MOOC - Automotive Cybersecurity Manager
Testing aspects of cybersecurity
The Unit addresses the different test levels and test methods to be applied in cybersecurity development.
Cybersecurity verification at SW level:
This element includes aspects of what is required in SW testing to cover the cybersecure relevant SW requirements.
CYBER.U4.E1.PC1
General: The student knows about the test methods proposed by the norms SAE J3061, ISO 21434 and the OWASP project.
CYBER.U4.E1.PC2
SW unit test related: The student knows about the MISRA 2012 check using the extension for cybersecurity.
CYBER.U4.E1.PC3
SW unit test related: The student knows about cybersecure relevant criteria to be applied informal code reviews (using the available libraries like OWASP).
CYBER.U4.E1.PC4
SW integration test related: The student knows the cybersecure critical software data and develops test cases to attack the data and assure that the preventive mechanisms are working.
CYBER.U4.E1.PC5
SW integration test related: The student knows about the configuration of a secure comm stack and checks the correct configuration.
CYBER.U4.E1.PC6
SW integration test related: The student knows the criticality of the communication between the main controller OS and the firmware in the HSM and extra test cases to assure that communication are applied.
CYBER.U4.E1.PC7
SW function test related: The student knows the cybersecure critical software functions and develops test cases to attack the software function (e.g. calling it with an unauthorised session ID) and assure that the preventive mechanisms are working.
CYBER.U4.E1.PC8
SW function test related: The student knows how to test all diagnostic services requested by the cybersecurity protocols and that all of them are tested.
CYBER.U4.E1.PC9
SW penetration test related (integration and functional test in SW): The student knows the concept of penetration testing and how to involve such external penetration testing (hacker) teams.
CYBER.U4.E1.PC10
Traceability: The student knows how to link cybersecurity critical SW requirements to test cases and test results.