This chapter explains the need for cybersecurity monitoring and secure over‐the‐air (OTA) updates based on the current state of the automotive industry and automotive software development. The continuous cybersecurity monitoring activity covers vulnerability management and incident response, thus the automotive organization must have the capabilities to manage and respond to detected vulnerabilities and attacks based on the criticality and relevance. The chapter discusses common challenges for automotive organizations in terms of software inventory, monitoring vulnerabilities, and vulnerable vehicles. It presents an overall solution for securing vehicles after production consisting of release management, monitoring and tracking, and secure OTA updates. The Secure OTA Platform uses best practices for secure communication, and encryption and digital signatures to protect the confidentiality, integrity, and authenticity of the software update packages.
Continuous Cybersecurity Monitoring, Vulnerability Management, Incident Response, and Secure OTA Updates
Building Secure Cars ; 267-288
2021-05-17
22 pages
Article/Chapter (Book)
Electronic Resource
English
You can't fix the unknown — Incident Response and Vulnerability Management in Automotive
British Library Conference Proceedings | 2019
|Projektbezogenes Management der Cybersecurity
Springer Verlag | 2023
|