1. ASSET - Automotive Software cyber SEcuriTy
Pasi Kuvaja
University of Oulu – M3S Research Unit
eMpirical research on Software, Systems and Services

2. Software Update Anywhere

3. Smart Move
Automotive industries are going through major transition due to many pressures, such as economics, emerging power sources, car as a networked entity, shifts in ownership models, and so on. Automotive ecosystem is fast growing and one of the largest business in Europe and global level. Car as an “intelligent entity” projects a huge value opportunity, where ICT play a key change agent role. The impacts will affect to all aspects of transportation, quality of living and overall cost of ownership.
Open connected platform
New and legacy cars
Mass differentiation
In-car services
After-market innovation
Living service ecosystem
Traffic as an ecosystem
Energy & environment
Mobile technology
Safety and security
Cost and ownership
Conveniency services

4. Security and Safety Challenges
Challenges of interconnected vehicles and open platforms
Technical safety–protection against technical failures
Technical IT security– protection against malicious manipulation & intrusion
Human-centered quality attributes – end-user trust on applications and interconnected computing platforms & security-relevant organizational policies and processes
To deal with these challenges we should study:
How we can ensure security and safety aspect in the context of vehicle2X?
How we can manage safety and security during the software development life-cycle from requirement engineering to the development and deployment especially in open source environment?
How we can provide trustworthy open automotive ecosystem and application store from human-centered perspective?

5. Related research efforts
Conceptual studies: review of security aspects, challenges, and protection mechanisms related to vehicular security
Security of vehicular ad-hoc networks (VANETs): previous issues in the more specific context
Experimental studies evaluating current automotive systems security: threats and defense mechanisms related with the in-vehicle networks, entire automotive platform, or wireless communications channels
Privacy aspect: privacy threats and requirements for vehicular networks and communications
Trust between vehicular applications and encountered entities: different trust models, related metrics, and trust management techniques
Human-centered trust perspectives: aspects of drivers trust in automotive engineering and technology, inter-organizational trust perspective, rational and emotional aspects of trust
Open source software development platforms and ecosystems: experiments on security ensurance in the development and end results e.g. APPSTACLE platform

6. Project idea description
The vision of ASSET research project is to contribute on tools, technology, methodology, and measures to understand and improve safety and security of automotive software developed using open platforms context for vehicle-to-cloud and cloud-to- vehicle environment
For the in-vehicle systems, improved ECUs are required to fulfill safety and cyber-security of connected vehicles particularly in the area of on-board communication
From network and connectivity perspective, sophisticated technologies are required to improve safety and security of connected vehicles particularly in the area of vehicle-to-cloud communication and key management system
From software point of view, sophisticated technologies and a quality-aware process is required to improve security and safety aspects of automotive software applications in specific when they are developed suing open development platforms. The result will include technological and organizational measures in order to better specify, design and develop safe and secure automotive software functions throughout the entire lifecycle of software development, from requirement to quality assurance and deploymen.t
From human-centered point of view, it is important to understand behavioral aspects as essential elements of human-technology interaction and decision-making via developing stakeholder trust building perspective within an automotive application store context.

7. Key opportunities
Contribute to development of sophisticated in-vehicle technologies to deal with cyber security and safety aspects in context of connected vehicles i.e. improved on-board communication systems, key management systems etc.
Provide quality-aware viewpoint for software engineering methodology to deal with safety and security aspects within the development cycle from initial specification to the deployment.
Provide behavioral understanding to support building a trustworthy automotive ecosystem and application store e.g., trust attributes that are relevant for different automotive stakeholders’ and the different types of vehicular systems/applications.
Experimentation in context of ITEA3/APPSTACLE project with 5G connectivity

8. Benefits for key stakeholders
OEMs (Original Equipment Manufacturers)
Improved safety and security in the development cycle
Reduces recalls
Provide trustworthy channel to delivery continuous updates
MNOs (Mobile Network Operators)
New services based on new infrastructures
Capillary networks
Software Industry
Opens new software market area and business models
Driving force for new developments
Consumer
Continuously more trustworthy driving and application purchasing experience
Legacy cars upgrades and improved functionalities
For all:
Improved inter-organizational collaboration within the key stakeholders
Improved quality of automotive applications, communications, and related business models

9. Tentative work packages
WP1. In-Vehicle Safety and Security
aspects inside the vehicle i.e. on-board communication systems, cyber security and etc.
WP2. Network Safety and Security
relevant to vehicle-to-cloud and cloud-to-vehicle environment; aspects beyond the vehicle i.e. key management systems, secure communication channel, data encryption and etc.
WP3. Trustworthy Ecosystem and Application Store
security and safety in the surface layer including end-user and/or inter- organizational trust building perspective in cloud environment
WP4. Demonstration & Experimentation
WP5. Project Management

10. Expertise required Automotive OEM providers
Automotive 1st tier companies
Telecom companies
Safety and security companies
Technology platform developers
5G application developers
Automotive software developers
Car and transportation vehicle manufacturers
Software companies willing to enter automotive software markets

11. Contact details
Pasi Kuvaja University of Oulu / M3S
Kari Liukkunen University of Oulu / M3S

12. Time Schedule New Calls open: March 2017 Opening of the Call
New Calls deadline: September 2017
Link to the Call: