Embedded Systems Security Co-design: Modeling Support for Managers and Developers

  • The proliferation of connected and autonomous vehicle technologies has significantly increased cybersecurity risks. Modern vehicles, as complex and networked computer systems, require comprehensive protection against malicious external attacks, much like conventional computers. Addressing these challenges requires robust tools that align established automotive model-based development approaches with the ISO/SAE 21434 standard for automotive cybersecurity, which became mandatory following its publication in 2021. Building on prior research, this paper introduces key innovations in the conceptual framework and the tool support that integrate seamlessly into existing automotive development methodologies. These advancements are rooted in extensions to the Security Abstraction Model (SAM) informed by the ISO/SAE 21434 standard. Notably, SAM now incorporates advanced methods for score calculation, including an attack potential-based approach for assessing attack feasibility and the computation of risk scores using risk matrices. UsabilityThe proliferation of connected and autonomous vehicle technologies has significantly increased cybersecurity risks. Modern vehicles, as complex and networked computer systems, require comprehensive protection against malicious external attacks, much like conventional computers. Addressing these challenges requires robust tools that align established automotive model-based development approaches with the ISO/SAE 21434 standard for automotive cybersecurity, which became mandatory following its publication in 2021. Building on prior research, this paper introduces key innovations in the conceptual framework and the tool support that integrate seamlessly into existing automotive development methodologies. These advancements are rooted in extensions to the Security Abstraction Model (SAM) informed by the ISO/SAE 21434 standard. Notably, SAM now incorporates advanced methods for score calculation, including an attack potential-based approach for assessing attack feasibility and the computation of risk scores using risk matrices. Usability improvements are also a contribution, achieved through the introduction of BPMN-style (Business Process Model and Notation) diagrams tailored for the accessible visualization of otherwise complex security models. These diagrams make multifaceted attack trees easier to interpret, enabling managers and other non-technical stakeholders to intuitively understand security vulnerabilities and make informed decisions. Additionally, the tool supports updated metrics for impact and risk analysis, demonstrated through practical applications involving automotive subsystems such as braking. These examples illustrate improved traceability between SAM and functional design, ensuring that cybersecurity requirements are effectively integrated into the broader development lifecycle.show moreshow less

Export metadata

Additional Services

Search Google Scholar
Metadaten
Author:Alexander FischerORCiD, Juha-Pekka TolvanenORCiD, Ramin Tavakoli KolagariORCiD
DOI:https://doi.org/10.1007/978-3-031-84913-8_8
ISBN:978-3-031-84913-8
ISSN:1865-1348
Parent Title (English):Lecture Notes in Business Information Processing
Publisher:Springer Nature Switzerland
Place of publication:Cham
Document Type:Part of a Book
Language:English
Reviewed:Begutachtet/Reviewed
Release Date:2025/11/12
Pagenumber:27
First Page:206
Last Page:232
institutes:Fakultät Informatik
Research Themes:Digitalisierung & Künstliche Intelligenz
Verstanden ✔
Diese Webseite verwendet technisch erforderliche Session-Cookies. Durch die weitere Nutzung der Webseite stimmen Sie diesem zu. Unsere Datenschutzerklärung finden Sie hier.