AVCDL overview

This presentation provides a general overview regarding the creation and use of the Autonomous Vehicle Cybersecurity Development Lifecycle (AVCDL). GitHub repo: https://github.com/AVCDL/AVCDL training source material: https://github.com/AVCDL/AVCDL/tree/main/training/AVCDL%20overview References: Systems and software engineering - Software lifecycle processes https://en.wikipedia.org/wiki/ISO/IEC_12207 Systems and software engineering - System lifecycle processes https://en.wikipedia.org/wiki/ISO/IEC_15288 Road vehicles – Functional safety https://en.wikipedia.org/wiki/ISO_26262 Secure Software Development for Autonomous Vehicles https://www.sae.org/standards/content/iso/sae21434/ Microsoft Security Development Lifecycle (SDL) - simplified implementation http://download.microsoft.com/download/F/7/D/F7D6B14F-0149-4FE8-A00F-0B9858404D85/Simplified Implementation of the SDL.doc NHTSA Cybersecurity Best Practices for the Safety of Modern Vehicles https://www.nhtsa.gov/staticfiles/nvs/pdf/812333_CybersecurityForModernVehicles.pdf NICE Cybersecurity Workforce Framework (NCWF) https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-181r1.pdf Secure Software Development Framework (SSDF) https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.04232020.pdf AVCDL Introductory Blog Post https://github.com/AVCDL/AVCDL/tree/main/background_material/blog_posts UN Regulation No. 155 - Cyber security and cyber security management system https://unece.org/transport/documents/2021/03/standards/un-regulation-no-155-cyber-security-and-cyber-security What is the difference between ISO 9001 and IATF 16949 https://www.qualityze.com/difference-iso-9001-iatf-16949/ Chapters: 00:00 Title 00:15 Introduction 01:01 Lifecycle Basics 01:47 Standards and Regulations Ecosystem 04:32 How Standards Line Up 07:17 AVPDL - Autonomous Vehicle Product Development Lifecycle 08:09 AVPDL - Organizational Processes 08:31 AVPDL - Supplier Processes 08:57 AVPDL - Lifecycle Phases 11:05 Reference Sources 13:05 How Sources Inform the AVCDL 16:34 ISO/SAE 21434 Work Products and Requirements 17:07 ISO/SAE 21434-AVCDL Mapping 17:48 AVCDL Framework 20:06 Design Deficiencies vs Implementation Defects 21:46 V-model Overlay 22:04 V-model View 22:55 Cyclic View 23:34 Cyclic Feedback 24:35 Traceability 26:13 Typical Phase Requirement 30:41 Process Workflows 31:57 Document References 32:17 AVCDL Documents Available 34:04 Assessment Timeline 36:19 GitHub 36:42 Next Steps 37:24 References