Purpose: This course presents the basic concepts of lifecycle security operations for organizations seeking guidance on establishing a practical vehicle cybersecurity operational process. It contains best practices and guidance to help automobile companies design, implement, and operate an effective, everyday cybersecurity function within a business unit and any related organizational unit requiring vehicle cybersecurity operations. The module is designed to provide a top-level understanding of the best practices that underlie an effective automotive cybersecurity operation. The focus is on the operational application in the day-to-day application rather than how these concepts relate. Concept level topics were covered in Security Basics, but this model assumes that base knowledge and builds upon the concepts to start providing capabilities. Therefore, students will learn how to plan, implement, and maintain a secure, continuous lifecycle operation for an automotive application.

Course Description: This course gives general information pertaining to how to look at vehicles communications and networks from a cybersecurity perspective and in particular detail to the automotive industry. Attention to the networks available in vehicles and the protocols they use including standard protocols such as CANBUS and Automotive Ethernet, but also more niche protocols such as FlexRay and legacy protocols often used to exploit a system (due to backwards compatibility requirements) such as K-Line. Students also get hands-on experience using Linux (Kali preferred) and are given labs to execute in a virtual environment with a set of targets.

Course Goals and Application: This course provides the knowledge that engineers can use when creating architecture/design for vehicles (such as ways to implement cryptography, understanding of attack methods such as escalation of privilege and fuzzing), what NIST security guidelines are available for consideration, and the different networks and protocols (and some of their attendant dangers) exist in modern vehicles.

Course Objectives: At the end of this course the learner will understand how to use Kali Linux to assess a security target and will have protocol information and vulnerability information for many of the popular, legacy, and niche protocols used in vehicle communications. They will additionally understand how to implement cryptography in design and in operation. They will understand what common controls and access methods are used generally and will have discussed the most appropriate for the automotive domain. Lastly, students will have knowledge about NIST guidelines for consideration as they design or implement vehicle designs at work.

Example Roles: Product Security Analyst/Vulnerability Analyst/Function Owner/Systems Engineer/Test & Validation Engineer/Pen Tester/Product Security Architect

Alignments:

UNECE R155: Uniform provisions concerning the approval of vehicles with regards to cyber security and cyber security management systems.

UNECE R156: UN Regulation No. 156-Software update and software update management systems.

ISO/FDIS 24089: The requirements and recommendations apply to vehicles, vehicle systems, ECUs, infrastructure, and the assembly and deployment of software update packages after the initial development. It is applicable to organizations involved in software update engineering for road vehicles.

ISO/SAE 21434:2021 Road Vehicles - Cybersecurity Engineering: This document specifies engineering requirements for cybersecurity risk management regarding concept, product development, production, operation, maintenance and decommissioning of electrical and electronic (E/E) systems in road vehicles, including their components and interfaces.

ISO 26262-1:2018: Road Vehicles - Functional Safety. Intended to be applied to safety-related systems that include one or more electrical and/or electronic (E/E) systems and that are installed in series production road vehicles, excluding mopeds.

Prerequisites: Cybersecurity Basics Courses. Refer to Registration Guidance.

Method: Online, On-Demand

Certificate: Certificate of Completion

Module Objective: Learn about the Controller Area Network (CAN bus) comparison to other automotive protocols, discussion on CAN key features e.g., serial network, bus architecture, built in error handling, the physical layer and variations of SW, LSFT, topology (single bus vs. direct connection between every ECU), the CAN node (components of CAN ECU), the data link layer (CAN frame is discussed in detail), error detection in CAN and error frames, fault containment, diagnostics, and J1939 using CAN for heavy duty.

Module Objective: Learn to develop a framework of preparedness for cybersecurity, illustrate elements of a strong cybersecurity framework, manage levels of preparedness in anticipation of reasonable threats, building a framework to assemble and meet the needs of threats as they are identified, and establish an ongoing need for threat analysis in an automotive organization. Learn to define, categorize, and identify risk ownership.

Module Objective: Learn about automotive pen-testing, pen-testing motivation, legal and ethics, the penetration testing process, finding zero-day vulnerabilities, and the understanding of fuzzing. Scope with respect to information gathering, hardware, firmware, radio, and communication analysis is discussed.

Module Objective: Learn how to build/install Kali Linux from a downloaded distribution image, navigate Kali Linux with Linux basic command and graphical user interface techniques, complete Kali Linux system maintenance, updates, upgrades, and package installations, and learn to harden the Kali Linux operating system after installation.

Module Objective: Learn the Open Systems Interconnect (OSI) model’s conceptual framework. Discussion on the basic concepts of the OSI model, overview of conventional OSI layers, cross-layer functions, OSI application to automotive (the internal vehicle network), common vulnerabilities, risk analysis, Control Area Network (CAN bus) transmission, protocols, implementation, and nodes, automotive topologies are discussed, vehicle defense in depth: Threat Analyses and Risk Assessment (TARA), subnetting, and CAN security concerns.

Module Objective: This course draws the distinction of privacy and confidentiality, learn how to set up the characteristics of data and how to protect, learn to define how to link the data, various privacy laws and provisions are discussed.

Module Objective: Learn the methodology of cybersecurity resilience, its three principles, six arguments, and one equation. Learn the importance of cyber resilience to meeting compliance and business continuity needs, how to address your through life resilience needs including the face of cyber attacks, taking advantage of what we know using tools and techniques to achieve cyber resilience outcomes.

Module Objective: Learn the best practices for maintaining vehicle software security, how to test and analyze vehicle type risks and the attendant mitigations, how to implement software assurance in vehicle type design, how to document proper configuration control over vehicle software, and how to develop documentation of vehicle type compliance.