The Key for Future Vehicles—Development of Chassis Components According to Cybersecurity Regulations

Abstract

The increasing digitization of vehicles leads to a continuously increasing number of wireless interfaces between the vehicle and components outside. These additional functionalities and interfaces lead to an increasing vulnerability and probability of a cybersecurity attack by third parties. IAV has implemented a process standard to develop and maintain cybersecurity relevant electrical components in accordance with ISO/SAE 21434 Road vehicles—Cybersecurity engineering. Due to the large proportion of safety-relevant and networked electrical components in the chassis, automotive cybersecurity must be widely applied. IAV´s Cybersecurity Management System offers the possibility to perform security analyses during the development phase and support phase of the vehicle. The primary objective of the security analysis is to identify threats, to evaluate them in terms of impact for the considered item and to identify appropriate mitigation measures. In this paper, excerpts of the IAV process standard are presented and the security analysis (TARA—Threat Analysis and Risk Assessment) is discussed exemplary based on the steering functionality of an autonomous shuttle. The focus is put on a safety goal as an asset by means of cybersecurity. Furthermore, possibilities for mitigating the identified risks are shown. As an addition, interfaces between functional safety and cybersecurity are illustrated.