Cybersecurity

Our team of experts in automotive cybersecurity provide their experience throughout the entire development cycle related to cybersecurity. We provide expertise in the following areas:

• Cybersecurity Concept according to ISO/SAE 21434 and SAE J3061
  • Threat analysis risk assessment (TARA)
  • Requirements for cybersecurity features
  • Deriving Security Goals
  • Cybersecurity assessment for features/items
• Cybersecurity benchmarking on vehicles
• Cybersecurity architecture design
• Automotive cybersecurity training
• Gap analysis and support for compliance with upcoming regulations and standards
• Over-the-air security updates and procedures

CyberBox tool

The system developed by Applus IDIADA makes it possible to assess the extent to which a vehicle is cybersecure, allowing original equipment manufacturers (OEMs) and TIERs to identify solutions and avoid potential market recalls. The system responds to the growing need in the automotive sector for a comprehensive solution that facilitates the development of cybersecure vehicles. It is flexible enough to expand to encompass future new attack vectors, fulfilling the requirements of standards and certification programmes. Although cybersecurity issues do not always affect the physical safety of users, they may affect the vehicle’s privacy and/or functionality. Critical vulnerabilities were found in some of the targeted vehicle systems, but not in others. This implies that these vehicles were not tested for those areas but, had they been tested, these vulnerabilities could have been detected and corrected.

The cybersecurity evaluation tool developed by Applus IDIADA combines various hardware tools, together with software that enables automated operation. The tool analyses connectivity vectors in the vehicle that may affect the functionality, integrity or privacy of the vehicle and/or the user in the event of a cyberattack. This solution also provides a web interface to the underlying application, which is used to configure, manage and execute tests. The solution also generates detailed test reports for analysis.