MicroConsult Academy GmbH

MicroConsult Academy GmbH

Threats and Attack Scenarios

• Security incidents

• Terms and definitions

• Vulnerability databases

• Impacts

• Classes of attackers

• Case study

• Defense in depth

• Security process/ mindset/ design

• Security development lifecycle (SDL)

• Threat models

Risks and Efforts

• Classic risk management

• Security risk management

• Threat analysis and risk assessment TARA

• IT security risk assessment

• Examples of TARA methods

Generic Application of Countermeasures

• Security attributes

• Cryptography (symmetric, asymmentric, hash, MAC, signatures)

• Example of memory encryption

• Security modules (SHE, HSM, TPM)

• CPU core security

• Secure software

• Security testing

Selected Vulnerabilities and Countermeasures

• Code injection

• Code reuse

• Countermeasures

• Boundary error vulnerabilities

• Side channel attacks

• Debug interface aspects

Norms and Standards

• References

• Extracts from IEC 62443

Security in Safety Context

• Differences and similarities

• Security in safety norms

Cybersecurity Engineering

• ISO/SAE 21434:2021

• Exercises: headlamp system

HINWEIS: Die Kursunterlagen sind auf Englisch