Security assurance cases for road vehicles: An industry perspective

Publikationstyp
Conference Paper
Publikationsdatum
2020-08
Sprache
English
Author
Mohamad, Mazen 
Åström, Alexander 
Askerdal, Örjan 
Borg, Jörgen 
Scandariato, Riccardo 
TORE-URI
http://hdl.handle.net/11420/9871
Enthalten in
ACM International Conference Proceeding Series 
Citation
International Conference on Availability, Reliability and Security (ARES 2020)
Contribution to Conference
International Conference on Availability, Reliability and Security, ARES 2020 
Publisher DOI
10.1145/3407023.3407033
Scopus ID
2-s2.0-85090348338
Assurance cases are structured arguments that are commonly used to reason about the safety of a product or service. Currently, there is an ongoing push towards using assurance cases also for cybersecurity, especially in safety critical domains, like automotive. While the industry is faced with the challenge of defining a sound methodology to build security assurance cases, the state of the art is rather immature. Therefore, we have conducted a thorough investigation of the (external) constraints and (internal) needs that security assurance cases have to satisfy when used in the automotive industry. This has been done with 28 participants and in the context of two large automotive companies located in Europe: Company A is a passenger car manufacturer, while Company B is a truck manufacturer. An extended version of this paper is available online at https://arxiv.org/abs/2003.14106.
Schlagworte
Assurance cases
Automotive
Security