Building Secure Automotive IoT Applications: Developing robust IoT solutions for next-gen automotive software
()
Dr. Dennis Kengo Oka
Dr. Dennis Kengo Oka is an automotive cybersecurity expert with over 15 years of experience. He has a Ph.D. in automotive security from Chalmers University of Technology in Sweden. He has worked for Volvo, Bosch Group, and held the role of head of engineering and consulting Asia-Pacific. Some highlights of his career include security research for remote diagnostics and over-the-air updates, co-launching the ESCRYPT automotive security practice in Japan, and standardizing cybersecurity testing. Dennis is on the advisory board for Block Harbor, and with over 70 publications, including his book, Building Secure Cars: Assuring the Automotive Software Development Lifecycle, he is also a frequent speaker at international automotive and cybersecurity conferences.
Related to Building Secure Automotive IoT Applications
Related ebooks
Computerised Systems Architecture: An embedded systems approach Rating: 0 out of 5 stars0 ratingsFast-Track to Industrial IoT Success: Mastering the Essentials Rating: 0 out of 5 stars0 ratingsAUTOSAR Fundamentals and Applications: Establishing a solid foundation for automotive software design with AUTOSAR Rating: 0 out of 5 stars0 ratingsEmbedded Systems Programming with C++: Real-World Techniques Rating: 0 out of 5 stars0 ratingsMastering AUTOSAR: A Comprehensive Guide for Automotive Engineers Rating: 0 out of 5 stars0 ratingsPrecision: Principles, Practices and Solutions for the Internet of Things Rating: 0 out of 5 stars0 ratingsCar Key Programming Guide Rating: 0 out of 5 stars0 ratingsPlatform Engineering for Architects: Crafting modern platforms as a product Rating: 0 out of 5 stars0 ratingsVehicular Communication Systems: The Future Outlook on Intelligent Transportation Rating: 0 out of 5 stars0 ratingsCoherent Wireless Power Charging and Data Transfer for Electric Vehicles Rating: 0 out of 5 stars0 ratingsAdvanced Computer Networking: Comprehensive Techniques for Modern Systems Rating: 0 out of 5 stars0 ratingsCode the Classics Volume II Rating: 0 out of 5 stars0 ratingsWireless Security Masterclass: Penetration Testing For Network Defenders And Ethical Hackers Rating: 0 out of 5 stars0 ratingsWow! What a Ride!: A Quick Trip Through Early Semiconductor and Personal Computer Development Rating: 0 out of 5 stars0 ratingsHardware-dependent Software: A Classical Approach Rating: 0 out of 5 stars0 ratingsUltimate Robotics Programming with ROS 2 and Python Rating: 0 out of 5 stars0 ratingsVehicle Safety Communications: Protocols, Security, and Privacy Rating: 0 out of 5 stars0 ratingsSecurity Patterns: Integrating Security and Systems Engineering Rating: 0 out of 5 stars0 ratingsArduino: Building Intelligent Systems with Microcontroller Programming Rating: 0 out of 5 stars0 ratingsFormal Methods Applied to Complex Systems: Implementation of the B Method Rating: 0 out of 5 stars0 ratingsDrone Development from Concept to Flight: Design, assemble, and discover the applications of unmanned aerial vehicles Rating: 0 out of 5 stars0 ratingsMastering Data Engineering: Advanced Techniques with Apache Hadoop and Hive Rating: 0 out of 5 stars0 ratingsEmbedded Rust Programming: Building Safe and Efficient Systems Rating: 0 out of 5 stars0 ratingsIoT Architecture A Clear and Concise Reference Rating: 0 out of 5 stars0 ratingsPneumatics: Driving Precision and Power in Robotics Science Rating: 0 out of 5 stars0 ratingsThe Telecommunications Handbook: Engineering Guidelines for Fixed, Mobile and Satellite Systems Rating: 0 out of 5 stars0 ratingsLearn Digital and Microprocessor Techniques On Your Smartphone: Portable Learning, Reference and Revision Tools. Rating: 0 out of 5 stars0 ratingsInternet of Things Programming Projects: Build exciting IoT projects using Raspberry Pi 5, Raspberry Pi Pico, and Python Rating: 0 out of 5 stars0 ratingsIoT Business Solutions Complete Self-Assessment Guide Rating: 0 out of 5 stars0 ratings
Automotive For You
Car Basics Rating: 5 out of 5 stars5/5California DMV Exam Workbook: 400+ Practice Questions to Navigate Your DMV Exam With Confidence: DMV practice tests Book Rating: 0 out of 5 stars0 ratingsThe Bad Driver's Handbook: Hundreds of Simple Maneuvers to Frustrate, Annoy, and Endanger Those Around You Rating: 4 out of 5 stars4/5The Official Highway Code: DVSA Safe Driving for Life Series Rating: 4 out of 5 stars4/5Auto Repair For Dummies Rating: 5 out of 5 stars5/5Formula One Racing For Dummies Rating: 4 out of 5 stars4/5How to Drive: Real World Instruction and Advice from Hollywood's Top Driver Rating: 4 out of 5 stars4/5The Automotive Repair Guide for Beginners Rating: 5 out of 5 stars5/5Automotive Wiring and Electrical Systems Rating: 5 out of 5 stars5/5Lonely Planet The Vanlife Companion Rating: 4 out of 5 stars4/5How to Rebuild Any Automotive Engine Rating: 0 out of 5 stars0 ratingsThe Little Black Book of Motorcycle Wisdom Rating: 4 out of 5 stars4/5Technical Book of the Car Rating: 0 out of 5 stars0 ratingsThe Grand Tour A-Z of the Car: Everything you wanted to know about cars and some things you probably didn’t Rating: 0 out of 5 stars0 ratingsCarTalks: Car Basics Rating: 4 out of 5 stars4/5Van Life For Dummies Rating: 0 out of 5 stars0 ratingsWelding for Beginners in Fabrication Rating: 4 out of 5 stars4/5Performance Automotive Engine Math Rating: 5 out of 5 stars5/5Automotive Diagnostic Systems: Understanding OBD-I & OBD-II Revised Rating: 4 out of 5 stars4/5Learn to Drive...an Easier Way: Updated for 2020 Rating: 0 out of 5 stars0 ratingsAutomotive Relay Circuit Guide Rating: 0 out of 5 stars0 ratingsOptimum Drive: The Road Map to Driving Greatness (Sports psychology, Motor sports) Rating: 0 out of 5 stars0 ratingsAutomotive Wiring and Electrical Systems Vol. 2: Projects Rating: 5 out of 5 stars5/5Small Gas Engine Repair Rating: 4 out of 5 stars4/5The Caravan & Motorhome Book: the complete guide Rating: 0 out of 5 stars0 ratingsAutomotive Scan Tool PID Diagnostics Rating: 5 out of 5 stars5/5How to Repair Automotive Air-Conditioning & Heating Systems Rating: 5 out of 5 stars5/5
Reviews for Building Secure Automotive IoT Applications
0 ratings0 reviews
Book preview
Building Secure Automotive IoT Applications - Dr. Dennis Kengo Oka
Building Secure Automotive IoT Applications
Copyright © 2024 Packt Publishing
All rights reserved. No part of this book may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written permission of the publisher, except in the case of brief quotations embedded in critical articles or reviews.
Every effort has been made in the preparation of this book to ensure the accuracy of the information presented. However, the information contained in this book is sold without warranty, either express or implied. Neither the authors, nor Packt Publishing or its dealers and distributors, will be held liable for any damages caused or alleged to have been caused directly or indirectly by this book.
Packt Publishing has endeavored to provide trademark information about all of the companies and products mentioned in this book by the appropriate use of capitals. However, Packt Publishing cannot guarantee the accuracy of this information.
Group Product Manager: Preet Ahuja
Publishing Product Manager: Suwarna Rajput
Book Project Manager: Ashwin Kharwa
Senior Editor: Roshan Ravi Kumar
Technical Editor: Irfa Ansari
Copy Editor: Safis Editing
Proofreader: Roshan Ravi Kumar
Indexer: Tejal Soni
Production Designer: Nilesh Mohite
Senior DevRel Marketing Executive: Rohan Dobhal
First published: August 2024
Production reference: 1070824
Published by Packt Publishing Ltd.
Grosvenor House
11 St Paul’s Square
Birmingham
B3 1RB, UK
ISBN 978-1-83546-550-9
www.packtpub.com
To my loving wife, Mai, for your support and patience, and to my wonderful children, Mia, Elina, and Alyssa, for your joy and inspiration.
– Dr. Dennis Kengo Oka
To my late father, Eshwarappa Nadahalli, who provided me with boundless love and care throughout my childhood.
– Sharanukumar Nadahalli
To my family. First and foremost, my wife, Stacie. Then, to my four presidential
daughters: Madison, Reagan, McKinley, and Kennedy.
– Jeff Yost
To my son, Aakash, and daughter, Aaradhya, who are my constant teachers, bringing new lessons and joy into my life each day.
– Ram Prasad Bojanki
Foreword
In their book, Dr. Dennis Kengo Oka, Sharanu Nadahalli, Jeff Yost, and Ram Prasad Bojanki provide a comprehensive overview of developing secure automotive internet of things (IoT) applications, addressing the intricacies and increasing importance of this field as vehicles integrate into the IoT. Understanding the convergence of automotive and IoT domains coupled with cybersecurity is crucial as modern vehicles evolve into sophisticated, interconnected systems.
The development of software-defined vehicles (SDVs), electric vehicles (EVs), connected vehicles (CVs), and increased vehicle automation has led to enhanced features and use cases as well as expanded attack surfaces. For instance, recent API attacks have highlighted vulnerabilities that could potentially affect entire vehicle fleets, underscoring the critical need for robust cybersecurity measures both in the vehicle and the cloud.
This book provides an in-depth exploration of the end-to-end development of automotive IoT applications. It examines current and future automotive technologies, vehicle architectures, and real-world automotive IoT use cases. The authors also address cybersecurity topics and provide insights into standards and methodologies such as ISO/SAE 21434 and secure software development life cycle. Further, the book delves into the complexities of the automotive software supply chain and related cybersecurity risks.
The authors tackle many topics that are often overlooked but highly relevant in everyday work. For example, they provide guidance throughout the different development phases of an automotive IoT application, including system design, vehicle architecture and cloud integration, software component development, deployment, and maintenance within a DevSecOps framework. The book also discusses related aspects such as Automotive SPICE (ASPICE), functional safety, and embedded hardware and software technologies.
For system designers, software developers, security process owners, and practitioners, this book serves as an excellent guide to building secure automotive IoT applications. It offers practical guidance and actionable insights using workflows, tables, diagrams, and illustrations to help you get started. Also, it eases the transition for software engineers from other industries into the automotive sector. Whether your company is in the early stages of developing automotive systems or cloud applications for IoT use cases, this book is an invaluable resource for navigating the complex landscape of automotive IoT.
Dr. André Weimerskirch, VP Product Integrity
Contributors
About the authors
Dr. Dennis Kengo Oka is an automotive cybersecurity expert with over 15 years of experience. He has a Ph.D. in automotive security from Chalmers University of Technology in Sweden. He has worked for Volvo, Bosch Group, and held the role of head of engineering and consulting Asia-Pacific. Some highlights of his career include security research for remote diagnostics and over-the-air updates, co-launching the ESCRYPT automotive security practice in Japan, and standardizing cybersecurity testing. Dennis is on the advisory board for Block Harbor, and with over 70 publications, including his book, Building Secure Cars: Assuring the Automotive Software Development Lifecycle, he is also a frequent speaker at international automotive and cybersecurity conferences.
I would like to express my gratitude to the staff at Packt for their guidance throughout writing this book. My deepest thanks to my co-authors Ram, Sharanu, and Jeff for the amazing collaboration. I would also like to thank my parents, Sven and Etsuko, and my siblings, Alex and Linda, for their unwavering support and encouragement, and for providing an escape to appreciate what truly matters in life.
Sharanukumar Nadahalli is a software engineering manager at Panasonic Automotive Systems of America with over 16 years of experience in the automotive industry. He has held various roles, including SW developer, technical leader, product architect, project manager, and technical manager. Before that, he worked in embedded system software development for over a year. Sharanu is an enthusiastic learner currently focusing on cybersecurity. Sharanu earned a Stanford lead certification from the Stanford University Graduate School of Business. He also holds a master’s degree in general business from Clayton State University, Georgia, and a bachelor’s degree in computer science from Visvesvaraya Technological University, India. Sharanu has also served as an area director in Toastmasters International and remains an active member.
I want to thank Jeff Yost for providing me with the opportunity to work on this assignment. I also thank Ram, Dennis, and Packt for the great collaboration and guidance. I would like to thank Steve Barron for giving me a leadership opportunity at Panasonic Automotive and my mentor, Don Turner, for persistently guiding me on various topics. I also thank my mother, Kalawathi, and my wife, Nagaveena, who always support me in going the extra mile in all things.
Jeff Yost is an engineering manager at Panasonic Automotive Systems of America. He is a 20-year veteran in embedded development and has been in automotive for over 5 years. He has spent most of his career in software but also had a stint as a product line general manager. Jeff enjoys working with teams and developing new products. He graduated with a BSEE from Missouri Science and Technology University before moving to the desert of Tucson and earning a master’s degree in electrical and computer engineering from the University of Arizona. He has 3 US patents and developed many industry-leading products. After enjoying 20 years in the beautiful Pacific Northwest, he relocated to the golf cart community of Peachtree City, Georgia, where he bikes to work daily.
I want to thank a few people who allowed me to get started in the automotive industry. Specifically, I thank Paul Beets who hired me within about two days of first seeing my resume and I thank Steve Barron who put a lot of trust in me in allowing me to lead the software activities on a large and critical program. I also thank my wife, Stacie, for her encouragement and support in all things.
Ram Prasad Bojanki is a seasoned software development professional with over two decades of experience, with a particular focus on the automotive industry for 15 years. Most recently, Ram led the charge at Panasonic North America, Smart Mobility, where he spearheaded the entire lifecycle of the OneConnect Cloud Platform (IoT), from conceptualization and development to delivery and operational management. This experience highlights his well-honed abilities in designing and developing complex products and platforms across diverse environments, including both embedded systems and cloud technologies. He holds a Bachelor’s in Electronics and Instrumentation Engineering from Andhra University, India.
I am deeply grateful to Jeff and Sharanu for extending the invitation to co-author this book, and to Dennis for his invaluable collaboration. My heartfelt thanks also go to my wonderful wife Jeevani and my loving parents Satyanarayana and Lakshmi for their unwavering support.
About the reviewers
Jean Paul Talledo Vilela is a senior technology implementer at VTTI, where he designs, develops, and integrates various transportation technologies for applied automotive research. He also interfaces directly with sponsor technical and management teams to support research development and delivery goals. Some of his current design work includes ADS system integration for SAE Level 4/5 vehicle automation, connected vehicle-to-everything (C-V2X) technology deployment for the work zone, intersection scenarios, and cybersecurity and secured message transactions for V2X communications. In addition, Jean Paul provides technical oversight, quality assurance, and mentoring to developing engineers and strategic research projects.
Dr. Krishnendu Kar is a digital IoT leader who holds a Ph.D. in mechanical engineering from West Virginia University and an MBA from Simon School, University of Rochester. With a decade at General Motors, focusing on vehicle control and diagnostics, he transitioned to IoT 5 years ago, specializing in product development as well as coding AI, computer vision, the AWS cloud, device, and mobile app development for smart home IoT products. At Kidde, he leads the execution of smart home products. He authored Mastering Computer Vision with TensorFlow and created iOS apps Nity: DashCam & AI Map and Stretch Tracker. He enjoys an active lifestyle, engaging in running, home improvement, and social networking.
Balaji Balasubramanian is a passionate engineering professional with over 15 years of experience across different fields, including xEV design and development, automation, and machine learning. Currently, he works for Tata Consultancy Services as an assistant consultant. He handles different roles, ranging from vehicle-level simulation, energy management strategies, eVCU, and BMS software development. He describes himself as purpose-driven and an active member of ASAM, CoE : xEV design and development. In his free time, he codes for data analytics and machine learning algorithms on sports and IoT device data. He received a master’s degree in power electronics from IIT Madras and a bachelor’s degree in electrical and electronics from TCE, Madurai.
I’d like to thank my family and friends for their constant support.
Table of Contents
Preface
Part 1: Introduction to Automotive IoT
1
Automotive Technology Trends
Overview of current automotive trends
CASE
SDV and SOA
Mobile apps and the cloud
Modern software development
Standards and regulations
Introduction to automotive IoT
Automotive IoT
Automotive IoT use case examples
Data management for automotive IoT use cases
Summary
References
2
Introducing Automotive IoT Use Cases
Enhanced driver experience and safety
Connected car services
Advanced driver-assistance systems
Personalized in-car experience
Phone as a key
Optimized fleet management
Real-time vehicle tracking and telematics
Driver performance monitoring
Predictive maintenance
Connected mobility revolution
Smart parking solutions
Vehicle-to-Everything (V2X) communication
Connected supply chain and manufacturing
Summary
References
Part 2: Vehicle Architectures
3
Vehicle Architecture and Frameworks
The scale of vehicle architecture
Distributed architecture
Centralized zonal domain architecture
A central computer with multiple domain-specific SoCs
A central computer with a single SoC
Standard frameworks to support vehicle architecture and IoT
A high-level overview of the domain controller
Summary
References
4
Vehicle Diagnostics
UDS
UDS message structure
DoIP
DoIP message format
DoIP example message flow
Diagnostic communication workflow in Classic AUTOSAR
Diagnostic service management in Adaptive AUTOSAR
Reflecting on the application of remote diagnostics
Summary
References
5
Next Wave of Vehicle Diagnostics
Technical requirements
Needs beyond UDS
SOVD
REST
SOVD example, demo, and details
Example of a diagnostic message using UDS and SOVD
Example of an SOVD interface as part of applications on the server side
SOVD documentation and demo
SOVD and UDS comparison
Summary
References
Part 3: Secure Development for Automotive IoT
6
Exploring Secure Development Processes for Automotive IoT
An overview of security threats and the need for security and secure development processes
New cybersecurity threats
Examples of recent attacks
Simplified threat model of automotive IoT ecosystem
ISO/SAE 21434 and ASPICE for Cybersecurity
ISO/SAE 21434 Overview
ISO/SAE 21434 organizational-level requirements
ISO/SAE 21434 project-level requirements
ASPICE for Cybersecurity overview
ASPICE for Cybersecurity – security activities
NIST Cybersecurity Framework, ISO 27001, SOC 2, and OWASP
NIST Cybersecurity Framework
ISO 27001
SOC 2
OWASP
DevSecOps and agile development
V-model
Agile
Scrum
DevSecOps
Summary
References
7
Establishing a Secure Software Development Platform
Activities in the SSDLC
TARA/threat model
Requirements review
Design review
Code review
Static application security testing
Vulnerability scanning
Fuzz testing
Dynamic application security testing
Interactive application security testing
Penetration testing
Project inventory
Project information and risk level
Cybersecurity assurance level and activities
Example project inventory
Practical steps for establishing a secure software development platform
Purpose and need
Overview of the secure software development platform
Requirements, policies, and compliance
Vulnerability management
AppSec tooling
Common AppSec tooling and test approaches
SAST
SCA
DAST
Fuzz testing
Penetration testing
Summary
References
8
Securing the Software Supply Chain
Software supply chain and distributed development
Overview of the software supply chain
RASIC, vendor security assessments, and CIADs
RASIC
Vendor security assessments
CIADs
Managing risks with OSS
Security vulnerabilities
License compliance
Operational risk
SBOM
SBOM formats
Executive Order 14028
NTIA
OpenChain
Secure software supply chain risk management
Identifying the risks
Assessing the risks
Mitigating the risks
Summary
References
Part 4: Automotive IoT Application Life Cycle
9
System Design of an Automotive IoT Application
System design process overview
UXDD
Use case – remote diagnostics
System components
Vehicle telematics gateway
Vehicle cloud platform
End-user mobile device
Gateway design considerations
GNSS receivers
Wireless communication
Wired communication
CAN
Sensors
SIM/eSIM
Gateway hardware
Cloud design considerations
Device management
Connectivity management
Remote diagnostics applications
Classic vehicle ECU diagnostics
Service-oriented vehicle diagnostics
Regulatory compliance
Build versus buy
Summary
References
10
Developing an Automotive IoT Application
Cloud backend deployment and service models
Deployment models
Service models
Server-based and serverless computing
IoT application architecture
Cloud device gateway
Edge computing
Stream processing
Device management
OTA solutions
Telemetry datastore
Rule engine
Application Programming Interface (API) gateway
Connectivity management
IAM
Vehicle telematics gateway
Remote diagnostics application
Predictive maintenance
Development process
Summary
References
11
Deploying and Maintaining an Automotive IoT Application
The DevSecOps life cycle
The plan stage
CI
The code stage
The build stage
The test stage
CD
The release stage
The deploy stage
The operate stage
The monitor stage
Summary
References
Part 5: Automotive Software Insights
12
Processes and Practices
Introduction to processes and practices
ASPICE
SWE.1 – Software Requirements Analysis
SWE.2 – Software Architectural Design
SWE.3 – Software Detailed Design and Unit Construction
SWE.4 – Software Unit Verification
SWE.5 – Software Integration and Integration Test
SWE.6 – Software Qualification Test
Functional safety
Vocabulary
Risk classification system
Development process
Additional automotive processes and practices
DFMEA
5 Whys root cause analysis
Fishbone
A-B-A testing
Summary
Reference
13
Embedded Automotive IoT Development
Embedded software development
Electrical engineering
Schematics/block diagrams
Datasheets, errata, and application notes
Device drivers
Hardware Abstraction Layer (HAL)
Additional aspects of embedded development
Automotive-focused aspects
Power state management
Operating systems
Hypervisors
Development tools
Life cycle management tools
Software development ecosystem
You and your customers
You and your co-suppliers
You and your suppliers
Summary
References
14
Final Thoughts
Agile
Agile+ASPICE
Automotive embedded testing
Types of testing
Security
Summary
References
Index
Other Books You May Enjoy
Preface
The integration of the internet of things (IoT) into the automotive industry is driving an era of unprecedented innovation and connectivity. This book, Building Secure Automotive IoT Applications is crafted to provide a thorough understanding of the technologies, architectures, security approaches, and development practices that define this evolving field. It is structured into five comprehensive parts, offering both theoretical knowledge and practical insights.
The journey begins with an exploration of current automotive trends and the shift towards IoT applications. Readers will gain insights into the technological advancements that are revolutionizing the industry and the essential infrastructure required for IoT.
The focus then shifts to the evolution of vehicle architectures. Here, the transition from traditional mechanical systems to sophisticated electronic and software-integrated systems is examined, alongside the modern tools and methods used for an example use case based on vehicle diagnostics.
Recognizing the critical importance of cybersecurity, the book delves into secure development practices for automotive IoT. It covers new cybersecurity threats, secure development methodologies, and practical steps for establishing secure development environments. Additionally, strategies for managing risks in the software supply chain are discussed in detail.
The book also provides a detailed look at the life cycle of automotive IoT applications. It covers the end-to-end process of designing, developing, deploying, and maintaining these applications, offering practical guidance and strategies for effective implementation and management.
Finally, the book synthesizes these insights, focusing on the unique aspects of automotive software development. It addresses essential engineering practices, offers guidance for engineers transitioning into the automotive domain, and discusses the collaborative nature of development, including regulatory considerations.
This book aims to be a definitive guide for professionals and enthusiasts alike, blending in-depth theoretical knowledge with practical advice. Whether you are an industry veteran or a newcomer, you will find valuable information to help you navigate and succeed in the dynamic world of automotive IoT.
Who this book is for
If you have been working as an automotive software engineer focused on embedded development, but want to learn about growing IoT development, this book is for you. If you are an IoT software developer but want to learn automotive development, this book is for you. This book is an excellent resource to help you grow your automotive software expertise and prepare for a new career in automotive IoT development.
What this book covers
Chapter 1, Automotive Technology Trends, introduces the reader to automotive trends and describes how the automotive industry is changing to support new use cases for automotive IoT. This chapter gives the reader an overview of the technology trends enabling IoT and introduces relevant terminology and concepts.
Chapter 2, Introducing Automotive IoT Use Cases, introduces several automotive IoT use cases that significantly enhance vehicle functionality and driver safety through connected car services, ADAS, and personalized in-car experiences. Some of these use cases will be referenced throughout the book in the different chapters to allow the reader to follow the various topics on end-to-end automotive IoT application development.
Chapter 3, Vehicle Architecture and Framework, covers the evolution of vehicle architecture, spanning more than two decades, tracing its journey from distributed systems to integrated approaches. We’ll explore essential technologies and frameworks such as Hypervisor, AUTOSAR Classic, and Adaptive AUTOSAR, comparing their roles in modern vehicle design. Key topics include the scale of vehicle architectures and the standard frameworks supporting both vehicle architecture and the IoT landscape.
Chapter 4, Vehicle Diagnostics, introduces key diagnostic protocols in modern automotive systems: Unified Diagnostic Services (UDS) and Diagnostic over Internet Protocol (DoIP), integrated with AUTOSAR. We explore UDS for versatile vehicle diagnostics and firmware updates across communication platforms and delve into DoIP for high-speed diagnostic communication over networks, crucial for predictive maintenance. We discuss the diagnostic communication flow and components for remote diagnostics in AUTOSAR-based systems, emphasizing advanced service management for enhanced flexibility and scalability. These protocols ensure efficient, reliable, and secure vehicle diagnostics in today’s connected automotive landscape.
Chapter 5, Next Wave of Vehicle Diagnostics, covers the evolving landscape of vehicle diagnostics to meet the demands of modern vehicles, including IoT applications. UDS has limitations in adapting to dynamic software-defined vehicles, prompting the need for a more flexible protocol. Enter Service-Oriented Vehicle Diagnostics (SOVD), the next generation of diagnostic protocols tailored for modern vehicles. This chapter provides insights into SOVD, including a demonstration and comparison with UDS. Key topics covered include the necessity beyond UDS, an in-depth look at SOVD, and a demonstration of its application.
Chapter 6, Exploring Secure Development Processes for Automotive IoT, explores how automotive IoT brings new cybersecurity threats and as such there is a need for cybersecurity and for establishing secure software development processes. This chapter discusses security processes and software development methodologies including ISO/SAE 21434, ASPICE for Cybersecurity, the NIST Cybersecurity Framework, ISO 27001, OWASP, and DevSecOps. Additionally, specific cybersecurity activities in the secure software development life cycle are presented.
Chapter 7, Establishing a Secure Software Development Platform, shows how to establish a secure software development platform to help develop secure software for automotive IoT. This chapter gives step-by-step practical guidance on how to establish such a platform and explains the benefits of using this platform approach. Furthermore, several different application security testing approaches are described, as well as how to handle vulnerability management and how to automate security testing.
Chapter 8, Securing the Software Supply Chain, discusses the risks in the software supply chain, due to the plethora of software for automotive IoT use cases provided through it, and presents several practical suggestions on how to address the risks. For example, topics on Cybersecurity Interface Agreement for Development (CIAD), vendor security assessments, open-source software, and Software Bill of Material (SBOM) will be covered.
Chapter 9, System Design of an Automotive IoT Application, details the end-to-end system design of remote vehicle diagnostics use case. It explores the critical balance of desirability, feasibility, and viability in system design, emphasizing a user-centric approach. It provides a comprehensive overview of system components, from telematics gateways to cloud platforms, detailing the technologies and design considerations involved.
Chapter 10, Developing an Automotive IoT Application, explores the software design and development process of automotive IoT applications. It covers cloud backend deployment models, service models, and IoT application architecture. The chapter details software components for both cloud and vehicle telematics gateways, emphasizing the importance of remote diagnostics and predictive maintenance. It also discusses the development process for cloud and embedded software, highlighting key differences and considerations.
Chapter 11, Deploying and Maintaining an Automotive IoT Application, delves into the deployment and maintenance of automotive IoT applications, emphasizing the DevSecOps life cycle. The chapter details activities, tools, and interactions throughout the process, highlighting how deployment pipelines are established and managed across all stages. It also covers security integration, coding, building, testing, releasing, deploying, operating, and monitoring, providing a comprehensive guide to ensuring rapid deployment and maintaining high-quality standards in automotive IoT applications.
Chapter 12, Processes and Practices, explores processes and practices in automotive IoT software development. It covers Automotive SPICE®, functional safety (ISO 26262), and other key processes such as DFMEA and 5 Why Root Cause Analysis. It emphasizes the importance of processes in achieving high-quality software and provides insights into their practical application. The chapter also discusses the challenges and benefits of adopting these processes, highlighting their role in ensuring safety, reliability, and continuous improvement in automotive software engineering.
Chapter 13, Embedded Automotive IoT Development, explores embedded development for automotive IoT applications. It covers essential electrical engineering concepts, device drivers, memory management, and key performance indicators (KPIs). The chapter also delves into automotive operating systems, hypervisors, and the software development ecosystem, emphasizing the importance of collaboration and supplier management in the automotive industry.
Chapter 14, Final Thoughts, offers the authors’ perspectives and insights based on their experiences. It then recaps the book to show you how everything is connected.
Conventions used
There are a number of text conventions used throughout this book.
Code in text: Indicates code words in text, database table names, folder names, filenames, file extensions, pathnames, dummy URLs, user input, and Twitter handles. Here is an example: The client stores the connection configuration for each available resource in a set of .rdp files.
A block of code is set as follows:
#include
#include
#include
using namespace web;
using namespace web::http;
using namespace web::http::experimental::listener;
const utility::string_t base_url = U(http://localhost:8080
);
Bold: Indicates a new term, an important word, or words that you see onscreen. For instance, words in menus or dialog boxes appear in bold. Here is an example: You will then see the Sign in to your account popup.
Tips or important notes
Appear like this.
Get in touch
Feedback from our readers is always welcome.
General feedback: If you have questions about any aspect of this book, email us at [email protected] and mention the book title in the subject of your message.
Errata: Although we have taken every care to ensure the accuracy of our content, mistakes do happen. If you have found a mistake in this book, we would be grateful if you would report this to us. Please visit www.packtpub.com/support/errata and fill in the form.
Piracy: If you come across any illegal copies of our works in any form on the internet, we would be grateful if you would provide us with the location address or website name. Please contact us at [email protected] with a link to the material.
If you are interested in becoming an author: If there is a topic that you have expertise in and you are interested in either writing or contributing to a book, please visit authors.packtpub.com.
Share Your Thoughts
Once you’ve read Building Secure Automotive IoT Applications, we’d love to hear your thoughts! Please click here to go straight to the Amazon review page for this book and share your feedback.
Your review is important to us and the tech community and will help us make sure we’re delivering excellent quality content.
Download a free PDF copy of this book
Thanks for purchasing this book!
Do you like to read on the go but are unable to carry your print books everywhere?
Is your eBook purchase not compatible with the device of your choice?
Don’t worry, now with every Packt book you get a DRM-free PDF version of that book at no cost.
Read anywhere, any place, on any device. Search, copy, and paste code from your favorite technical books directly into your application.
The perks don’t stop there, you can get exclusive access to discounts, newsletters, and great free content in your inbox daily
Follow these simple steps to get the benefits:
Scan the QR code or visit the link below
https://packt.link/free-ebook/978-1-83546-550-9
Submit your proof of purchase
That’s it! We’ll send your free PDF and other benefits to your email directly
Part 1: Introduction to Automotive IoT
This part introduces the reader to automotive IoT by first giving a background on the current automotive landscape and trends, followed by explaining the changes happening in various technologies used in the automotive industry, and then finally doing a deep dive into a couple of automotive IoT use cases that will be referenced throughout the book.
This part has the following chapters:
Chapter 1, Automotive Technology Trends
Chapter 2, Introducing Automotive IoT Use Cases
1
Automotive Technology Trends
The automotive industry is drastically changing. With technology advancements in other industries, including software development methodologies and frameworks, network connectivity, Internet of Things (IoT), and cloud infrastructure, the automotive industry is evolving to deploy novel solutions that make use of these new technology advancements. To utilize these new technology advancements, automotive IoT applications are now being developed and deployed in the automotive industry.
To set the stage and better understand the context, we will first review the current automotive industry trends. We will then give an introduction to automotive IoT and describe the overall ecosystem. We will also provide some example use cases for automotive IoT that explain the end-to-end communication flow.
This chapter will help prospective and existing automotive IoT engineers and managers to better understand the underlying automotive technology trends that are driving automotive IoT development.
In this chapter, we are going to cover the following main topics:
Overview of current automotive trends
Introduction to automotive IoT
Overview of current automotive trends
Welcome to the wonderful world of automotive! Writing a section on automotive trends is always challenging since trends are continuously evolving. Thus, this section becomes a snapshot of the current trends at the time of this writing. Of course, we recognize that something that may be a trend in this snapshot of today may have lost steam in some time and that there may be a new trend, buzzword, or hot topic when you are reading this book.
For example, an excerpt of automotive trends from a book in the 1980s may have sounded something like the following:
"There is a new in-vehicle communication protocol called Controller Area Network (CAN) that will revolutionize communication between Electronic Control Units (ECUs). CAN offers several benefits including reduced complexity of in-vehicle networks, improved scalability, and reduced weight and cost of the wiring. Using CAN allows ECUs to communicate with low latency and high reliability, making it possible to develop new and more advanced features. For example, using CAN it is possible to increase the vehicle performance and