ASSET - Automotive Software cyber SEcuriTy Pasi Kuvaja University of Oulu – M3S Research Unit eMpirical research on Software, Systems and Services pasi.kuvaja@oulu.fi

Software Update Anywhere

Smart Move Automotive industries are going through major transition due to many pressures, such as economics, emerging power sources, car as a networked entity, shifts in ownership models, and so on. Automotive ecosystem is fast growing and one of the largest business in Europe and global level. Car as an “intelligent entity” projects a huge value opportunity, where ICT play a key change agent role. The impacts will affect to all aspects of transportation, quality of living and overall cost of ownership. Open connected platform New and legacy cars Mass differentiation In-car services After-market innovation Living service ecosystem Traffic as an ecosystem Energy & environment Mobile technology Safety and security Cost and ownership Conveniency services

Security and Safety Challenges Challenges of interconnected vehicles and open platforms Technical safety–protection against technical failures Technical IT security– protection against malicious manipulation & intrusion Human-centered quality attributes – end-user trust on applications and interconnected computing platforms & security-relevant organizational policies and processes To deal with these challenges we should study: How we can ensure security and safety aspect in the context of vehicle2X? How we can manage safety and security during the software development life-cycle from requirement engineering to the development and deployment especially in open source environment? How we can provide trustworthy open automotive ecosystem and application store from human-centered perspective?

Related research efforts Conceptual studies: review of security aspects, challenges, and protection mechanisms related to vehicular security Security of vehicular ad-hoc networks (VANETs): previous issues in the more specific context Experimental studies evaluating current automotive systems security: threats and defense mechanisms related with the in-vehicle networks, entire automotive platform, or wireless communications channels Privacy aspect: privacy threats and requirements for vehicular networks and communications Trust between vehicular applications and encountered entities: different trust models, related metrics, and trust management techniques Human-centered trust perspectives: aspects of drivers trust in automotive engineering and technology, inter-organizational trust perspective, rational and emotional aspects of trust Open source software development platforms and ecosystems: experiments on security ensurance in the development and end results e.g. APPSTACLE platform

Project idea description The vision of ASSET research project is to contribute on tools, technology, methodology, and measures to understand and improve safety and security of automotive software developed using open platforms context for vehicle-to-cloud and cloud-to- vehicle environment For the in-vehicle systems, improved ECUs are required to fulfill safety and cyber-security of connected vehicles particularly in the area of on-board communication From network and connectivity perspective, sophisticated technologies are required to improve safety and security of connected vehicles particularly in the area of vehicle-to-cloud communication and key management system From software point of view, sophisticated technologies and a quality-aware process is required to improve security and safety aspects of automotive software applications in specific when they are developed suing open development platforms. The result will include technological and organizational measures in order to better specify, design and develop safe and secure automotive software functions throughout the entire lifecycle of software development, from requirement to quality assurance and deploymen.t From human-centered point of view, it is important to understand behavioral aspects as essential elements of human-technology interaction and decision-making via developing stakeholder trust building perspective within an automotive application store context.

Key opportunities Contribute to development of sophisticated in-vehicle technologies to deal with cyber security and safety aspects in context of connected vehicles i.e. improved on-board communication systems, key management systems etc. Provide quality-aware viewpoint for software engineering methodology to deal with safety and security aspects within the development cycle from initial specification to the deployment. Provide behavioral understanding to support building a trustworthy automotive ecosystem and application store e.g., trust attributes that are relevant for different automotive stakeholders’ and the different types of vehicular systems/applications. Experimentation in context of ITEA3/APPSTACLE project with 5G connectivity

Benefits for key stakeholders OEMs (Original Equipment Manufacturers) Improved safety and security in the development cycle Reduces recalls Provide trustworthy channel to delivery continuous updates MNOs (Mobile Network Operators) New services based on new infrastructures Capillary networks Software Industry Opens new software market area and business models Driving force for new developments Consumer Continuously more trustworthy driving and application purchasing experience Legacy cars upgrades and improved functionalities For all: Improved inter-organizational collaboration within the key stakeholders Improved quality of automotive applications, communications, and related business models

Tentative work packages WP1. In-Vehicle Safety and Security aspects inside the vehicle i.e. on-board communication systems, cyber security and etc. WP2. Network Safety and Security relevant to vehicle-to-cloud and cloud-to-vehicle environment; aspects beyond the vehicle i.e. key management systems, secure communication channel, data encryption and etc. WP3. Trustworthy Ecosystem and Application Store security and safety in the surface layer including end-user and/or inter- organizational trust building perspective in cloud environment WP4. Demonstration & Experimentation WP5. Project Management

Expertise required Automotive OEM providers Automotive 1st tier companies Telecom companies Safety and security companies Technology platform developers 5G application developers Automotive software developers Car and transportation vehicle manufacturers Software companies willing to enter automotive software markets

Contact details Pasi Kuvaja University of Oulu / M3S pasi.kuvaja@oulu.fi +358407693279 Kari Liukkunen University of Oulu / M3S kari.liukkunen@oulu.fi +358294481896

Time Schedule New Calls open: March 2017 Opening of the Call New Calls deadline: September 2017 Link to the Call: https://artemis-ia.eu/h2020calls.html