Learn how to automate and enhance automotive cybersecurity testing throughout a vehicle's complete lifecycle in this 37-minute technical presentation. Explore industrial-grade testing methodologies, automated test case generation, and comprehensive security lifecycle governance approaches for automotive systems. Discover methods for linking security analysis to testing, implementing model-based security risk analysis, and developing iterative security concepts. Master the integration of Cybersecurity Assurance Levels (CAL) and Target Attack Feasibility (TAF) into testing procedures, while understanding how to transform Attack Trees into practical test cases. Gain insights from two leading experts: Stefan Marksteiner, a Technology Scout for Cyber Security at AVL List GmbH with extensive experience in ICT security and automotive systems, and Christoph Schmittner, a System and Software Engineer specializing in safety and security co-engineering. Delve into the challenges of automotive cybersecurity testing and learn how to implement automated security testing platforms that enhance both completeness and efficiency of cybersecurity validation throughout a vehicle's lifecycle.
Automated Security Testing for Automotive Systems Lifecycle - From Risk Analysis to Test Generation
Automotive Security Research Group via YouTube
Overview
Syllabus
Intro
Stefan Marksteiner
Challenges in Automotive Cybersecurity Testing
Cyber Testing Manually
Linking Security Analysis to Testing
Cybersecurity System Model
Model-Based Security Risk Analysis
Iterative Security Concept Generation
Enhancing Security Controls for Risk Treatment
Cybersecurity Assurance Levels (CAL)
Target Attack Feasibility (TAF)
Integrating TAF and CAL into Testing
General Approach for V&V
Abstracting Test Patterns
Test Case Generation
From TARA to Tests
Transforming Attack Trees
Model-Based Testing
Automated Security Testing Platform
Taught by
Automotive Security Research Group
