Search Results

Cyber security concerns in the automotive industry have been constantly increasing as automobiles are more computerized and networked. AUTOSAR is the standard architecture for automotive software development, addressing various aspects including security. The current version of AUTOSAR is concerned with only cryptography-based security for secure authentication at the communication level. However, there has been an increasing need for authorization security to control access on software resources such as data and services in the automobile. In this paper, we introduce attribute-based access control (ABAC) to AUTOSAR to address authorization in automotive software.

Modern vehicles can have millions of lines of software, for vehicle control, infotainment, etc. The correctness and quality of the software play a key role in the safety of whole vehicles. In order to assure the safety, engineers give an effort to prove correctness of individual subsystems or their integration using testing or verification methods. One needs to eventually certify that the developed vehicle as a whole is indeed safe using the artifacts and evidences produced throughout the development cycle. Such a certification process helps to increase the safety confidence of the developed software and reduce OEM’s liability. However, software certification in automotive domain is not yet well established, compared to other safety-critical domains, such as avionics and medical devices. At the same time, safety-relevant standards and techniques, including ISO 26262 and assurance cases, have been well adopted.