A technical overview on cyber security challenges and solutions in the automotive domain. See state-of-the-art tools (Simulink®, System Composer™, Embedded Coder®, Polyspace®) and methods for risk assessment and mitigation of security threats. Highlight the strengths of Model-Based Design to attain security across all stages in product life cycle management and satisfy important requirements of ISO®/SAE® 21434 and UN-ECE WP.29.
Highlights:
- How new automotive security standards impact products and processes
- How security and safety considerations are (or are not) related
- How to find common security flaws in early design stages
- How to follow secure coding and modeling guidelines
- How to assess cyberattacks (e.g., attack simulation, impact analysis, taint analysis)
- How to implement intrusion detection systems and continuous monitoring (VSOC)
- How to integrate analysis and simulation through Model-Based Design
Other topics covered: attack taxonomy, shift left, intrusion detection, attack simulation, static analysis, taint analysis, vehicle security operations center, secure coding/CERT® C.
Speakers:
Sonja Krzok works as an application engineer at bat365, focusing on real-time simulation and testing. She holds a BSE degree in electrical engineering and is currently pursuing her master’s degree in cybersecurity. Before she joined bat365 as an application engineer in 2019, she worked for in-tech GmbH as a product manager, where she was responsible for modular HIL systems and acted as a team and project manager for hardware and software development projects. Prior to that, she worked as a development engineer and gained experience in modeling, simulating, and implementing real-time systems, mainly in the automotive industry.
Martin Becker is an application engineer for verification and validation workflows at bat365. He has more than 15 years of experience in embedded systems development and holds a PhD in static analysis and verification of embedded software. In his daily work, he supports customers in a wide range of industries to efficiently produce embedded software while meeting safety and security standards.
