Resilient Interface Design for Safety-Critical Embedded Automotive Software

Sporer, Harald; Macher, Georg; Kreiner, Christian; Brenner, Eugen

doi:10.5121/csit.2016.60117

Cited by 7 publications

(3 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This follows the concept of a layered cybersecurity defense approach mentioned before. Table 2 itemizes essential HSI attributes extracted from standards (ISO 26262 [4], AutomotiveSPICE [5], and SAE J3061 [3]), scientific papers like [8,14], and the authors' experiences [9]. Security related information have been added (marked in coloured text) to support identification of attack vectors via their signal interfaces of the systems.…”

Section: Security Extensionmentioning

confidence: 99%

Untitled

2018

JUSPN

View full text Add to dashboard Cite

An important trend in the automotive domain is to adapt established functional safety processes and methods for security engineering. Although functional safety and cyber-security engineering have a considerable overlap, the trend of adapting methods from one domain to the other is often challenged by non-domain experts. Just as safety became a critical part of the development in the late 20th century, modern vehicles are now required to become resilient against cyber-attacks. As vehicle providers gear up for this challenge, they can capitalize on experiences from many other domains, but must also face several unique challenges. Such as, that cyber-security engineering will now join reliability and safety as a cornerstone for success in the automotive industry and approaches need to be integrated into the mainly safety oriented development lifecycle of the domain. The recently released SAE J3061 guidebook for cyber-physical vehicle systems focus on designing cyber-security aware systems in close relation to the automotive safety standard ISO 26262. The key contribution of this paper is to analyse a method to identify attack vectors on complex automotive systems via signal interfaces and propose a security classification scheme and protection mechanisms on signal layer. To that aim, the hardware-software interface (HSI), a central development artefact of the ISO 26262 functional safety development process, is used and extended to support the cyber-security engineering process and provide cyber-security countermeasures on signal layer.

show abstract

Section: Security Extensionmentioning

confidence: 99%

Untitled

2018

JUSPN

View full text Add to dashboard Cite

show abstract

“…This work combines spreadsheet tools (such as Excel) and MBD tools in a bidirectional manner to enable a tool-independent method of engineering HSI definitions with spreadsheet tools and transformation of the generated information into a reusable and version-able model representation. A domain-specific modelling approach for mechatronic systems with an integrated HSI definition feature is presented in [8]. The approach of this work has mainly been created for the development of embedded mechatronic based electric/electronic systems (E/E systems) in the automotive field and is based on a domainspecific language tailored for the specific needs of domain experts.…”

Section: Related Workmentioning

confidence: 99%

“…This follows the concept of a layered cybersecurity defense approach mentioned before. [4], AutomotiveSPICE [5], and SAE J3061 [3]), scientific papers like [8,14], and the authors' experiences [9]. Security related information have been added (marked in coloured text) to support identification of attack vectors via their signal interfaces of the systems.…”

Section: Security Extensionmentioning

confidence: 99%

Signal-Layer Security and Trust-Boundary Identification based on Hardware-Software Interface Definition

Macher¹,

Sporer²,

Brenner³

et al. 2018

JUSPN

Self Cite

View full text Add to dashboard Cite

An important trend in the automotive domain is to adapt established functional safety processes and methods for security engineering. Although functional safety and cyber-security engineering have a considerable overlap, the trend of adapting methods from one domain to the other is often challenged by non-domain experts. Just as safety became a critical part of the development in the late 20th century, modern vehicles are now required to become resilient against cyber-attacks. As vehicle providers gear up for this challenge, they can capitalize on experiences from many other domains, but must also face several unique challenges. Such as, that cyber-security engineering will now join reliability and safety as a cornerstone for success in the automotive industry and approaches need to be integrated into the mainly safety oriented development lifecycle of the domain. The recently released SAE J3061 guidebook for cyber-physical vehicle systems focus on designing cyber-security aware systems in close relation to the automotive safety standard ISO 26262. The key contribution of this paper is to analyse a method to identify attack vectors on complex automotive systems via signal interfaces and propose a security classification scheme and protection mechanisms on signal layer.To that aim, the hardware-software interface (HSI), a central development artefact of the ISO 26262 functional safety development process, is used and extended to support the cyber-security engineering process and provide cyber-security countermeasures on signal layer.

show abstract