Security principles

As we saw in the previous section, cryptography provides a foundation for achieving our security objectives. But besides security through cryptography, several equally important security principles ensure that the established trust provided through cryptography is sustained throughout the life of the product. In this section, we’ll explore a subset of NIST-recommended security principles that we deem most relevant to automotive systems. You are encouraged to read the full list [23] and find additional principles that may apply to your system.

Defense in depth

Building automotive systems that are resilient to cyberattacks requires a multi-layered approach to security that holistically secures the vehicle, starting with external supporting systems such as the cloud and backend infrastructure, down to securing the smallest hardware and software components that are relevant to cybersecurity within the vehicle. Relying on a single security protocol or control...