Automotive Cybersecurity Engineering

Support the development of secure vehicle systems with methods and techniques that help mitigate attack risks.

This three-day training covers methods and techniques which support the development of secure vehicle systems. From threat and risk analysis (TARA), design, and implementation to security test procedures and topics of secure development, a continuous exercise example is used to explore practical application. Relevant standards and regulations, including UN R155, UN R156 and ISO 21434, are also addressed from a practical perspective.

Contents

Introduction

• Definition of cybersecurity.
• Security attributes and terminology.
• Automotive cybersecurity development lifecycle.

Attacks

• Attacker motivation.
• Typical attack patterns.

Requirements Phase

• Item definition.
• Threat scenario identification.
• Attack path analysis.
• Risk assessment methodology.
• Cybersecurity requirements elicitation.

Basics of cryptography

• Cryptographic methods.
• Typical sources of errors.
• Common standards.

Architecture design

• Trade-offs between cybersecurity and other quality requirements.
• Cybersecurity design principles.
• Secure design patterns.

Implementation

• Coding standards.
• Antipatterns.
• Cybersecurity technologies.

Verification and validation

• Static code analysis techniques.
• Dynamic verification techniques.
• Penetration testing.

Operational cybersecurity

• Software bill of materials (SBOM).
• Incident response management.

Target audience

• Cybersecurity engineers
• Software architects
• Software designers
• Software developer

Prerequisites

Experience in software development recommended. 

Further information

For online trainings, all materials are offered digitally. For in-person trainings, all materials are offered digitally and may be supplemented with hard copies. If needed, copies of any relevant standards must be provided by the learner.