Modern vehicles are increasingly shaped by software, connectivity and data-based functions. Cybersecurity and functional safety can therefore no longer be considered in isolation. An integrated approach emerges that takes both regulatory and normative requirements into account.
With regulation UNECE R155, binding cybersecurity requirements were introduced in the automotive sector. Manufacturers must establish and demonstrate a Cybersecurity Management System (CSMS). Including the identification and assessment of cyber risks, the definition of suitable protective measures, monitoring and response to security incidents, and consideration of the entire vehicle life cycle. Type approval is tied to proof of a functioning CSMS.
The standard ISO/SAE 21434 specifies the cybersecurity requirements in the engineering of road vehicles. A central element is the Threat Analysis and Risk Assessment (TARA) for the structured evaluation of potential threats. Added to this are requirements for secure system architectures, verification and validation, as well as the interplay with functional safety according to ISO 26262.
There are numerous interactions between functional safety and cybersecurity: a cyberattack can affect safety-relevant functions, while safety mechanisms themselves can represent attack surfaces. Coordinated consideration becomes especially important for automated driving functions and AI-based assistance systems.
Implementation encompasses technical as well as organizational measures. From clearly defined security processes and regular risk and threat analyses through to training, documentation and traceability. Collaboration along the supply chain also plays a key role. In this environment, independent testing, inspection and certification services are gaining importance; intellcert offers services here in certification, inspection and training.
Comments
No comments yet. Be the first to write one.