SAE International Journal of Transportation Cybersecurity and Privacy 2019 Special Issue: escar (Embedded Security in Cars) USA 2020 JRN-CY-SI-01

Volume 2, Issue 2, 2019

All articles in this special issue have been carefully selected and are a good mixture of articles around security technology, testing, governance, and standards.

Tom Forest, General Motors, USA
Kevin Harnett, US Department of Transportation/Volpe Center, USA
Rob Lambert, ESCRYPT, Canada
André Weimerskirch, Lear Corporation, USA

The SAE International Journal of Transportation Cybersecurity and Privacy focuses on the Cyber Physical System (CPS) related areas of transportation cybersecurity and privacy. The natural scope includes passenger vehicles and commercial and heavy-duty vehicles, as well as aerospace systems.

The articles included in this special issue contribute to the ongoing discussion about comprehensive analysis of secure boot implementations in vehicles, protecting the OBD-II port, increasing privacy in vehicle-to-everything (V2X) communication networks, and secure updates of vehicles by means of public-key cryptography. The special issue also covers topics including vehicle security laws from a Japanese perspective; about a strategy to specify comprehensive security standards while enabling interoperability, which uses the Uptane standard for security of firmware over-the-air updates as an example, about the V2X communications security standard in China; and fuzz testing of virtualized ECUs.

Article Titles:

- Secure Boot Revisited: Challenges for Secure Implementations in the Automotive Domain
- Securing the On-board Diagnostics Port (OBD-II)
- Contrasting International Vehicle Security Laws from the Japanese Perspective
- Using a Dual-Layer Specification to Offer Selective Interoperability for Uptane
- Pseudonym Issuing Strategies for Privacy-Preserving V2X Communication
- Assuring Vehicle Update Integrity using Asymmetric Public Key Infrastructure (PKI) and Public Key Cryptography (PKC)
- Fuzz Testing Virtual ECUs as Part of the Continuous Security Testing Process
- Security Certificate Management System for V2V Communication in China