecurity Partners
• 4.6 Nsing Technologies
• Introduction to Secure Chips
• Secure Chip N32S032 (1)
• Secure Chip N32S032 (2)
• Secure Chip N32S032 (3)
• Post-quantum Encryption Solution (1)
• Post-quantum Encryption Solution (2)
• Secure Chips Empowers Robots
• 4.7 Huada Electronic
• Security Product Matrix
• Automotive-grade Secure Chip CIU98_B Series (1)
• Automotive-grade Secure Chip CIU98_B Series (2)
• 4.8 Tongxin Micro
• Automotive Secure Chip T9 Series
• Automotive-grade eSIM Security Assurance

5 Major Automotive Security Software Suppliers

• 5.1 Software Security Technology
• CodeHawk AI Code Review Platform (1)
• CodeHawk AI Code Review Platform (2)
• Code Issues Detectable by CodeHawk (1)
• Code Issues Detectable by CodeHawk (2)
• SoftSec SCA: Full-process Solution for SBOM Compliance (1)
• SoftSec SCA: Full-process Solution for SBOM Compliance (2)
• 5.2 Anban Tech
• AI-driven New Paradigm for Connected-vehicle Security (1)
• AI-driven New Paradigm for Connected-vehicle Security (2)
• Large-model Security Test System (1)
• Large-model Security Test System (2)
• AI Security Series Product: Large Model Firewall System
• Yizhi Large Model Security Evaluation System (1)
• Yizhi Large Model Security Evaluation System (2)
• Software Supply-chain Security Management Series Products
• AI Large Model Red-blue Team Confrontation Platform
• 5.3 SOURCEGUARD
• Wisdom Lens: Agent-based Automated Vulnerability Mining System (1)
• Wisdom Lens: Agent-based Automated Vulnerability Mining System (2)
• Wisdom Lens: Agent-based Automated Vulnerability Mining System (3)
• Wisdom Lens: Agent-based Automated Vulnerability Mining System (4)
• Comparison between Wisdom Lens and Traditional Fuzzing / SAST / DAST Tools
• Comparison between Wisdom Lens and Peer Tool AFL
• Swift SCA
• Swift SCA
• 5.4 Automotive Cybersecurity Technology (ACT)
• New-generation Intelligent Connected Vehicle Security Operation Platform: ACT VSOC+ (1)
• New-generation Intelligent Connected Vehicle Security Operation Platform: ACT VSOC+ (2)
• New-generation AI-native Intelligent Connected Vehicle Security Operation Platform
• 5.5 TICPSH
• SmartRocket PeneX Automotive Cybersecurity Test System
• SmartRocket TestSec Automated Intelligent Fuzz Penetration Test Tool (1)
• SmartRocket TestSec Automated Intelligent Fuzz Penetration Test Tool (2)
• Intrusion Detection and Prevention System & Vehicle Security Operations Center (IDPS&VSOC) Integrated Platform (1)
• Intrusion Detection and Prevention System & Vehicle Security Operations Center (IDPS&VSOC) Integrated Platform (2)
• Intrusion Detection and Prevention System & Vehicle Security Operations Center (IDPS&VSOC) Integrated Platform (3)
• Toolchain
• 5.6 Chiwu Technology
• RavenEye: Intelligent Binary Firmware Vulnerability Mining Platform (1)
• RavenEye: Intelligent Binary Firmware Vulnerability Mining Platform (2)
• RavenEye: Intelligent Binary Firmware Vulnerability Mining Platform (3)
• RavenEye: Intelligent Binary Firmware Vulnerability Mining Platform (4)
• 5.7 ZC Technology
• Profile
• "Basic Software + Toolchain + Service" Trinity (1)
• "Basic Software + Toolchain + Service" Trinity (2)
• Information Security Solutions
• Xiaotian Information Security Algorithm Tool (1)
• Xiaotian Information Security Algorithm Tool (2)
• Xiaotian Information Security Algorithm Tool (3)

6 Typical Internet of Vehicles (IoV) Security Providers

• 6.1 Vecentek
• Full-link Automotive Cybersecurity Solution
• SudoAI - Intelligent Security Test Tool with "Hands & Brain", Penetration Test Completed via Single Sentence (1)
• SudoAI - Intelligent Security Test Tool with "Hands & Brain", Penetration Test Completed via Single Sentence (2)
• SudoAI - Intelligent Security Test Tool with "Hands & Brain", Penetration Test Completed via Single Sentence (3)
• SudoAI - One-click Subscription to Convert "AI Dialogue" into "Automated Workflow" (1)
• SudoAI - One-click Subscription to Convert "AI Dialogue" into "Automated Workflow" (2)
• SudoAI - One-click Subscription to Convert "AI Dialogue" into "Automated Workflow" (3)
• IDPS&VSOC5.0 (1)
• IDPS&VSOC5.0 (2)
• Embedded Firmware Security Analysis Platform (1)
• Embedded Firmware Security Analysis Platform (2)
• Embedded Firmware Security Analysis Platform (3)
• Embedded Firmware Security Analysis Platform (4)
• 6.2 Callisto Technology
• Security Data Operation Solution
• "Compliance Full-life-cycle" Automotive Cybersecurity Product Matrix
• Peace-of-Mind Driving Assistant (1)
• Peace-of-Mind Driving Assistant (2)
• R-IDPS
• S3-TARA (1)
• S3-TARA (2)
• L3 Operation Monitoring Solution (1)
• L3 Operation Monitoring Solution (2)
• 6.3 GoGoByte
• AI TARA Tool DefenseWeaver (1)
• AI TARA Tool DefenseWeaver (2)
• AI TARA Tool DefenseWeaver Client Cases (1)
• AI TARA Tool DefenseWeaver Client Cases (2)
• AI TARA Tool DefenseWeaver Client Cases (3)
• AI TARA Tool DefenseWeaver Client Cases (4)
• Cybersecurity Automated Test Platform: ThreatGo
• Connected Vehicle Threat Intelligence Platform: ThreatHound
• Security System Process Management Platform: RuleMate
• MBSE + AI Full-life-cycle Cybersecurity Solution: ThreatTrace
• 6.4 INCHTEK
• Defense-in-depth System for Intelligent Connected Vehicles
• Automotive Security Engine: inSE
• Automotive Info-security Development Toolchain: inCSMS
• Automotive Info-security Development Toolchain: inTARA
• inTARA-NEO
• inTARA-NEO V4.1.0
• inTARA-NEO V4.3 (1)
• inTARA-NEO V4.3 (2)
• Automotive Info-security Development Toolchain: inDARA
• Automotive Info-security Development Toolchain: inDARA
• inDARA: Core Capabilities (1)
• inDARA: Core Capabilities (2)
• inDARA: Core Capabilities (3)
• inHSM
• IDPS
• Vehicle Security Operation Platform: inVSOC (1)
• Vehicle Security Operation Platform: inVSOC (2)
• Automotive Security Gateway: A1000Plus
• Automotive Security Gateway: A1000F
• L3 Autonomous Driving Supervision Platform (1)
• L3 Autonomous Driving Supervision Platform (2)
• L3 Autonomous Driving Supervision Platform (3)
• Embodied Artificial Intelligence "Security Cerebellum"
• Systematic Empowerment: From Intelligent Connected Vehicles to Embodied Artificial Intelligence
• 6.5 Secdeer
• Taichu Crowd-Testing Platform
• Taichu Remote Risk-control Access Gateway
• Four Customized Services
• IoV Crowd-Testing Service Platform: Taichu Fengshentai
• 6.6 Topsec
• VSOC
• Vehicle-in-the-loop-based IoV Info-security Detection Platform
• Adaptive Elastic Vehicle-road-cloud Integrated Security Solution
• Winning Bid for Automotive Software Upgrade Test System Project of Authoritative Automotive Testing Institution
• AI Gateway, Agent-oriented AI Security
• Security AI Assistant, AI Security Testing
• 6.7 Qingtian Xin'an
• IDPS + VSOC End-to-end Solution
• Vehicle Intrusion Detection & Prevention System (IDPS)
• Vehicle Security Operation Center (VSOC)
• Vehicle Cybersecurity Management System (CSMS)
• 6.8 Anda Tianxia
• Profile
• "1+3+N" System Covering Full Life-cycle of Vehicle Cybersecurity (1)
• "1+3+N" System Covering Full Life-cycle of Vehicle Cybersecurity (2)
• 6.9 iLinkSec
• AI-enabled Full-life-cycle IoV Info-security Solution
• Digital Security Technology System
• Digital Security Operation Center: iLinkSec.iSOC
• Digital Security Protection Matrix: iLinkSec.iMatrix
• Security Technical Service iLinkSec.TechService
• Automotive Info-security Matrix: iLinkSec.SecMatrix
• Automotive Security Algorithm Module: iLinkSec.HSM
• Automotive Key Management & Filling System: iLinkSec.VKDMS
• Key & Identity Management Syste: iLinkSec.iKIMS
• Automotive Intelligent Security Operation Platform: iLinkSec.IVSOC
• Automotive Data Outbound Transfer Security Monitoring & Management System: iLinkSec.VDMMS
• Cross-border Data Security Monitoring & Analysis System: iLinkSec.iDSMS
• Practice of Full-domain Coverage, Full-life-cycle Management and Graded Protection of Vehicle Cybersecurity & Data Security
• 6.10 Zijin Zhilian
• Product: Automotive Endogenous Security System
• Mimic Elf Vehicle Endogenous Security System (VESS)
• One-stop Test Platform for Intelligent Connected Vehicles
• Overall Cybersecurity Solution for Intelligent Connected Vehicles
• Product: Automotive CAN Security Gateway & Automotive Central Security Gateway
• Product: Automotive Component Firmware Vulnerability Detection Tool
• Automated Driving Data Recording System (DSSAD) (1)
• Automated Driving Data Recording System (DSSAD) (2)
• 6.11 Sheng An Information
• Profile
• IoV Security Business Panorama
• SCMS System Construction Solution for an Automaker
• 6.12 Safetime Information Technology
• AI Compliance Design Tool: Panxi DOC

7 Trends and Summary

• 7.1 Summary of Representative Automotive Security Hardware Suppliers and Their Solutions (1)
• 7.1 Summary of Representative Automotive Security Hardware Suppliers and Their Solutions (2)
• 7.2 Summary of Major Automotive Security Software Suppliers and Their Solutions (1)
• 7.2 Summary of Major Automotive Security Software Suppliers and Their Solutions (2)
• 7.3 Summary of Typical IoV Security Providers and Their Solutions (1)
• 7.3 Summary of Typical IoV Security Providers and Their Solutions (2)
• 7.3 Summary of Typical IoV Security Providers and Their Solutions (3)
• 7.3 Summary of Typical IoV Security Providers and Their Solutions (4)
• 7.3 Summary of Typical IoV Security Providers and Their Solutions (5)
• 7.4 Comparison of Cybersecurity and Data Security between Major OEMs (1)
• 7.4 Comparison of Cybersecurity and Data Security between Major OEMs (2)
• 7.5 Summary of Representative Solutions of Data Security Service Providers
• 7.6 Summary of IDPS / VSOC and Integrated Solutions for Intelligent Connected Vehicles
• 7.7 Practices to Improve VSOC Operation Efficiency (1)
• 7.7 Practices to Improve VSOC Operation Efficiency (10)
• 7.7 Practices to Improve VSOC Operation Efficiency (11)
• 7.8 Trend 1:
• 7.9 Trend 2:
• 7.10 Trend 3:
• 7.10 Trend 4:
• 7.11 Trend 5:
• 7.12 Trend 6:
• 7.13 Trend 7:
• 7.14 Trend 8:
• 7.15 Trend 9: