Automotive Cyber Security
Hands-on Workshop
Venue : T-works
Starting Date : TBA
Duration : 2 Days
Registration : ₹10,000+ GST
System Engineers, Software Engineers, E/E Architects, and Project Leads involved in vehicle and ECU development. Quality, Process, and Compliance teams responsible for cybersecurity, regulatory adherence, and supplier coordination will also benefit...
Understand the critical role of cybersecurity in modern connected vehicles
Gain clarity on UNECE R155/R156 regulations and their impact on vehicle homologation
Learn practical application of ISO/SAE 21434 across the vehicle lifecycle
Apply TARA outcomes to real engineering and project decisions
Understand secure OTA and software update concepts
Align cybersecurity with functional safety and automotive software processes
Why Automotive Cyber Security
✔ Comprehensive overview of automotive cybersecurity standards and regulatory expectations
✔ Practical application of cybersecurity across the complete vehicle development lifecycle
✔ Real-world understanding of TARA and CSMS through OEM project scenarios
✔ Insights into secure software updates and operational cybersecurity practices
✔ Integrated view of cybersecurity with functional safety and software development processes
✔ End-to-end perspective on supporting cybersecurity from development through vehicle operation.
Key Highlights
✔ Basic understanding of automotive ECU, system, or software development
✔ Familiarity with vehicle development lifecycle concepts
✔ Awareness of automotive software and system workflows
✔ Prior exposure to functional safety, diagnostics, or in-vehicle networks is beneficial but not mandatory
Prerequisites
Program Details
-
Automotive Cybersecurity Landscape
Why cybersecurity is critical in modern connected vehicles
Evolution of threats in vehicle systems (ECUs, networks, backend)
Impact of cybersecurity on vehicle safety, quality, and brand trust
OEM responsibility across vehicle lifecycle
Regulatory Drivers - UNECE R155 & R156
Purpose and scope of UNECE regulations
R155: Cybersecurity management expectations for OEMs
R156: Software update and OTA regulatory intent
How regulations influence vehicle homologation and SOP readiness
Overview of ISO/SAE 21434
Objective and scope of ISO/SAE 21434
Relationship between regulation and standard
Cybersecurity lifecycle concept
Difference between organizational and project-dependent activities
Lifecycle Integration of ISO/SAE 21434
Cybersecurity activities across vehicle lifecycle
Integration with system and software development phases
Information flow between concept, development, and operations
OEM-supplier collaboration perspective
Organizational Cybersecurity Management (CSMS)
Purpose of CSMS in OEM organizations
Key organizational activities and responsibilities
Governance, policies, and competence management
CSMS expectations from a regulatory and audit viewpoint
Project-Dependent Cybersecurity Activities
Project-specific cybersecurity planning
Role of cybersecurity in vehicle programs
Responsibilities of system, software, and project teams
Typical cybersecurity work products at project level
-
Introduction to Threat Analysis and Risk Assessment (TARA)
Objective and importance of TARA
High-level steps in TARA
Assets, threats, attack paths, and risks
TARA outcomes and their role in development decisions
Cybersecurity During Development
Cybersecurity considerations in system and software design
Secure implementation and interface protection concepts
Verification and validation from a cybersecurity angle
Traceability between risks and mitigations
Cybersecurity in Production
Cybersecurity controls during manufacturing
Secure flashing, configuration, and provisioning
Production-related cybersecurity risks
OEM expectations for supplier production readiness
Cybersecurity During Operation & Incident Handling
Cybersecurity monitoring during vehicle operation
Vulnerability handling and incident response concepts
Feedback loop into engineering and CSMS
OEM obligations during post-SOP lifecycle
Introduction to ISO 24089
Purpose and scope of ISO 24089
Relationship with UNECE R156
Secure software update lifecycle
Roles of OEM, backend, and vehicle in updates
Secure Software Update & OTA Concepts
High-level OTA architecture overview
Secure update mechanisms and integrity concepts
Update authorization, verification, and rollback basics
Cybersecurity risks associated with updates
Alignment with Functional Safety & Software Engineering
Relationship between cybersecurity and functional safety
Differences and overlaps between safety and security
Coordination between ISO 26262, ASPICE, and ISO/SAE 21434
Practical alignment in OEM projects
AUTOSAR is no longer optional—it’s foundational.
Move beyond theory and learn AUTOSAR the way it’s used in real ECUs.