6th International VDI Conference - Cyber Security for Vehicles

Welcome & Chair’s Opening Address
Dr. Mathias Dehm, Head of Security & Privacy Research and Governance, Continental AG, Germany

I. Regulations & Standards

Regulatory Approach to Cyber Security & Managing Software Updates at the UNECE

• Overview of the work undertaken at the UNECE in this field
• Proposed regulations & the approach adopted
• How an assessment might be made & supporting documents provided

Dr. Darren Handley, Chair of UN Task Force on Cyber Security & OTA Issues & Cyber Security Lead, Department for Transport, UK

ISO 21434 Road Vehicles – Cyber Security: Impact & Application

• Relation between UNECE WP 29 & ISO 21434
• Impact on the automotive industry & strategy to implement the requirements
• Audit & assessments

Dr. Markus Tschersich, Manager Security & Privacy Standardization & Regulatory Affairs, co-author: Dr. Mathias Dehm, Head of Security & Privacy Research and
Governance, both: Continental AG, Germany

AUTOSAR: Two Platforms enabling the Development of Secure Systems

• AUTOSAR release 19-11 & retrospective on cyber security features
• Adaptive & classic platforms: Compatibility on features & network level
• Securing service oriented communication

Adrian Baruta, Senior Engineer, Toyota Motor Europe, Belgium

Coffee Break

II. Secure E/E Architectures

Cyber Security for Automotive Ethernet Networks

•  Expanding coverage of attacks targeting Automotive Ethernet networks: Invehicle IDS & Automotive SOC working together
• Case studies using real attack scenarios on Automotive Ethernet networks
• Analysis & mitigation of Automotive Ethernet attacks in an Automotive SOC

Matan Atad, Director, Security Architecture, Argus Cyber Security Ltd., Germany

Building a Vehicle Security Architecture

• Security assets & goals
• Attacker & threat model
• Technologies to secure

Alexander Tschache, Security Engineer, co-author: Dr.-Ing. Andre Kohn, Security Engineer, both: Volkswagen AG, Germany

Lunch Break

III. Security Testing

Security Testing: From TARA to Test Coverage & Regression Strategies

• Standards & methods for security testing, ISO 21434 in practice
• Security verification & validation along the life-cycle
• Test-oriented requirements engineering for security
• Grey-box penetration testing for efficient testing

Prof. Dr. Christof Ebert, Managing Director, Vector Consulting Services, Germany

Automotive Pentesting: Implementation & Scaling Challenges

• Pentesting in the automotive industry: Challenges in theory and practice
• From product to project: Scoping
• Opportunities of pentest automation & use of secunet redbox

Felix Friedrich, Head of Sector Pentest & Hardware Security, Secunet Security Networks, Germany

Coffee Break

IV. Strategy & Industry Collaboration

Auto-ISAC in Europe: Addressing European Needs for Automotive Security Information sharing

• What is the mission of the Auto-ISAC & who leads the organization?
• Why does an integrated global Auto-ISAC make sense?
• How can the Auto-ISAC work in Germany & Europe?

Robert Kaster, Chief Technical Expert, Robert Bosch LLC., USA

DevOps and Security in Automotive

• Automotive DevOps: why is it challenging and what are its core principles
• SecDevOps: how are we making Security DevOps an integral part of the design & development process
• Vulnerabilities and the importance of data contextualization

Asaf Atzmon, Vice-President & General Manager, Automotive Cybersecurity BU, Harman, Israel

Chair‘s Closing Remarks & End of Conference Day One

V. Intrusion & Anomaly Detection

Security Areas and Modular IDPS – Architecture Design Elements protecting Automotive Ethernet Networks

• Two architecture design elements: Security Areas and IDPS; definiton of security areas to restrict attack surface
• Modular IDPS consisting of vehicular sensors, actuators & controllers & cloud-based SOC platform
• Anomaly detection on different levels considering latency, automation level & impact

Dr. Georg Gaderer, Senior Manager Automotive Networks, co-author: Dr. Michael Ziehensack, VP Automotive Networks, both: Elektrobit Austria GmbH, Austria

Automotive-IDS, SIEM & SOC for Connected Vehicles

• ECU-installed automotive Intrusion Detection System (IDS) for monitoring in-vehicle network traffics & host
• Cloud-based Security Incident and Event Management (SIEM) system with visualization of the related logs
• Automotive Security Operation Center (SOC) for efficient incident response

Yoshihiro Ujiie, Staff Engineer, Business Innovation Division, Panasonic Corporation, Japan, co-author: Ryo Hirano, Senior Security Professional, both: Panasonic R&D Center Germany GmbH, Germany

CANet: An Unsupervised Intrusion Detection System for High Dimensional CAN Bus Data

• Machine learning based intrusion detection system for the controller area network
• Synthetic benchmark data set for CAN intrusion detection systems
• Comparision between learning based methods

Dr. Markus Hanselmann, Machine Learning Expert, co-authors: Dr. Holger Ulmer, Chief Expert Machine Learning, Dr. Thilo Strauss, Machine Learning Engineer, all: ETAS GmbH, Germany

Coffee Break

Interactive World Café Sessions:

• How to Successfully Establish & Prove Conformity of Cyber Security Management Systems - Dr. Moritz Minzlaff, Senior Manager, ESCRYPT GmbH, Germany
• Integrated Safety & Security Development in the Automotive Domain – Dr. Thomas Liedtke, Principal, KUGLER MAAG CIE GmbH, Germany
• AI & Security – Philipp Veronesi, Managing Director, CYRES Consulting Services GmbH, Germany
• Mastering ISO 21434: Applying Hardware Security Solutions from Rail to Road – Philipp Walczyk, Venture Director, Siemens Technology Accelerator GmbH, Germany

Lunch Break

VI. Future Trends

Cyber Security Considerations for EV and Autonomous Vehicles

• Latest cyber security developments with regard to electric and automated vehicles
• Adoption of cyber security features within these vehicles
• Drivers and effects of up and coming type approvals within WP.29 and the introduction of ISO/SAE 21434

Dr. Paul Sanderson, Cyber Security Senior Technical Specialist, SBD Automotive Ltd., UK

Conquering Safety & Security in Autonomous Vehicles

• Safety & security needs & requirements of autonomous cars
• Considering safety & security already in concept phase
• Multilayer measures & validation techniques

Dr. Daniel Große, DFKI CPS Bremen, Germany

Coffee Break

Autonomous Security for Self Driving Vehicles

• Baking security into the development lifecyle is easier said than done
• Most agile development teams struggle to shift left
• Self defending systems are the way to go to scale security development

Suchit Mishra, CISO, Autonomous Intelligent Driving GmbH, Germany

V2X Communication Security & Cyber Security

• V2X security protocols, PKI & key management
• Differences between the USA & China
• Cyber security & hardware security requirements of the V2X unit
• Crypto-agility in V2X

Dr. André Weimerskirch, VP Cybersecurity & Functional Safety, Lear Corporation, USA

Chair‘s Closing Remarks

End of Conference