Due to new technologies for connectivity, automotive systems shift from a closed to an open system approach.Therefore, automotive systems have a rising demand for security, letting security be an upcoming field in research and practice.Also, the newly published process standard ISO/SAE 21434 demands adjustments in the development process to address cybersecurity.The unique characteristics of automotive systems leave many approaches from other system types inapplicable.This work concentrates on the risk treatment step in the cybersecurity development process.Due to the vast amount of differing terminology, we see the need to define a flexible taxonomy adaptable to several system types and used in systems with normative references.We use this taxonomy to develop a heuristic approach for risk treatment based on a distinct terminology for security requirements.The presented method is extendable to include several trade-off points.

Future automotive software needs to deal with an increasing level of dynamicity, reasoned by the wish for connected driving, software updates, and dynamic feature activation. Such functionalities cannot be properly realized with today's classic AUTOSAR development approach, since it relies on the static configuration of all software units at build time.

A trend in modern in-vehicle networks is the use of network technologies with higher bandwidth such as Automotive Ethernet. As a result, more sophisticated security technologies may be used to secure the communication. In this paper, we investigate whether the Transport Layer Security Protocol (TLS) is applicable to secure in-vehicle networks. First, we identify the security and performance requirements as well as the communication scenarios which must be supported by the TLS communication. Next, we discuss how these requirements can be realized with TLS. This also includes the discussion of the certificate management. Finally, we present and discuss our prototypical TLS implementation on a typical automotive platform and show that TLS is able to fulfill most performance requirements of the automotive industry.