ABSTRACT Automotive SPICE for Cybersecurity incorporates the Cybersecurity Risk Management process (MAN.7), aligning with the Risk Assessment methods defined in ISO/SAE 21434:2021 (Clause 15). Both standards provide guidance on conducting Threat Analysis and Risk Assessments (TARA). However, they do not specify how to integrate the determination of attack feasibility when multiple TARAs emerge across different development phases. This paper explores how the concept of freedom from interference can facilitate a unified approach to determining attack feasibility in such scenarios.

Automotive SPICE® for Cybersecurity contains Cybersecurity Risk Management process (MAN.7) corresponding to Risk Assessment Methods (ISO/SAE 21434:2021-clause 15). Both standards describe how a Threat Analysis and Risk Assessment (TARA) should be carried out. However, they leave open how, in the event that several TARAs arise at different levels/different points in a life cycle model or a supply chain, these can be synchronized. This paper will outline different scenarios how to perform and synchronize different TARAs performed.

The paper provides insight in techniques for criticality prediction as they are applied within the development of Alcatel 1000 S12 switching software. The primary goal is to identify critical components and to make failure predictions as early as possible during the life cycle and hence reduce managerial risk combined with too early or too late release. The approach is integrated in the development process and starts with complexity based criticality prediction of modules. Modules identified as overly complex are given additional tests or review efforts. Release time prediction and field performance prediction are both based on tailored ENHPP reliability models. For the complete approach of criticality prediction, recent data from the development of a switching system with around 2 MLOC is provided. The switching system is currently in operational use, thus allowing for validation and tuning of the prediction models.