Project case study

Multi-Project Cybersecurity Engineering

One cybersecurity engineer across multiple automotive projects — steering wheel switches, drive mode shifters, and a modular kit — covering TARA, secure boot, SecOC, and pen test consultancy.

Project detail

Challenge

A customer faced the daunting task of implementing cybersecurity measures across multiple projects involving steering wheel switches, drive mode shifters, and a standardized modular kit.

The complexity of these projects required a dedicated Cybersecurity expert to guide and coordinate the implementation of Cybersecurity strategies,including TARA (Threat Analysis and Risk Assessment), Cybersecurity concepts, and Cybersecurity plans.

Delivered with success

Outcome

Our cybersecurity engineer successfully tackled the challenge, delivering impactful results across the various projects. In the drive mode shifter project, they devised a secure authentication and communication mechanism for UART on AVR64 chips to facilitate seamless information exchange between two low-power ECUs.

Their expertise further extended to the steering wheel switch project, where they identified and implemented a secure boot solution for the legacy architecture, significantly enhancing the system's resilience against unauthorized access.

Project scope

Responsibilities

Spearheaded cybersecurity activities on multiple projects, providing expert guidance and support
Conducted comprehensive code reviews to identify and mitigate potential cybersecurity vulnerabilities
Offered pen test consultancy, including fuzz testing, to further strengthen the overall cybersecurity posture
Collaborated closely with the customer's engineering teams to ensure seamless integration of cybersecurity measures
Proactively updated the Cybersecurity plan to reflect the evolving project requirements

Project stack

Technologies

Dimensions for version control
Renesas RL78 microcontrollers with Evita Light software development framework
IBM DOORS for requirements management and traceability
Argus Vulnerability Management Tools for vulnerability identification and assessment
Polyspace code analysis tool for static analysis and error detection