Services
We specialize in cybersecurity for the automobile industry. Our services include Cybersecurity Analysis, Management, Development, Verification and Validation, and Training. We also prepare our customers for cybersecurity audits and assessments and defend on their behalf. Trust us to be your partner in securing your automotive systems and software. Get in touch with us to know more about our services.
The followed standards and regulations are:
1. ISO/SAE 21434:2021 Road vehicles — Cybersecurity engineering
2. ISO/PAS 5112:2022 Road vehicles — Guidelines for auditing cybersecurity engineering
3. ISO/SAE PWI 8477 Road vehicles — Cybersecurity verification and validation
4. ISO/SAE AWI PAS 8475 Road vehicles — Cybersecurity Assurance Levels (CAL) and Targeted Attack Feasibility (TAF)
5. ISO 24089:2023 Road vehicles — Software update engineering
6. UN Regulation No. 155 (UNECE R155) - Cyber security and cyber security management system
7. UN Regulation No. 156 (UNECE R156) - Software update and software update management system
Cybersecurity
Analysis
In cybersecurity analysis, we perform TARA to evaluate, identify, and mitigate cybersecurity risks at the vehicle or system level to prevent cybersecurity attacks.
TARA includes mainly the following activities:
-
Asset Identification
-
Threat scenario identification
-
Impact rating
-
Attack path analysis
-
Attack feasibility rating
-
Risk value determination
-
Risk treatment decision
Cybersecurity
Management
In cybersecurity management, we help companies to implement organizational and project-dependent cybersecurity management-related activities.
It includes the following:
-
Cybersecurity policy and processes
-
Cybersecurity governance
-
Cybersecurity culture
-
Information sharing
-
Organizational cybersecurity audit
-
Cybersecurity activity planning
-
Cybersecurity case
-
Cybersecurity assessment
Cybersecurity
Development
In cybersecurity development, we help companies to develop products in the concept phase, product development phase, and post-development phase according to ISO 21434.
This mainly includes the following:
-
Cybersecurity item definition
-
Cybersecurity goals
-
Cybersecurity requirement
-
Cybersecurity concept
-
Cybersecurity design
-
Cybersecurity mechanisms integration
-
Cybersecurity monitoring
-
Vulnerability analysis
Cybersecurity Verification & Validation
In cybersecurity verification & validation, we help companies to perform verification and validation at the vehicle, item, or ECU level.
This mainly includes the following:
-
Compliance with modeling or coding guidelines
-
Verification including review, analysis, simulation, prototyping, requirement-based test, interface test, and static and dynamic analysis.
-
Performing various testing like functional testing, penetration testing, fuzz testing, etc.
-
Validation of the cybersecurity goals
Cybersecurity
Training
In cybersecurity training, we train a group of people or individuals for the fundamentals of automotive cyber security, ISO/SAE 21434, and other cybersecurity standards, performing Threat Analysis and Risk Assessment, and Cybersecurity product development.