4Need for Automated Security Solutions in the Automotive Software Development Lifecycle
SECURITY IS BUILT ON AUTOMATION
Recent results from a survey conducted on the cybersecurity posture in the automotive industry [1] provide valuable insight into the current challenges the automotive industry is facing. This chapter briefly reviews a couple of examples from the survey and highlights the main challenges regarding vulnerabilities in automotive systems. Based on these challenges, this chapter provides some ideas on effective and suitable solutions for automotive organizations to consider in the software development lifecycle. Please note that when discussing automated security solutions in the automotive software development lifecycle, the focus is on security solutions and tools that help organizations develop secure software. These tools are commonly known as application security testing tools, and cover various techniques and approaches for testing such as static code analysis, software composition analysis, dynamic application security testing, fuzz testing, and penetration testing.
As automotive software is growing in complexity and volume, it is useful for the automotive industry to investigate how other software‐based industries are managing their software development lifecycle. A common theme for software‐heavy industries is a culture shift toward DevOps, where an organization can rapidly build, operate, and continuously improve software applications. That is, DevOps ...
Get Building Secure Cars now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
