Page tree
Skip to end of metadata
Go to start of metadata

Notice: This site is being updated as of July 1, 2021. We look forward to updating you on all of the exciting initiatives we have, so please check back regularly! – Joby

As vehicles become increasingly connected and software-powered, GENIVI recognizes an emerging need for a comprehensive, end-to-end security model. The GENIVI Security Team looks at automotive cybersecurity holistically and delivers guidelines, research, and education that help build, deliver and manage more secure vehicles in the future.

Security Team Charter

The Charter of the GENIVI Security Team is to:

  1. Assemble emerging automotive cybersecurity challenges/solutions/standards and inform stakeholders through published guidelines, briefs, webinars and event presentations
  2. Equip stakeholders to understand and use methods and models for identifying and mitigating cybersecurity attacks on a vehicle
  3. Deliver education that equips software developers and architects with an understanding of typical approaches for attacking a vehicle and with methods of mitigating those attacks with sound software development methods and testing
  4. Advise GENIVI software development activities to deliver more secure solutions for the connected vehicle.

 

Getting Involved / Learn More

Security Team Chair:  Joby Jester (to be confirmed shortly)

Security Team Co-Chair Lead:  Jennifer Dukarski  dukarski@butzel.com

Security Team Co-Chair 2nd:  Brandon Barry  brandon@blockharbor.io

Marketing & GENIVI: michael nunnery MikeNunnery@comcast.net 

Team Meetings occur every other Thursday at 10:00am US Eastern Time  


Next Meeting: August 19, 2021, 1600 CEST, 1000 EDT, 0700 PDT.

https://us06web.zoom.us/j/87394558934?pwd=OHZ3UHJCM1Q0K1Q4M05RTWJGQU9odz09 

One-Page Slide To Promote Security Team: Note:  Joby's email has changed
 


Current Security Team Project Initiatives & Discussions

  • Data Classification 
  • Vehicle Spoofing
  • UNECE WP 29
  • Description Language
  • Security Tools
  • Upcoming Security Conferences & Workshop Presentations & Speaking Opportunities
  • ISO 21434 Updates
  • Cybersecurity Executive Order (related to White House statements on 5/12/2021)

Recent Activities, Reports & Deliverables

Past Activities & Deliverables

Upcoming Events

  • (October 5-8th, 2021 - Virtual All Member Meeting and Security Team Workshop)  (Link is TBD)
    • The GENIVI Security Team is currently seeking speakers, panelists and moderators for this event along with compelling topics/content.  If you are interested in submitting a proposed topic or participating on a panel please contact Mike Nunnery (GENIVI Marketing Manager) at MikeNunnery@comcast.net 
  • (November 16-17, 2021 - LIVE in Novi, MI)  TU Automotive Tech Week (GENIVI Networking Event Link is TBD)
  • (January 5, 2022 - LIVE in Las Vegas)   Connect2Car at CES2022 (link is TBD)
  • (January 5, 2022 - LIVE in Las Vegas at Bellagio Hotel)   GENIVI Networking Reception & Showcase at CES2022 (link is TBD)

Note:  For TU Automotive Events you can use 25% discount code "GENIVI25"

Past Events

Meeting Minutes

Recorded Cybersecurity Talks 

GENIVI Security Team Workshop May 6, 2021

GENIVI Security Team Overview

Speaker: Joby Jester, Solutions Architect at Irdeto and GENIVI Security Team Lead 

Abstract: Welcome everyone, About the GENIVI Automotive Cybersecurity Team, How to get involved and engage with the team, and lastly what the agenda for the day will be

Recorded Session

On Transforming Automotive Cybersecurity: Bridging gaps, Opportunities, and Diversity

Speaker: Ikjot Saini, Academic Director ASRG And Assistant Professor Academic Network


Abstract: With the increasing demand for connectivity and the rapidly evolving Autotech sector, cybersecurity concerns have raised exponentially. The global automotive cybersecurity job markets are in a talent crunch and need reskilling, upskilling, and cross-disciplinary competencies to manage the risks in this emerging cyberspace. SHIELD automotive cybersecurity center of excellence at the University of Windsor is dedicated to the development of industry-ready solutions to meet the rapidly changing technology and threats. SHIELD also focuses on training to lower the barrier to entry and create an industry-ready talent pipeline. To enable knowledge transfer and collaborations among research labs at the academic institutions, globally, ASRG is building an academic network for the researchers and graduate students to provide the support network of auto security scholars. One of the important aspects which are often overlooked is diversity at the workplace. In this emerging field, where both automotive and cybersecurity have records of significantly low representation of women, diversity is a major challenge. In 2021, women hold 25% of the cybersecurity jobs globally (source) which has doubled in a decade. While in automotive, the percentage has increased only by 1% from 2014 to 2018( from 7 to 8), with no women on the executive teams of over half of the top 20 companies. The statistics indicate the grim state of the diversity in automotive cybersecurity in the future. This can only be changed by actively and collectively working on diversity and inclusion.
Recorded SessionNo slides for this session

The Implications of Biometric Data in the Vehicle

Speaker: Jennifer Dukarski, Emerging Technology, IP and Media Litigation at Butzel Long

Abstract: Biometric data includes physical or behavioral human characteristics that can be used to digitally identify a person to grant access to systems, devices or data.  In terms of biotechnology in the car, researchers proclaim “give me 10 biometric sensors in the car and I’ll revolutionize healthcare.”  But collecting this data comes with a price: enhanced security and privacy protections and regulations.  This discussion will look at how global and local legal and regulatory frameworks impact the design, collection, and use of this potential treasure trove of data.  

This topic will:

  • Define the scope of biometric data and the regulatory frameworks that apply in the US and internationally
  • Address regulatory directives for security and privacy with the collection, storage, and use of biometric data
Recorded Session

Navigating the Current Threat Environment 

Fireside: Claudia Rast, Department Chair Cybersecurity at Butzel Long, and Scott Bailey Partner at N1 Discovery


Abstract: It’s hard to overemphasize the importance of maintaining robust privacy and data security measures.  Not only are hackers becoming more sophisticated in their offensive weaponry—even harnessing AI to launch their attacks—but with 1 in 4 Americans continuing to work from home through 2021, threat actors have a broad and largely unprotected threat landscape to harvest. In addition, with fewer employees present at any given time in their traditional office environments, physical security is also important.  Recent trends include hacking insurance companies to discover those insureds that have sufficient cyber coverage to afford high ransom demands.  We will discuss these and other evolving cybersecurity threats that are present today and that we expect in the coming year and will describe the tools and best practices currently available to augment defenses.

Recorded Session

OpenXSAM

Speakers: Dirk Leopold, Regional Director at itemis AG, Brandon Barry CEO at Block Harbor Cybersecurity

Abstract: Wouldn’t it be nice if you could export cybersecurity data from your TARA tool and import it into your requirement management platform or verification environment? One of the biggest challenges in automotive security is building cohesion between tools to speed up cybersecurity engineering. https://openxsam.io seeks to achieve this by building an open format to exchange security information for vehicles. In this talk, Itemis will give you an introduction to openXSAM and how it’s used by their TARA platform. Then, Block Harbor will talk about how they envision their integration of openXSAM into their automotive verification environment. You’ll walk away from this talk with new ideas on how you can create a seamless integration between your tools to make your vehicle cybersecurity engineering more efficient and more effective. 

Recorded Video
Break with the ASRG introduction VideoASRG Video

V2X / Cloud Managed Services Security Trends:

Speakers: Brandon Barry, Joby Jester

Abstract: Explore the trends of Automotive Cybersecurity brought to you by ASRG Leadership and the GENIVI Security Team. Chat about the near and far challenges for AV, EV, Mobility, and beyond!  Tune in, sit back, and have a chat with us!

Recorded Session

Network Micro-Segmentation Cloaking Technology for Autonomous Vehicles

Speaker: Will Hill, Security Technologist at CuDes, and Greg Shields, Director at NetFoundry

Abstract: In this talk, we discuss a zero-trust cybersecurity solution that prevents remote access to any software app by hiding the internet connection to this app.  Because a hidden-, cloaked-, dark-connection is used, the attack hackers cannot find what does not exist.  A user can also implement micro-segmentation such that one software app can only talk to one other software app.  The software app can be in the cloud or one app of many apps running on any device with an application processor.  Simply put, any app which calls to the internet will be completely hidden from remote access.  This is all orchestrated from the cloud as a 100% software solution and no hardware is involved whatsoever.  It is free to prototype, right now, via the open-source community.

Recorded SessionNetworkMicroSegmentation_Day 3_Slides

Automotive Security Hacking & Protection Practice

Pre-Recorded: Vincent Zhang - Senior Security Architect at Tencent

Abstract: Since the globally recognized “Tesla Model S remote hacking” public research in 2016, Tencent Security Keen Lab has conducted more than 30 connected vehicle security research projects with industry-leading OEMs. This presentation will illuminate common automotive security threats and attack chains based on our rich research experience, as well as mitigation & protection best practices.

Automatic Security Hacking & Protection PracticeNo slides for this session

Automotive Ethernet Specific Cybersecurity Protection Solutions with IDS/IPS)    

Speaker: Gilad Bandel, VP Product & Marketing at Arliou Automotive Cybersecurity 

Abstract: The automotive industry is swiftly moving towards automotive Ethernet as the new in-vehicle network core. This technology comes with many new features and benefits, but it also comes with numerous legacy risks from the traditional IT Ethernet landscape, as well as from new, error-prone software that is developed. Automotive Ethernet risks need to be mitigated, with security and protection incorporated into new devices. This lecture will detail solutions to address and mitigate those threats and focus on IDS/IPS required functionality.

Recorded SessionNo slides for this session

Previous GENIVI Virtual Cybersecurity Talks

Titles from Oct 28th Cybersecurity Workshop during AMMVideo Links / Session PlaybackSlides

GENIVI Cybersecurity Industry Focus

Recorded Sessionpptx
Cybersecurity Industry Focus by Strategy Analytics

Recorded SessionRecord Session (pt 2)

pptx
An Alternative Universe without CollaborationRecorded Sessionpptx
Data Privacy for AutomotiveRecorded Session

ISO 21434 / UNECE WP.29 Update w/OEM Partners

Recorded Session

Increased Complexity of Cybersecurity Controls Due to Consolidation of Connected Modules

Recorded Session

Perception vs. Reality: How Lack of Collaboration Leads to False Perceptions By Media And Academia

Recorded Session

Vehicle Forensics - Digital Evidence from infotainment Systems

pdf

Space contributors

{"mode":"list","scope":"descendants","limit":"5","showLastTime":"true","order":"update","contextEntityId":7012490}


  • No labels