An essential part of an effective cybersecurity engineering process is testing the implementation of a system for vulnerabilities and validating the effectiveness of countermeasures. The SAE J3061 Cybersecurity Guidebook for Cyber-Physical Vehicle Systems provides a recommended framework which organizations can use to implement a cybersecurity engineering process, which includes activities such as integration and testing, penetration testing and verification/validation of cybersecurity requirements at the hardware, software and system levels. This presentation explores the different kinds of testing that are appropriate at each of these process steps and discusses some important differences between cybersecurity testing and more familiar forms of testing. We also consider the necessary scope and depth of cybersecurity testing and suggest examples of how this can be related to cybersecurity requirements, goals and integrity levels, as determined by the threat analysis and risk assessment.
Cybersecurity Testing and Validation
Sae Technical Papers
WCX™ 17: SAE World Congress Experience ; 2017
2017-03-28
Conference paper
English
Integrating Fuzz Testing into the Cybersecurity Validation Strategy
SAE Technical Papers | 2021
|Integrating Fuzz Testing into the Cybersecurity Validation Strategy
British Library Conference Proceedings | 2021
|Enhanced Penetration Testing for Automotive Cybersecurity
British Library Conference Proceedings | 2022
|Enhanced Penetration Testing for Automotive Cybersecurity
SAE Technical Papers | 2022
|