Embedded Cybersecurity

The enormous increase in the networking of systems gives rise to new risks and dangers. The focus is on protecting sensitive data and the integrity of digital systems. We efficiently identify attack vectors and neutralize them. With our technical understanding, we develop security systems that are flexible enough to adapt to new threats such as quantum computing.

In its Surveillance Review, TÜV Rheinland once again attested to IAV’s high level of professionalism in meeting cybersecurity requirements. The auditors particularly emphasised SecLab’s outstanding expertise in the field of forensics and, in a direct comparison with OEMs and competitors, ranked IAV as a leader due to the depth of its analyses, its established methodology, and its sound technical expertise.

Service portfolio:

UNECE R155, CRA and NIS2 are essential for ensuring the highest security standards and reliability for our customers. We have proven, that we can consult, tailor and manage the complete process and create all work products for our customers.

Benefits:

  • Fewer Incidents: Continuous improvement of the process to meet the highest security standards
  • Earlier action: Transparency via measurable KPIs over the complete development phase
  • Less effort: streamlining of security work products
  • Increased independence: Knowledge transfer and best practices from IAV experts to customer
  • Goal reached: Certification achieved

The development of cybersecurity solutions in accordance with UNECE R155, ISO 21434, CRA, and ISO 24882 is one of our core competencies. We make this expertise available to our customers so they can develop secure products that comply with current regulatory requirements worldwide. In doing so, we actively participate in shaping every stage of the development process and establish lean, practical processes to efficiently achieve our customers’ goals.

Benefits:

  • Less Effort: Continuous improvement of workflow and templates to meet the highest security standards
  • Less Review findings: Harmonized best practices to create cybersecurity documentation
  • Established work product quality: Knowledge transfer and definitions for quality criterias

We handle the entire scope of a project, while the client retains control over the schedule and quality. Our experienced development teams strategically leverage project synergies to maximize efficiency. The scalable collaboration model can be tailored to individual requirements and enables both turnkey solutions and a flexible division of tasks.

Benefits:

  • 24h software delivery capability: Streamlined development with high automation grade
  • High trust in software: Mature classic and agile development processes to the highest quality standards, assessed according to ASPICE Level 2, ASIL, or OEM-specific requirements

Our security experts have extensive experience in identifying and resolving potential vulnerabilities in modern networked systems. The IAV Cybersecurity Lab conducts a comprehensive cybersecurity assessment designed to identify and address relevant risks before a product is launched, thereby contributing to the security and reliability of modern systems.

Benefits:

  • Less effort and time: Focus on the important assets based on attacker motivation
  • Flexibility: Fully equipped security laboratory including a radio shielding cabin to cover a majority of attacks
  • Focus on important issues: Lean report to highlight the critical findings
  • Clarity: Detailed explanation of findings and solutions

Product Safety

IAV offers comprehensive expertise in product safety, combining systems engineering, functional safety, SOTIF and cybersecurity to achieve holistic protection across the entire vehicle lifecycle. With deep experience in automated driving functions, we enable safe and reliable deployment of SAE Level 3 and Level 4 systems through robust architectures, safety concepts and validation strategies.

Service portfolio:

  • Development of safe vehicle architectures as a solid foundation for state-of-the-art vehicle platforms
  • Development of production-ready solutions for autonomous driving at SAE Levels 3 and 4
  • Support for type approval worldwide (regulatory authorities, certification bodies, countries with self-certification)

  • Establishment and management of an end-to-end safety management system
  • Development and application of safety technology for all relevant safety-related deliverables, e.g., in accordance with ISO 26262 or ISO 25119
  • Conducting safety-oriented system analyses, e.g., FMEA, FMEDA, CCA, FTA
  • Preparing documentation and planning and implementing safety verification measures
  • Planning and conducting safety validation

  • End-to-end SOTIF engineering for all relevant safety work deliverables in accordance with ISO 21448
  • Qualitative and quantitative assessment of the remaining SOTIF residual risk
  • Systematic SOTIF-oriented system analyses, e.g., SOTIF-HARA and investigation of relevant trigger conditions
  • Structured development of a traceable SOTIF justification
  • Targeted safety validation

  • Management of all activities and deviations regarding homologation process for several automotive markets
  • Support for type approval worldwide (regulatory authorities, certification bodies, countries with self-certification)

Software Updates

IAV provides end-to-end expertise for highly managed software updates, from Software Update Management (SUMS) compliant strategies and architectures to secure backend solutions, in-vehicle implementation and validation. By tightly integrating cyber security, safety and update management, we enable legally compliant, reliable and efficient software updates as a core enabler of the Software-Defined Vehicle and its indefinite product variants.

Service portfolio:

  • Fast, secure flash updates for mass production and ramp-up phases
  • Automated updates for maximum quality and scalability
  • End-to-end commissioning from prototype to production vehicle
  • Scalable infrastructure available around the clock with OEM connectivity
  • Maximum transparency through comprehensive documentation
  • Continuous monitoring, KPI tracking, and reporting
  • Ongoing optimization of processes, tools, and campaign quality

  • Efficient ECU programming through coordinated software solutions
  • Comprehensive testing, error analysis, and production support
  • Planning and management of global flash and OTA campaigns
  • Secure, efficient software distribution via backend systems

  • Reliable, regulatory-compliant software update processes
  • Analysis and optimization of after-sales and quality processes
  • Development and implementation of new standards to address process gaps
  • Ensuring UNECE compliance for software updates
  • Harmonization of all interfaces across the process landscape
  • End-to-end coordinated processes from development through after-sales
  • Consistently coordinated processes from development through after-sales

Vehicle Safety Systems

As a technology partner, we are driving forward the development of safe vehicles for future mobility. Our focus is on innovative safety technologies that help to reduce the impact of potential accidents. Vision Zero is our guiding principle – striving for a future without traffic fatalities or injuries.

Service portfolio:

  • Occupant sensors and in-cabin monitoring
  • System engineering for vehicle safety
  • Component, function and system tests (HiL & vehicle)
  • Development of restraint systems, occupant and pedestrian protection
  • Parameter set development

  • Crash/sled tests in accordance with legal requirements
  • Testing for all drive concepts: ICE, BEV, HEV, F-Cell and gas vehicles
  • Expertise in airbag impact tests
  • Tests for seatbelt components

Mirko Taubenreuther

Cybersecurity

Gerhard Märker

Vehicle Safety