The Spy Who Threat Modeled - Automotive Security Risk Assessment

Learn about automotive security threat modeling through a James Bond-themed conference talk that explores how to secure vehicles against real-world threats. Discover how security experts must address the challenges of protecting various makes and models while considering actual car culture and genuine security risks. Explore the integration of threat modeling with functional safety requirements, threat intelligence, and bills of materials to create comprehensive attack scenarios and trees. Gain insights into implementing threat analysis and risk assessment (TARA) programs within larger vulnerability management systems, including legislative requirements and industry standards. Presented by Heather Vermillion, a Security Engineer at PACCAR with 16 years of cybersecurity experience across defense, intelligence, e-commerce, insurance, and embedded systems sectors, this 56-minute presentation provides practical strategies and tactics for performing TARA in real-world automotive applications.