© 2013 Copyright Southwest Research Institute ® Southwest Research Institute Embedded Systems...
-
Upload
marcus-truitt -
Category
Documents
-
view
216 -
download
2
Transcript of © 2013 Copyright Southwest Research Institute ® Southwest Research Institute Embedded Systems...
![Page 1: © 2013 Copyright Southwest Research Institute ® Southwest Research Institute Embedded Systems Security for Automotive October 3, 2013.](https://reader038.fdocuments.in/reader038/viewer/2022102923/5516b6a0550346f6208b5464/html5/thumbnails/1.jpg)
©2013 Copyright Southwest Research Institute®
Southwest Research Institute® San Antonio, Texas
©2013 Copyright Southwest Research Institute®
Southwest Research Institute
Embedded Systems Security for Automotive
October 3, 2013
![Page 2: © 2013 Copyright Southwest Research Institute ® Southwest Research Institute Embedded Systems Security for Automotive October 3, 2013.](https://reader038.fdocuments.in/reader038/viewer/2022102923/5516b6a0550346f6208b5464/html5/thumbnails/2.jpg)
©2013 Copyright Southwest Research Institute®
2
Southwest Research Institute(SwRI)
•Nonprofit
•Independent
•Applied R&D
•11 TechnicalDivisions
•Serving Auto Industry since 1947
Benefiting government, industry, and the public through innovative science and technology
http://swri.org
![Page 3: © 2013 Copyright Southwest Research Institute ® Southwest Research Institute Embedded Systems Security for Automotive October 3, 2013.](https://reader038.fdocuments.in/reader038/viewer/2022102923/5516b6a0550346f6208b5464/html5/thumbnails/3.jpg)
©2013 Copyright Southwest Research Institute®
Organizational Characteristics
•Applied Research & Development
•Fiscally Stable
•Serve Government, Industry, and the Public
•Technological & Scientific Breadth
•Multidisciplinary Capability
•Internal Research Encouraged–Foster Development of New Technologies
–Investigate New Applications of Existing Technologies
3
![Page 4: © 2013 Copyright Southwest Research Institute ® Southwest Research Institute Embedded Systems Security for Automotive October 3, 2013.](https://reader038.fdocuments.in/reader038/viewer/2022102923/5516b6a0550346f6208b5464/html5/thumbnails/4.jpg)
©2013 Copyright Southwest Research Institute®
Operational Values and Traditions
•Project and Client-Needs Focused
•Commitment to Delivering on Every Project
•Confidentiality Emphasized–Commercial Clients
Low Profile
Unique approach to Intellectual Property and Patent Rights
–Government Clients
Excellent Reputation for Implementation of Security
Two-time winner of James S. Cogswell Outstanding Industrial Security Achievement
Award
4
![Page 5: © 2013 Copyright Southwest Research Institute ® Southwest Research Institute Embedded Systems Security for Automotive October 3, 2013.](https://reader038.fdocuments.in/reader038/viewer/2022102923/5516b6a0550346f6208b5464/html5/thumbnails/5.jpg)
©2013 Copyright Southwest Research Institute®
Automation and Data Systems Division
•One of 11 Technical Divisions at SwRI•Division Overview
–165 Total Staff
–Computer Science, Electrical & Computer Engineering, Physics, Mechanical Engineering, Industrial Engineering
•Three Business Areas–Intelligent Systems Department
–Manufacturing Systems Department
–Communications & Embedded Systems Department
•Quality Processes–SEI/CMMI Level 5
5
![Page 6: © 2013 Copyright Southwest Research Institute ® Southwest Research Institute Embedded Systems Security for Automotive October 3, 2013.](https://reader038.fdocuments.in/reader038/viewer/2022102923/5516b6a0550346f6208b5464/html5/thumbnails/6.jpg)
©2013 Copyright Southwest Research Institute®
Embedded System Security Capabilities
6
![Page 7: © 2013 Copyright Southwest Research Institute ® Southwest Research Institute Embedded Systems Security for Automotive October 3, 2013.](https://reader038.fdocuments.in/reader038/viewer/2022102923/5516b6a0550346f6208b5464/html5/thumbnails/7.jpg)
©2013 Copyright Southwest Research Institute®
Embedded Security Group
• Staff– Multi-disciplinary– Continuous training– Security clearances– Leverage diverse subject
matter experts at SwRI as needed
• Laboratory Facilities– Dedicated secure labs– Specialized facilities
• automotive test track• vehicle-sized anechoic chamber• dynamometers
– Extensive laboratory test and analysis equipment
7
• Business Areas
– Automotive Security– Smart Grid Security– Industrial Control
Systems & SCADA– Oil & Gas– Railway Security– Mobile Device Security– Medical Device Security
Specializing in cyber-physical systems security
![Page 8: © 2013 Copyright Southwest Research Institute ® Southwest Research Institute Embedded Systems Security for Automotive October 3, 2013.](https://reader038.fdocuments.in/reader038/viewer/2022102923/5516b6a0550346f6208b5464/html5/thumbnails/8.jpg)
©2013 Copyright Southwest Research Institute®
Example Projects
•Research–Example: Vehicle Malware DetectionCAN analysis and reverse engineeringPerformed vehicle security analysisDeveloped automotive Tool for Reverse
Engineering, Analysis and Detection – autoTREAD™
Developed anomaly detection techniques
•Design and Development–Example: Secure ECUSecure CommunicationsDeveloped SolutionUtilized in Next-Gen Products
•Penetration Testing–Infotainment systems–Vehicle radios
8
![Page 9: © 2013 Copyright Southwest Research Institute ® Southwest Research Institute Embedded Systems Security for Automotive October 3, 2013.](https://reader038.fdocuments.in/reader038/viewer/2022102923/5516b6a0550346f6208b5464/html5/thumbnails/9.jpg)
©2013 Copyright Southwest Research Institute®
SwRI is Proposing Creation of the
Automotive Consortium for Embedded Security (ACES)
9
![Page 10: © 2013 Copyright Southwest Research Institute ® Southwest Research Institute Embedded Systems Security for Automotive October 3, 2013.](https://reader038.fdocuments.in/reader038/viewer/2022102923/5516b6a0550346f6208b5464/html5/thumbnails/10.jpg)
©2013 Copyright Southwest Research Institute®
10
Headlines
![Page 11: © 2013 Copyright Southwest Research Institute ® Southwest Research Institute Embedded Systems Security for Automotive October 3, 2013.](https://reader038.fdocuments.in/reader038/viewer/2022102923/5516b6a0550346f6208b5464/html5/thumbnails/11.jpg)
©2013 Copyright Southwest Research Institute®
11
Current SwRI Automotive Consortia –
SwRI Has Extensive Experience in Establishing Effective Automotive Consortia
![Page 12: © 2013 Copyright Southwest Research Institute ® Southwest Research Institute Embedded Systems Security for Automotive October 3, 2013.](https://reader038.fdocuments.in/reader038/viewer/2022102923/5516b6a0550346f6208b5464/html5/thumbnails/12.jpg)
©2013 Copyright Southwest Research Institute®
Automotive Consortium for Embedded Security™
• Perform high-risk/high reward pre-competitive R&D
• Serve as independent verification and validation entity
• Develop understanding of industry problems and quantify risks
• Monitor and share threats & industry research
• Keep abreast and provide input for emerging safety and security standards
• Provide members with relevant and actionable results
12
Providing pre-competitive research in automotive embedded systems security to protect the safety, reliability, brand image, trade secrets,
and customer privacy on members' future products
http://aces.swri.org
![Page 13: © 2013 Copyright Southwest Research Institute ® Southwest Research Institute Embedded Systems Security for Automotive October 3, 2013.](https://reader038.fdocuments.in/reader038/viewer/2022102923/5516b6a0550346f6208b5464/html5/thumbnails/13.jpg)
©2013 Copyright Southwest Research Institute®
Potential Projects
• Research– CAN Bus Anomaly / Malware Detection
– CAN Authentication
– ECU Firmware Tamper Protection
– Secure ECU Firmware Update
– Autonomous Vehicle
• Independent Verification and Validation– Vetting of Security Threats
– Validation of Emerging Security Research & Solutions
• Identify Problems and Quantify Risks– Detailed Risk Assessments
• Standards and Specifications– Development of Security Standards & Specifications
– Work with OEMs and Suppliers to Develop Common Requirements 13
![Page 14: © 2013 Copyright Southwest Research Institute ® Southwest Research Institute Embedded Systems Security for Automotive October 3, 2013.](https://reader038.fdocuments.in/reader038/viewer/2022102923/5516b6a0550346f6208b5464/html5/thumbnails/14.jpg)
©2013 Copyright Southwest Research Institute®
Benefits
• ROI: Shared funding to solve basic problems for entire membership
• Early access and license to all technology and data from ACES-funded research
• Access and license to related SwRI internally-funded research (including automotive anomaly detection)
• Opportunity to interact with other OEMs and suppliers to develop future automotive security strategies
• Opportunity to advocate for specific security objectives and directions
14
![Page 15: © 2013 Copyright Southwest Research Institute ® Southwest Research Institute Embedded Systems Security for Automotive October 3, 2013.](https://reader038.fdocuments.in/reader038/viewer/2022102923/5516b6a0550346f6208b5464/html5/thumbnails/15.jpg)
©2013 Copyright Southwest Research Institute®
ACES Information Meeting
• Aimed at potential automotive industry members
• Purpose: – Introduce ACES structure / objectives for
industry feedback / discussion
• Date: October 23, 2013• Location: Sterling Heights, MI
15
![Page 16: © 2013 Copyright Southwest Research Institute ® Southwest Research Institute Embedded Systems Security for Automotive October 3, 2013.](https://reader038.fdocuments.in/reader038/viewer/2022102923/5516b6a0550346f6208b5464/html5/thumbnails/16.jpg)
©2013 Copyright Southwest Research Institute®
Questions?
16
Mark [email protected]+1 (210) 522-3727Southwest Research Institute6220 Culebra Rd.San Antonio, TX 78238United States
http://aces.swri.org