F+S implements automotive security

Details

Tuesday, 04 April 2017

 Security is an issue of increasing importance in automotive applications. The automotive experts at F+S are very well informed about the current problems and solutions with respect to security. For one of our current AUTOSAR projects we are implementing not only as before safety requirements but also security requirements.

For this we first analyzed the security requirements of the overall system and then we used risk and threat models to identify issues. The prioritized results were discussed with our customer and the OEM. Based on this our experts are designing the software architecture, utilizing, for example, modern architecture concepts on the basis of Crypto Abstraction Libraries (CAL, CPL).

We also configure the AUTOSAR Crypto Service Provider (CSM, CRY) and implementing security functions for the data bus, like secure authentication of communication partners.

In addition, we support the testing and verifying of involved compilers and tools for potential security issues. This follows the idea that "a chain is only as strong as its weakest link" and therefore all functional and non-functional security facets of the product have to be evaluated.