The search result changed since you submitted your search request. Documents might be displayed in a different sort order.
  • search hit 1 of 511
Back to Result List

Automotive Software Security Engineering based on the ISO 21434

  • The increasing use of software and connectivity in modern vehicles has made cybersecurity an important issue in the automotive industry. ISO 21434 is a standard for automotive cybersecurity engineering that provides guidelines for the development and validation of secure automotive systems. For effective implementation and practical use of ISO 21434, it must be incorporated into existing automotive industry development workflows. In this paper, we investigate the practical applicability of ISO 21434 in the context of the Security Abstraction Model (SAM), a security modeling approach for the domain-specific modeling language EAST-ADL, and provide insights into the benefits and consequences of this approach. In doing so, we describe the methodological opportunities of integrating ISO 21434 into SAM on the one hand and present a case study illustrating the application of this integrated approach in the development of a secure automotive system on the other hand. Our results suggest that the integration of ISO 21434 into SAM betterThe increasing use of software and connectivity in modern vehicles has made cybersecurity an important issue in the automotive industry. ISO 21434 is a standard for automotive cybersecurity engineering that provides guidelines for the development and validation of secure automotive systems. For effective implementation and practical use of ISO 21434, it must be incorporated into existing automotive industry development workflows. In this paper, we investigate the practical applicability of ISO 21434 in the context of the Security Abstraction Model (SAM), a security modeling approach for the domain-specific modeling language EAST-ADL, and provide insights into the benefits and consequences of this approach. In doing so, we describe the methodological opportunities of integrating ISO 21434 into SAM on the one hand and present a case study illustrating the application of this integrated approach in the development of a secure automotive system on the other hand. Our results suggest that the integration of ISO 21434 into SAM better supports automotive system security in the early development phases and makes it transparent to a wide range of stakeholders. At the same time, it becomes clear that a representation of the interrelationships in the form of a metamodel, in contrast to ISO 21434 in which these are only described textually, significantly improves conceptual understanding and ultimately enables pragmatic usability in industrial development.show moreshow less

Export metadata

Additional Services

Search Google Scholar
Metadaten
Author:Matthias BerglerORCiD, Ramin Tavakoli KolagariORCiD
DOI:https://doi.org/10.1145/3631991.3631994
ISBN:979-8-4007-0805-3
Parent Title (English):ACM Computing Surveys
Publisher:Association for Computing Machinery (ACM)
Place of publication:Tokyo, Japan
Document Type:conference proceeding (article)
Language:English
Release Date:2024/03/26
Tag:automotive; cybersecurity; software engineering
Pagenumber:10
First Page:17
Last Page:26
Konferenzangabe:WSSE '23: Proceedings of the 2023 5th World Symposium on Software Engineering
institutes:Fakultät Informatik
Licence (German):Keine Lizenz - Deutsches Urheberrecht gilt
Verstanden ✔
Diese Webseite verwendet technisch erforderliche Session-Cookies. Durch die weitere Nutzung der Webseite stimmen Sie diesem zu. Unsere Datenschutzerklärung finden Sie hier.