Automotive cybersecurity consulting

Thales elaborates on a cybersecurity policy for connected vehicles and embedded architectures within the IT/IS perimeter. It facilitates the alignment of the cyber strategy among the different stakeholders (conception, engineering, development) 

Thales conducts business risk analysis on the various ECUs and key functions deployed in the vehicle to define threat models, attacker profiles, attack scenarios and the global exposition of cybersecurity risk. This dedicated analysis, current regulations and Cyber Threat Intelligence (CTI) data help us define the right architecture to reduce and mitigate connected car and vehicle security risks. 

The conclusions of the risk analysis and defined threat model lead us to specify the right technical security measures to implement in the global, comprehensive architecture (hardware, software, network, interfaces, functions…).

Using dedicated methodology and penetration testing approaches, we find potential exploitable breaches on the different exposed surfaces, interfaces and components. This enables us to assess the real security level of architectures, ECUs, and off-board services and further address anything needed.