The automotive industry is in a phase of tremendous change. Trends like electrification, connected and ultimately autonomous cars are creating the biggest revolution this industry has ever seen. Especially the connected and autonomous cars create whole new challenges for the engineers developing them. One of these challenges is security. After having the car become safer and safer for decades we now face the risk of cars becoming unsafe due to a lack of security. Because if you cannot trust your connected, shared or autonomous car, safe travel is no longer guaranteed.
Safety is of course the first concern of carmakers. However, the technological developments on connectivity and data use and storage in a car or a connected back end system also come with a responsibility. Users of modern connected cars need to be sure that their private data is stored and communicated in a secure way. In order to do so, it is not enough to source good components and simply connect them into a network or eco-system. The architecture and security measures of the entire system need to be developed and implemented in a secure way. In the end, the security of the system is like the strength of a chain, an attacker will always look for the weakest link.
Riscure’s automotive security team, consisting of both automotive and security experts, support vehicle manufacturers and supplier to make their vehicles, products and accompanying services secure. Riscure’s expertise is obtained by performing industry and research work in the automotive industry. We have developed services that are beneficial throughout the development life cycle. We can support you before, during and after the manufacturing phase of your products.
Riscure Security Services for Automotive
Riscure has performed >50 security evaluation projects for >25 customers, including
- Source code reviews for Tier 1s and Tier 2s
- Architecture/design reviews for Tier 1s and Tier 2s
- Design reviews and secure boot reviews on chipsets for Top-10 semiconductor powerhouses
- Vulnerability analysis and penetration testing for Tier 1 solutions