In this work package, methods for security risk analyses are being extended to automated trucks and solutions for holistic security management are being researched. On this basis, security risk analyses and protection concepts for the trucks and their ecosystem will be developed.
Work focuses
Security requirements must be determined exhaustively and comprehensibly
Security by design:
- Derivation of requirements for security systems using security risk analyses
- Protection concept to meet the requirements for fully automated trucks and control centers
Security risk analyses:
- Extension of the established Modular Risk Assessment (MoRA) method to the context of fully automated trucks
- Early integration of security into the new vehicle architecture and the control center
- Avoidance of security incidents and negative effects as well as fulfilment of legal requirements
Security must be considered holistically throughout the entire vehicle life cycle
Security in the vehicle life cycle:
Initial situation:
- Security standards and regulations for individual division
- Heterogeneous development in many (corporate) divisions
- Many interfaces between the division
Danger:
- Lack of identification and treatment of cross-divisional risks
Goal:
- Homogeneous security concept with end-to-end consideration of risks and requirements
- Determination of the dependencies and interfaces between the security standards
- Development of a prototype tool for cross-divisional security management as a shared knowledge base