Thorough security engineering is critical for the advance of automotive electronic systems. Functional safety today needs information security. Based on the specific challenges of automotive security, OEMs and suppliers have to realize an effective protection against manipulations of automotive E/E systems. Key points in the development of protected E/E systems are the proper identification of security requirements, the systematic realization of security functions, and a security validation to demonstrate that security requirements have been met.
Based on our experiences in several client projects, we show which security engineering activities are required to create secure systems and how these activities can be performed efficiently in the automotive domain.