Automotive Security Testing - The Digital Crash Test

Modern vehicles consist of many interconnected, software-based IT components which are tested very carefully for correct functional behavior to avoid safety problems, e.g. the brakes suddenly stop working. However, in contrast to safety testing systematic testing against potential security gaps is not yet a common procedure within the automotive domain. This however could eventually enable a malicious entity being able to attack a safety-critical IT component or even the whole vehicle. Several realworld demonstrations have already shown that this risk is not only academic theory [1] . Facing this challenge, the paper in hand will first introduce some potential automotive security attacks and some important automotive security threats. It then explains in more detail how to identify and evaluate potential security threats for automotive IT components based on theoretical security analyses and practical security testing.