Security Team Home

Title: GENIVI Security Team Overview:

Abstract:  GENIVI's Automotive Cybersecurity team lead provides the audience with an overview of the GENIVI cybersecurity team initiatives, how you and your organization can become engaged, and lastly what to look forward to in today's cybersecurity workshop track

Keynote Title:   Creating cybersecurity problems through regulation

Abstract:  There have been a number of regulations in the vehicle space which have created a number of cybersecurity headaches. From the original ODB port to the recent ELD mandate for trucks more and more connectivity is being mandated with little regard for cybersecurity.  Where are we now? What is coming next? What should we be looking for to help avoid the problems coming our way?

Title:  Fall 2021 Regulatory and Compliance Update

Abstract:  Cybersecurity and privacy concerns have dominated the news cycle in recent months.  We’ve seen everything from the White House and Congress responding to ransomware payment issues to home EV chargers replete with security vulnerabilities.  Join the Butzel team to hear the latest changes including regulations, requirements for critical infrastructure, Executive Orders, guidance, and draft bills.  We will discuss the issues you need to be prepared for to promote a culture of compliance while meeting new incident reporting obligations and ransom payment guidance.

Title:  Counterfeit Modules, Right to Repair, and Cybersecurity Plans, Challenges and Opportunities

Abstract:  Current state of the art allows secure boot of a small subset of modules on the vehicle bus while allowing diagnostic access with very few restrictions.  We will explore ways to build a stronger foundation for security, safety, and reliability while sharing the right data and allowing the right R2R!

Title:  Making Sense of Security Testing for ISO/SAE 21434

Abstract:  Fuzz Testing? Pen Testing? Vulnerability Scanning? Functional Testing? Verification Testing? Whether you're an automaker or supplier, you'll inevitably need to get comfortable with security testing as ISO/SAE 21434 permeates the automotive supply chain. In this talk, we'll walk through each type of testing to discuss what it is, why it's done, and when/how to do it. Finally, we'll end this talk with a few recommendations for ways you can get ahead of the curve and start thinking about automating cybersecurity testing for ISO/SAE 21434

Title:  Cybersecurity Challenges and Implications in C-ITS

Abstract:  ITS ecosystems are the dominant solution to networks' saturation as they provide several benefits. They contribute to congestion reduction, limitation of emissions and air pollution, avoidance of unexpected incidents on the road, and transportation efficiency.

However, deploying interconnected Intelligent Transport Systems creates several challenges, mainly in terms of safety and cybersecurity. During this session, the current situation will be presented and discussed, focusing on challenges and issues that need to be studied to address the growing needs of the ICT infrastructure.

Cybersecurity Staffing Challenges/Wrap-Up

Abstract:  The GENIVI Security Team Lead, Joby Jester wraps up the talks for today and provides additional industry insight and upcoming automotive cybersecurity event opportunities

GENIVI Security Team Overview

Speaker: Joby Jester, Solutions Architect at Irdeto and GENIVI Security Team Lead 

Abstract: Welcome everyone, About the GENIVI Automotive Cybersecurity Team, How to get involved and engage with the team, and lastly what the agenda for the day will be

On Transforming Automotive Cybersecurity: Bridging gaps, Opportunities, and Diversity

Speaker: Ikjot Saini, Academic Director ASRG And Assistant Professor Academic Network

The Implications of Biometric Data in the Vehicle

Speaker: Jennifer Dukarski, Emerging Technology, IP and Media Litigation at Butzel Long

Abstract: Biometric data includes physical or behavioral human characteristics that can be used to digitally identify a person to grant access to systems, devices or data.  In terms of biotechnology in the car, researchers proclaim “give me 10 biometric sensors in the car and I’ll revolutionize healthcare.”  But collecting this data comes with a price: enhanced security and privacy protections and regulations.  This discussion will look at how global and local legal and regulatory frameworks impact the design, collection, and use of this potential treasure trove of data.  

This topic will:

• Define the scope of biometric data and the regulatory frameworks that apply in the US and internationally
• Address regulatory directives for security and privacy with the collection, storage, and use of biometric data

Navigating the Current Threat Environment 

Fireside: Claudia Rast, Department Chair Cybersecurity at Butzel Long, and Scott Bailey Partner at N1 Discovery

Abstract: It’s hard to overemphasize the importance of maintaining robust privacy and data security measures.  Not only are hackers becoming more sophisticated in their offensive weaponry—even harnessing AI to launch their attacks—but with 1 in 4 Americans continuing to work from home through 2021, threat actors have a broad and largely unprotected threat landscape to harvest. In addition, with fewer employees present at any given time in their traditional office environments, physical security is also important.  Recent trends include hacking insurance companies to discover those insureds that have sufficient cyber coverage to afford high ransom demands.  We will discuss these and other evolving cybersecurity threats that are present today and that we expect in the coming year and will describe the tools and best practices currently available to augment defenses.

OpenXSAM

Speakers: Dirk Leopold, Regional Director at itemis AG, Brandon Barry CEO at Block Harbor Cybersecurity

Abstract: Wouldn’t it be nice if you could export cybersecurity data from your TARA tool and import it into your requirement management platform or verification environment? One of the biggest challenges in automotive security is building cohesion between tools to speed up cybersecurity engineering. https://openxsam.io seeks to achieve this by building an open format to exchange security information for vehicles. In this talk, Itemis will give you an introduction to openXSAM and how it’s used by their TARA platform. Then, Block Harbor will talk about how they envision their integration of openXSAM into their automotive verification environment. You’ll walk away from this talk with new ideas on how you can create a seamless integration between your tools to make your vehicle cybersecurity engineering more efficient and more effective. 

V2X / Cloud Managed Services Security Trends:

Speakers: Brandon Barry, Joby Jester

Abstract: Explore the trends of Automotive Cybersecurity brought to you by ASRG Leadership and the GENIVI Security Team. Chat about the near and far challenges for AV, EV, Mobility, and beyond!  Tune in, sit back, and have a chat with us!

Network Micro-Segmentation Cloaking Technology for Autonomous Vehicles

Speaker: Will Hill, Security Technologist at CuDes, and Greg Shields, Director at NetFoundry

Abstract: In this talk, we discuss a zero-trust cybersecurity solution that prevents remote access to any software app by hiding the internet connection to this app.  Because a hidden-, cloaked-, dark-connection is used, the attack hackers cannot find what does not exist.  A user can also implement micro-segmentation such that one software app can only talk to one other software app.  The software app can be in the cloud or one app of many apps running on any device with an application processor.  Simply put, any app which calls to the internet will be completely hidden from remote access.  This is all orchestrated from the cloud as a 100% software solution and no hardware is involved whatsoever.  It is free to prototype, right now, via the open-source community.

Automotive Security Hacking & Protection Practice

Pre-Recorded: Vincent Zhang - Senior Security Architect at Tencent

Abstract: Since the globally recognized “Tesla Model S remote hacking” public research in 2016, Tencent Security Keen Lab has conducted more than 30 connected vehicle security research projects with industry-leading OEMs. This presentation will illuminate common automotive security threats and attack chains based on our rich research experience, as well as mitigation & protection best practices.

Automotive Ethernet Specific Cybersecurity Protection Solutions with IDS/IPS)    

Speaker: Gilad Bandel, VP Product & Marketing at Arliou Automotive Cybersecurity 

Abstract: The automotive industry is swiftly moving towards automotive Ethernet as the new in-vehicle network core. This technology comes with many new features and benefits, but it also comes with numerous legacy risks from the traditional IT Ethernet landscape, as well as from new, error-prone software that is developed. Automotive Ethernet risks need to be mitigated, with security and protection incorporated into new devices. This lecture will detail solutions to address and mitigate those threats and focus on IDS/IPS required functionality.

Recorded Session, Record Session (pt 2)

ISO 21434 / UNECE WP.29 Update w/OEM Partners

Increased Complexity of Cybersecurity Controls Due to Consolidation of Connected Modules

Perception vs. Reality: How Lack of Collaboration Leads to False Perceptions By Media And Academia

Vehicle Forensics - Digital Evidence from infotainment Systems