Cyber security assessment of Gateway module

A leading European OEM wanted to conduct security assessment for its Gateway module which was already developed. Vehicle gateway ECU is a critical ECU used for sensor/actuator and control signal routing between ECUs, programming multiple ECUs and diagnostics

Key Highlights of the assessment:

• Complete assessment – threat analysis, threat modeling and vulnerability assessment.
• 72 vulnerabilities were identified in gateway software (including bootloader) in the quick assessment.
• Recommendations provided to fix these vulnerabilities.

The recommended security strategies were adopted by our customer and that became crucial for decision- making of choice of hardware for the next-generation gateway module.   Based on the assessment, customer also decided to get secure bootloader developed.