Coordinating security and safety engineering processes in automotive electronics development

ABSTRACT

Currently, the automotive industry is in a phase of reorientation and reorganization regarding security risks and hazards of in-car electronic systems. So far, security risks in the electronics development for automobiles were largely confined to configuration protection, e.g. preventing the manipulation of speedometers or disabling of power limitations. Now, the introduction of wireless information and communication technologies in vehicles leads to new challenges for the development and protection of the entire vehicle electronics. In this contribution a comparison of safety and security standards, on the example of ISO 26262 and ISO 15408, is presented and both standards are discussed regarding their industrial applicability and compatibility. A coordination scheme for security and safety engineering processes is proposed.

References

1. C. Robinson-Mallett, Automotive Security: From Security to Safety Issues through the Introduction of In-Car Internet Connectivity, Invited Talk on 8th Cyber Security and Information Intelligence Research Workshop, 01/2013, Oak Ridge National Research Laboratory, TN, USA
2. International Organization of Standardization (ISO), ISO 26262 Road Vehicles -- Functional Safety, www.iso.org
3. International Organization of Standardization (ISO), ISO 15408 Common Criteria for Information Technology Security Evaluation, www.iso.org
4. D. Nicol, W. Sanders, K. Trivedi, Model-Based Evaluation: From Dependability to Security, IEEE Transactions on Dependable and Secure Computing, Vol. 1 No. 1, 2004

Index Terms

• Computer systems organization

  • Embedded and cyber-physical systems

  • Real-time systems

• Security and privacy

• Social and professional topics

  • Computing / technology policy

    • Computer crime

  • Professional topics

    • Management of computing and information systems

      • Software management