Automotive Cybersecurity Engineering Job Roles and Best Practices - Developed for the EU Blueprint Project DRIVES

Vehicle functions are 90% controlled by electronic and software thus, modern vehicles need to comply with cybersecurity standards and data security law. Under the EU Blueprint for Automotive - DRIVES project (www.project-drives.eu), key skills and job roles for future Automotive development are designed. These also include cybersecurity management, cybersecurity engineering, and cybersecurity testing. The working party SOQRATES (www.soqrates.de) agreed to develop the pattern of such skills set in cooperation with DRIVES. Also, to share required best practices and skills to be transferred to allow implementing the norms. This paper provides an overview of the current version of the skills set, and an example of what type of best practice is shared.

[1]  Christian Kreiner,et al.  Integrating Functional Safety, Automotive SPICE and Six Sigma - The AQUA Knowledge Base and Integration Examples , 2014, EuroSPI.

[2]  Christian Kreiner,et al.  Automotive Knowledge Alliance AQUA - Integrating Automotive SPICE, Six Sigma, and Functional Safety , 2013, EuroSPI.

[3]  Risto Nevalainen,et al.  The people aspects in modern process improvement management approaches , 2013, J. Softw. Evol. Process..

[4]  Christian Kreiner,et al.  Automotive SPICE, Safety and Cybersecurity Integration , 2017, SAFECOMP Workshops.

[5]  Risto Nevalainen,et al.  The SPI manifesto and the ECQA SPI manager certification scheme , 2012, J. Softw. Evol. Process..

[6]  Christian Kreiner,et al.  Integrating Automotive SPICE, Functional Safety, and Cybersecurity Concepts: A Cybersecurity Layer Model , 2016 .

[7]  Alexander Much.  Automotive Security: Challenges, Standards, and Solutions , 2016 .

[8]  Eric Armengaud,et al.  Integrated Safety and Security Development in the Automotive Domain , 2017 .

[9]  Christian Kreiner,et al.  The AQUA Automotive Sector Skills Alliance: Best Practice in an Integrated Engineering Approach , 2015 .

[10]  Richard Messnarz,et al.  Experiences with ASPICE 3.1 and the VDA Automotive SPICE Guidelines - Using Advanced Assessment Systems , 2019, EuroSPI.

[11]  Richard Messnarz,et al.  Process and product innovation needs integrated engineering collaboration skills , 2012, J. Softw. Evol. Process..

[12]  Eric Armengaud,et al.  SAHARA: A security-aware hazard and risk analysis method , 2015, 2015 Design, Automation & Test in Europe Conference & Exhibition (DATE).

[13]  Christian Kreiner,et al.  An architectural approach to the integration of safety and security requirements in smart products and systems design , 2018 .

[14]  Richard Messnarz,et al.  The profession of integrated engineering: formation and certification on a European level , 2008 .

[15]  Elena García Barriocanal,et al.  Social responsibility aspects supporting the success of SPI , 2014, J. Softw. Evol. Process..

[16]  Eric Armengaud,et al.  A Comprehensive Safety, Security, and Serviceability Assessment Method , 2015, SAFECOMP.

[17]  Christian Kreiner,et al.  Supporting Cyber-Security Based on Hardware-Software Interface Definition , 2016, EuroSPI.

[18]  Eric Armengaud,et al.  A Review of Threat Analysis and Risk Assessment Methods in the Automotive Context , 2016, SAFECOMP.

[19]  Richard Messnarz,et al.  Experiences with Trial Assessments Combining Automotive SPICE and Functional Safety Standards , 2012, EuroSPI.

[20]  Christian Kreiner,et al.  Need for the Continuous Evolution of Systems Engineering Practices for Modern Vehicle Engineering , 2017, EuroSPI.

[21]  Christian Kreiner,et al.  Automotive Quality Universities - AQUA Alliance Extension to Higher Education , 2016, EuroSPI.

[22]  Richard Messnarz,et al.  Experiences with SQIL - SW Quality Improvement Leadership Approach from Volkswagen , 2017, EuroSPI.

[23]  Christian Kreiner,et al.  EU Project SafEUr - Competence Requirements for Functional Safety Managers , 2012, EuroSPI.

[24]  Richard Messnarz,et al.  Assessment-based learning systems—learning from best projects , 2007 .

[25]  Christian Kreiner,et al.  Implementing Functional Safety Standards - Experiences from the Trials about Required Knowledge and Competencies (SafEUr) , 2013, EuroSPI.

[26]  Richard Messnarz,et al.  DRIVES—EU blueprint project for the automotive sector—A literature review of drivers of change in automotive industry , 2020, J. Softw. Evol. Process..

[27]  Christian Kreiner,et al.  Extending Automotive SPICE 3.0 for the use in ADAS and future self‐driving service architectures , 2018, J. Softw. Evol. Process..

[28]  Richard Messnarz,et al.  Dynamic Learning Organisations Supporting Knowledge Creation for Competitive and Integrated Product Design , 2009 .