Sergej Japs successfully completed his doctorate on the topic of "Framework for Developing a Cybersecurity Concept According to ISO/SAE 21434 Using Model-Based Systems Engineering" under the supervision of Prof. Dr.-Ing. Roman Dumitrescu. Congratulations to him!
Abstract:
The World Forum for Harmonization of Vehicle Regulations (UNECE WP.29) hasissued UN Regulation No. 155. It defines uniform conditions for the approval of vehicleswith regard to cybersecurity and the CyberSecurityManagement System (CSMS). ACSMS consists of processes to identify, assess and treat cybersecurity risks as part ofthe vehicle development process. Without a valid CSMS, newly produced vehicles maynot be approved in the EU from July 2024.
ISO/SAE 21434 describes detailed requirements for a CSMS. It requires the creation ofa cybersecurity concept, consisting of 15 work products to be created. The creation ofthe cybersecurity concept requires the collaboration of experts from different disciplines.Model-Based Systems Engineering (MBSE) supports the collaboration in the conceptphase and helps to build a common system understanding between the subject matterexperts.
In this work, I present a framework that supports the creation of the 15 work products ofthe concept phase using MBSE. The creation of the work products is done by a processmodel and by using several supporting tools that I have developed. The result is acybersecurity concept according to ISO/SAE 21434.The framework was evaluated in three workshops with subject matter experts from thefield of automotive security engineering, using the Intelligent Speed Assistant applicationexample. The credibility of the work by the subject matter experts was strengthened by areal-life test with a test vehicle.
