ASSET Automotive Software cyber SEcuri Ty Pasi Kuvaja

ASSET - Automotive Software cyber SEcuri. Ty Pasi Kuvaja University of Oulu – M 3 S Research Unit e. Mpirical research on Software, Systems and Services pasi. kuvaja@oulu. fi

Software Update Anywhere

Smart Move Automotive industries are going through major transition due to many pressures, such as economics, emerging power sources, car as a networked entity, shifts in ownership models, and so on. Automotive ecosystem is fast growing and one of the largest business in Europe and global level. Car as an “intelligent entity” projects a huge value opportunity, where ICT play a key change agent role. The impacts will affect to all aspects of transportation, quality of living and overall cost of ownership. Open connected platform Traffic as an ecosystem New and legacy cars Energy & environment Mass differentiation Mobile technology In-car services Safety and security After-market innovation Cost and ownership Living service ecosystem Conveniency services

Security and Safety Challenges • Challenges of interconnected vehicles and open platforms • Technical safety–protection against technical failures • Technical IT security– protection against malicious manipulation & intrusion • Human-centered quality attributes – end-user trust on applications and interconnected computing platforms & security-relevant organizational policies and processes • To deal with these challenges we should study: • How we can ensure security and safety aspect in the context of vehicle 2 X? • How we can manage safety and security during the software development life-cycle from requirement engineering to the development and deployment especially in open source environment? • How we can provide trustworthy open automotive ecosystem and application store from human-centered perspective?

Related research efforts 1. Conceptual studies: review of security aspects, challenges, and protection mechanisms related to vehicular security 2. Security of vehicular ad-hoc networks (VANETs): previous issues in the more specific context 3. Experimental studies evaluating current automotive systems security: threats and defense mechanisms related with the in-vehicle networks, entire automotive platform, or wireless communications channels 4. Privacy aspect: privacy threats and requirements for vehicular networks and communications 5. Trust between vehicular applications and encountered entities: different trust models, related metrics, and trust management techniques 6. Human-centered trust perspectives: aspects of drivers trust in automotive engineering and technology, inter-organizational trust perspective, rational and emotional aspects of trust 7. Open source software development platforms and ecosystems: experiments on security ensurance in the development and end results e. g. APPSTACLE platform

Project idea description • The vision of ASSET research project is to contribute on tools, technology, methodology, and measures to understand improve safety and security of automotive software developed using open platforms context for vehicle-to-cloud and cloud-tovehicle environment • For the in-vehicle systems, improved ECUs are required to fulfill safety and cyber-security of connected vehicles particularly in the area of on-board communication • From network and connectivity perspective, sophisticated technologies are required to improve safety and security of connected vehicles particularly in the area of vehicle-to-cloud communication and key management system • From software point of view, sophisticated technologies and a quality-aware process is required to improve security and safety aspects of automotive software applications in specific when they are developed suing open development platforms. The result will include technological and organizational measures in order to better specify, design and develop safe and secure automotive software functions throughout the entire lifecycle of software development, from requirement to quality assurance and deploymen. t • From human-centered point of view, it is important to understand behavioral aspects as essential elements of human-technology interaction and decision-making via developing stakeholder trust building perspective within an automotive application store context.

Key opportunities § Contribute to development of sophisticated in-vehicle technologies to deal with cyber security and safety aspects in context of connected vehicles i. e. improved on-board communication systems, key management systems etc. § Provide quality-aware viewpoint for software engineering methodology to deal with safety and security aspects within the development cycle from initial specification to the deployment. § Provide behavioral understanding to support building a trustworthy automotive ecosystem and application store e. g. , trust attributes that are relevant for different automotive stakeholders’ and the different types of vehicular systems/applications. § Experimentation in context of ITEA 3/APPSTACLE project with 5 G connectivity

Benefits for key stakeholders § OEMs (Original Equipment Manufacturers) § Improved safety and security in the development cycle § Reduces recalls § Provide trustworthy channel to delivery continuous updates § MNOs (Mobile Network Operators) § New services based on new infrastructures § Capillary networks § Software Industry § Opens new software market area and business models § Driving force for new developments § Consumer § Continuously more trustworthy driving and application purchasing experience § Legacy cars upgrades and improved functionalities § For all: § Improved inter-organizational collaboration within the key stakeholders § Improved quality of automotive applications, communications, and related business models

Tentative work packages • WP 1. In-Vehicle Safety and Security • aspects inside the vehicle i. e. on-board communication systems, cyber security and etc. • WP 2. Network Safety and Security • relevant to vehicle-to-cloud and cloud-to-vehicle environment; aspects beyond the vehicle i. e. key management systems, secure communication channel, data encryption and etc. • WP 3. Trustworthy Ecosystem and Application Store • security and safety in the surface layer including end-user and/or interorganizational trust building perspective in cloud environment • WP 4. Demonstration & Experimentation • WP 5. Project Management

Expertise required § Automotive OEM providers § Automotive 1 st tier companies § Telecom companies § Safety and security companies § Technology platform developers § 5 G application developers § Automotive software developers § Car and transportation vehicle manufacturers § Software companies willing to enter automotive software markets

Contact details § Pasi Kuvaja University of Oulu / M 3 S pasi. kuvaja@oulu. fi +358407693279 § Kari Liukkunen University of Oulu / M 3 S kari. liukkunen@oulu. fi +358294481896

Time Schedule Opening of the Call Link to the Call: https: //artemis-ia. eu/h 2020 calls. html New Calls open: March 2017 New Calls deadline: September 2017