Managing Security Evidence in Safety-Critical Organizations

arXiv:2404.17332v1 Announce Type: cross
Abstract: With the increasing prevalence of open and connected products, cybersecurity has become a serious issue in safety-critical domains such as the automotive industry. As a result, regulatory bodies have become more stringent in their requirements for cybersecurity, necessitating security assurance for products developed in these domains. In response, companies have implemented new or modified processes to incorporate security into their product development lifecycle, resulting in a large amount of evidence being created to support claims …

arxiv assurance automotive automotive industry companies connected critical cs.cr cs.se cybersecurity domains evidence industry issue organizations products regulatory requirements response result safety safety-critical security security assurance serious