Description

This curriculum spans the breadth of an automotive cybersecurity program typically delivered across multiple workshops and embedded into organizational practices, covering threat assessment, secure architecture design, cryptographic implementation, compliance alignment, and ongoing fleet monitoring comparable to those in OEM-level cybersecurity operations.

Module 1: Threat Landscape and Risk Assessment in Automotive Systems

Conducting vehicle attack surface mapping across ECU interfaces, telematics units, and OTA update mechanisms
Selecting and applying ISO/SAE 21434 threat analysis methods (TARA) to specific vehicle architectures
Identifying high-risk components such as infotainment systems and V2X communication modules for prioritized assessment
Integrating threat intelligence from OEMs, suppliers, and ISACs into ongoing risk modeling
Evaluating third-party component supply chain risks in ECUs sourced from global vendors
Documenting attack paths for remote exploitation via mobile apps and backend cloud services
Mapping regulatory requirements (e.g., UNECE WP.29 R155) to internal risk scoring criteria
Establishing risk acceptance thresholds for legacy vehicle platforms with limited update capabilities

Module 2: Secure Vehicle Network Architectures

Designing zone-based E/E architectures with secure gateways between domains (powertrain, body, ADAS)
Implementing CAN FD message authentication using CMAC or similar lightweight cryptographic methods
Segmenting Ethernet-based in-vehicle networks using AVB/TSN with VLANs and firewall policies
Configuring secure routing policies between domain controllers and central vehicle servers
Enforcing ingress/egress filtering at the vehicle-to-cloud communication boundary
Integrating intrusion detection systems (IDS) at network chokepoints for anomaly detection
Managing performance trade-offs between encryption overhead and real-time control requirements
Validating network resilience under denial-of-service conditions on critical buses

Module 3: Cryptographic Key Management and PKI Integration

Designing a vehicle-specific PKI hierarchy with root, issuing, and end-entity certificate authorities
Provisioning asymmetric key pairs during ECU manufacturing using secure programming stations
Implementing secure boot chains with hardware-backed root of trust and signed firmware images
Managing certificate lifecycle operations (issuance, revocation, renewal) across vehicle fleets
Integrating Hardware Security Modules (HSMs) into backend systems for key storage and signing operations
Handling key rotation strategies for long-lived vehicle platforms with multi-year support cycles
Defining certificate policies for vehicle-to-infrastructure (V2I) and vehicle-to-vehicle (V2V) communications
Addressing key recovery and revocation challenges in disconnected or low-connectivity environments

Module 4: Secure Software Development Lifecycle (SDLC) for Automotive

Integrating security requirements into AUTOSAR software component specifications
Implementing static and dynamic code analysis in CI/CD pipelines for embedded C/C++ codebases
Enforcing secure coding standards (e.g., MISRA C) with automated tooling and gate reviews
Conducting threat modeling during system design phase using STRIDE or PASTA methodologies
Managing open-source software components with SBOM generation and vulnerability scanning
Performing penetration testing on simulated vehicle environments before production release
Establishing defect tracking workflows for security findings across OEM and Tier-1 teams
Validating secure update mechanisms for software, configuration, and calibration data

Module 5: Over-the-Air (OTA) Update Security

Designing end-to-end signed and encrypted update packages with rollback protection
Implementing dual-bank firmware storage to ensure safe fallback after failed updates
Validating update authenticity using public key infrastructure at the ECU level
Rate-limiting and authenticating OTA requests to prevent denial-of-service attacks
Monitoring update progress and integrity across heterogeneous ECUs with varying bootloaders
Enforcing access controls for OTA management consoles based on role-based permissions
Logging and auditing all OTA transactions for forensic and compliance purposes
Coordinating update sequencing across interdependent ECUs to avoid system instability

Module 6: Intrusion Detection and Incident Response in Vehicles

Deploying host-based IDS agents on domain controllers to monitor ECU behavior
Establishing baseline profiles for normal CAN message frequency and payload patterns
Configuring alert thresholds for anomalous signals such as unexpected diagnostic requests
Integrating vehicle-generated alerts into centralized SIEM platforms with fleet-wide correlation
Defining escalation procedures for confirmed cyber incidents involving active vehicles
Designing secure data exfiltration channels for forensic logs without compromising privacy
Conducting red team exercises to validate detection coverage across attack vectors
Coordinating response actions with roadside assistance and dealer networks during incidents

Module 7: Compliance and Regulatory Alignment

Mapping internal security controls to UNECE WP.29 R155 and R156 requirements
Preparing audit documentation for CSMS (Cyber Security Management System) certification
Conducting periodic compliance assessments across global vehicle type approvals
Integrating privacy impact assessments (PIA) for data collected via connected features
Aligning vulnerability disclosure policies with ISO/SAE 21434 and NCSC guidelines
Reporting cybersecurity incidents to regulatory bodies within mandated timeframes
Managing regional differences in data residency and access laws for vehicle telemetry
Updating compliance posture in response to evolving standards such as ISO/SAE 21434 amendments

Module 8: Supply Chain and Third-Party Risk Management

Requiring Tier-1 and Tier-2 suppliers to provide evidence of secure development practices
Conducting security assessments of supplier software deliverables using standardized checklists
Enforcing contractual obligations for vulnerability reporting and patch delivery timelines
Validating security test results from suppliers through independent replication
Managing configuration drift in third-party ECUs across production batches
Establishing secure data exchange protocols for diagnostic and calibration tools from vendors
Monitoring supplier adherence to cybersecurity SLAs during vehicle lifecycle support
Responding to third-party component end-of-life events with risk mitigation plans

Module 9: Post-Production Monitoring and Cybersecurity Operations

Establishing a vehicle security operations center (vSOC) with 24/7 monitoring capabilities
Aggregating and normalizing diagnostic trouble codes and IDS alerts from global fleets
Implementing machine learning models to detect emerging attack patterns across vehicle populations
Coordinating vulnerability remediation between engineering, customer service, and legal teams
Managing public disclosure of vulnerabilities while minimizing exploitation risk
Updating threat models based on real-world attack telemetry and intelligence reports
Conducting tabletop exercises for high-impact scenarios such as fleet-wide compromise
Archiving and retaining security logs to meet forensic and legal requirements