Cybersecurity Assessment for Connected and Automated Vehicles

What issues does a CYBERSECURITY Assessment FOR CONNECTED AND AUTOMATED VEHICLES address?

Automated and connected vehicles (AVs) have a complex architecture, as they integrate multiple automated driving functions and a wide variety of communication interfaces. An external attacker successfully compromising such functions not only endangers the safety of road users, but can also cause serious privacy, financial and operational harm to businesses and passengers. As a result, with increased vehicle connectivity the potential risk of cyberattacks escalates. To take this into account, TÜV SÜD has extended its approach to include cybersecurity in the evaluation of vehicle prototypes.

WHY IS CYBERSECURITY FOR CONNECTED AND AUTOMATED VEHICLES IMPORTANT?

To complement the safety assessment of your prototype vehicles it has to be ensured that the threats impacting the safety and privacy of road users, as well as the operator’s business models and intellectual property, are well mitigated. By conducting a cybersecurity assessment for your automated vehicles, you gain various benefits:

Strengthen the rationale for the permit of your automated vehicles by proving that safety and security risks were mitigated, your cybersecurity concept is validated and verified, and your systems are systematically tested.
Protect road users and your business by ensuring that cybersecurity threats were dealt with following state-of-the-art standards and best practice.
Develop secure, cutting edge AV technologies by ensuring that your automated driving systems were developed with security-by-design and defence-in-depth in mind.
Gain a competitive edge by working with international experts that have up-to-date cybersecurity threat, vulnerability and Standards knowledge.

WHAT IS THE CYBERSECURITY ASSESSMENT APPROACH?

Our TÜV SÜD experts have developed a cybersecurity assessment method that is specifically tailored for the AV approval process, and which is based on the latest international cybersecurity standards. Our assessment method was designed to provide an efficient transition to the upcoming automotive cybersecurity regulations. It is regularly aligned with current technology developments and industry best practices, and is constantly adapted to the latest cybersecurity threats.

Cybersecurity assessment for prototype approval is performed in three steps:

Ensure that critical assets were identified and cybersecurity risks were correctly mitigated.
Verify that critical vehicle systems implement effective and correct security measures.
Ensure that extensive tests were performed to validate the implemented security mechanisms.

TÜV SÜD supports YOU with a universal Assessment Approach to ensure Automated Vehicle safety

TÜV SÜD is an independent third-party testing, inspection and accreditation body with over a century of automotive safety, security and performance expertise. We follow the latest cybersecurity standards and regulations, ensuring that assessment reports are up-to-date and enable you to design and verify futureproof secure systems. Our AV permit approach has been successfully applied to a variety of automated mobility solutions, most of which have already been approved by authorities for use on public roads.

TÜV SÜD´S CYBERSECURITY SERVICES FOR AV PERMIT

We support vehicle manufacturers, suppliers and mobility providers to obtain the required testing permit for both single prototype vehicles and prototype fleets. TÜV SÜD can assist you with designing a vehicle that has a sound security concept, or by validating your existing concept.

TECHNICAL ADVICE

TÜV SÜD specialists offer a high level of cybersecurity integration expertise to help you prepare documentation which meets the quality requirements of the cybersecurity assessment approval process.

THREAT ANALYSIS, RISK ASSESSMENT, CYBERSECURITY CONCEPT

Our global experts assist you in identifying the critical components in the automotive eco-system, and evaluating their respective cybersecurity threats and resulting risks. We also ensure that the cybersecurity requirements mitigate the identified threats.

DEVIATION ANALYSIS AND TEST REVIEWS

We ensure that the implemented cybersecurity mechanisms are in line with the cybersecurity concept, and that the security tests verify the implemented controls.