Automotive Cyber Security Fundamentals Training Course

Introduction

• Enhancing automotive functionality, user experience, and safety for government vehicles.

Overview of Automotive Cybersecurity

• Addressing system-level, process-level, and after-sales cybersecurity measures for government fleets.

An Automobile's Most Hackable Surfaces

Inspecting the Architecture

• Identifying vulnerabilities in OEM and Tier supplier platforms for government vehicles.

Software Loading

• Validating software with Secure Boot processes for enhanced security in government fleets.

Hardware Security

• Checking digital signatures and product keys to ensure hardware integrity for government use.

Network Security

• Authenticating communications to prevent unauthorized access in government vehicle networks.

Cloud Security

• Implementing remote monitoring, software updates, and over-the-air (OTA) capabilities for secure government vehicle operations.

Hardening the Architecture

Penetration Testing

• Utilizing automated tools to conduct comprehensive penetration testing for government vehicles.

Reverse Engineering

• Analyzing vehicle communication systems to identify potential security weaknesses for government fleets.

Cryptography

• Implementing OBD cryptography to secure diagnostic interfaces for government vehicles.
• Exploring blockchain technology to enhance data integrity and security in government vehicle systems.

Secure Code Development

• Addressing the shortcomings of secure coding guidelines to improve software security for government vehicles.

Device Testing

• Conducting thorough testing of interoperability, connectivity, and security for government vehicle devices.

Best Practices

• Implementing best practices in cybersecurity management, lifecycle management, and risk management for government vehicle fleets.

Summary and Next Steps