The digitalisation of private transport is in full swing. The fact that cybersecurity must also be taken into account in the increasingly complex systems has also become clear to the automotive industry and legislators. The industry standard ISO/SAE 21434, which was adopted at the end of 2021, as well as the recently enacted UN regulation R155, which has been transposed into EU type approval law, place demands on cybersecurity management systems and products in the automotive industry. In this context, the topic of penetration tests on vehicles is also becoming increasingly relevant.
In this project, a modern vehicle with a centralized E/E architecture and its vehicle systems will be systematically investigated with regard to their cybersecurity. A structured approach is to be used that focuses in particular on three technologies: the central vehicle computer, the C-ITS communication and the locking system. The investigations are carried out from the attacker's perspective. During the examination of the vehicle, it should be examined in particular what effects the use of the aforementioned technologies has on the safety of the overall system. In addition to the investigations themselves, the procedure itself is the subject of the project.
See point II.1.4.