Modern vehicles are complex systems of interlinked electronic control units with many connections to exterior devices. Consequently, security engineering for modern vehicles is a challenging task. Knowledge from several domains of expertise, especially the security domain and the automotive engineering domain, must be combined to identify and fulfill all functional and security-related requirements. We propose a risk-driven approach for security engineering, allowing well-organized cooperation between stakeholders in the security engineering process with a common method framework and distinct artifacts serving as well-defined interfaces between activities and stakeholders. At the same time, our method supports the application of established methods for individualsteps, allowing for the necessary exibility in typically very heterogeneous automotive development environments. Furthermore, our method defines supportive artifacts which help streamline the application of our method, such as catalogs and uni ed assessment models. Finally, we report on early experiences on the application of our method by an international OEM.
Angermeier et al. (Fri,) studied this question.
Synapse has enriched 5 closely related papers on similar clinical questions. Consider them for comparative context: