Consistency for More Than One TARA and Security Element Out of Context Experiences

Consistency for More Than One TARA and Security Element Out of Context Experiences

연구 분야: Verification

학회: European Conference on Software Process Improvement

Automotive SPICE® for Cybersecurity contains Cybersecurity Risk Management process (MAN.7) corresponding to Risk Assessment Methods (ISO/SAE 21434:2021-clause 15). Both standards describe how a Threat Analysis and Risk Assessment (TARA) should be carried out. However, they leave open how, in the event that several TARAs arise at different levels/different points in a life cycle model or a supply chain, these can be synchronized. This paper will outline different scenarios how to perform and synchronize different TARAs performed.