Start Date: August 24, August 31, September 2, September 6 2024

Time: 4 PM CET - 8 PM CET (4 hours each day)

Total Duration: 16 hours

Prerequisite: Automotive Cybersecurity Crash Course

Course Outline:

Module 1: Cybersecurity Requirements in Software Engineering

• Importance of Security Requirements in Secure Software Development

• Identifying Security Requirements based on Threat Models and Risk Assessments

• Methods for Deriving and Documenting Secure Requirements

Module 2: Designing Secure Software Architecture

• Principles and Best Practices of Secure Software Architecture for Automotive Systems

• Applying Secure Architecture Patterns and Strategies (e.g., Least Privilege, Separation of Duties)

• Secure Communication Mechanisms and Data Protection Strategies

Module 3: Practical Exercise: Developing a Secure Software Architecture

• Participants will design a secure system architecture for a given automotive scenario (e.g., Telematics Unit)

• Group Discussion and Feedback on Designed Architectures

Module 4: Integrating Advanced Security Mechanisms

• Hardware Security Modules (HSM) and their role in Automotive Systems

• Over-The-Air (OTA) Updates and Security Considerations

• Secure Onboard Communication (SecOC) Protocols and Implementations

• Integrating Cryptography for Secure Data Communication and Storage

Module 5: Practical Exercise: Implementing Security Mechanisms

• Participants will practice integrating chosen security features (HSM, OTA, SecOC) into their designed architectures

• Collaborative problem-solving and troubleshooting exercises

Module 6: Secure Coding Guidelines and Best Practices

• Writing Secure Code for Automotive Applications

• Mitigating Common Coding Vulnerabilities (e.g., Buffer Overflows, SQL Injection)

• Secure Coding Standards and Best Practices for Automotive (e.g., MISRA C)

Module 7: Practical Exercise: Secure Coding

• Participants will apply secure coding principles in a coding activity focused on automotive functionalities

• Peer code review and discussion to identify and address potential security issues

Module 8: Introduction to Cybersecurity Testing

• Fundamental Security Testing Strategies for Automotive Software

• Overview of Testing Tools and Techniques used in Cybersecurity

Module 9: Cybersecurity Testing in Practice

• Conducting Static and Dynamic Security Tests on Automotive Software

• Case Studies and Analysis: Examining real-world examples of security vulnerabilities and their impact

Module 10: Overview of Penetration Testing

• Planning and Executing Penetration Tests for Automotive Systems

• Practical Considerations for Conducting Ethical Hacking