ISO/SAE 21434:2021 & UNECE WP.29 R155/R156Vehicle Cybersecurity 5 Weeks

ISO/SAE 21434 & UN R155/R156 Vehicle Cybersecurity

Perform end-to-end Threat Analysis and Risk Assessments (TARA), attack-tree modeling, Secure Boot, SecOC, HSM/SHE key architectures, and achieve UN R155 vehicle type approval.

Launch Visual Simulator ↓ Open TARA & Security Studio

Production Vehicle Architectural Blueprint

CCC Release 3 Digital Key: UWB Secure Ranging & Relay Attack Mitigation

ISO/SAE 21434 TARA process, UWB Time-of-Flight ranging pulses, BLE handshake, and ECU Hardware Security Module (HSM).

ISO/SAE 21434CCC Release 3UWB IEEE 802.15.4zAES-128 HSM / SecOC

CCC Release 3 Digital Key: UWB Secure Ranging & Relay Attack Mitigation

OFFICIAL AUTOSYS TECHNICAL CAD BLUEPRINT

Hands-On Engineering Practice

Interactive Domain Laboratory & Case Studies

Complete each stage interactively with visual architectural schematics, case studies, and voice dictation.

ISO/SAE 21434 & UN R155 Cybersecurity Laboratory

Vehicle Threat Analysis (TARA) & Security Engineering

From Asset Identification and STRIDE Threat Modeling through Attack Feasibility Scoring, Hardware Security Modules (HSM), and SecOC message authentication.

System Item:

ISO/SAE 21434 Clause 15.3

Stage 1: Cybersecurity Asset Identification & Attack Surface

Target: Smart Vehicle Access

Wireless Interfaces (Over-the-Air)

Bluetooth Low Energy (2.4 GHz), Ultra-Wideband (6.5 - 8.0 GHz), Cellular 4G/5G, and NFC (13.56 MHz).

In-Vehicle Bus Interfaces

Chassis CAN-FD (500k/2M), Diagnostic Ethernet (100BASE-T1), and LIN sub-bus for door handle sensors.

Cryptographic Assets

Master Root Keys, Ephemeral Session Keys, Vehicle VIN certificates, and Monotonic Freshness Counters.

ISO/SAE 21434 UWB Secure Ranging and Relay Attack Mitigation

CCC RELEASE 3 DIGITAL KEY & UWB SECURE RANGINGISO/SAE 21434 TARA

Cryptographic Architecture: IEEE 802.15.4z Scrambled Timestamp Sequence (STS) with HSM AES-128 CMAC.Relay Attack Countermeasure

Trainee Lab Exercise: Defend Against Relay AttacksSpeak or Type your response

Question: How does Ultra-Wideband (UWB) Time-of-Flight ranging prevent the classic RF amplifier relay attack on standard Bluetooth Low Energy key fobs?

Stage 1 of 7

Interactive ISO/SAE 21434 TARA Simulator

Threat Analysis & Attack Feasibility Sandbox

Evaluate vehicle cybersecurity attack potential and verify hardware-software defense architectures.

Attack Feasibility Parameters (Clause 15)

Physical tap into headlight/wheel-well CAN wiring harness

Attacker Expertise Required

Equipment / Tooling Cost

Window of Opportunity

TARA Risk Score Assessment

Risk Value:Risk Level 4 / 5

Target Asset:Body Control Module (BCM) CAN-FD Bus

Impact on Safety/Theft:4 / 5

Attack Feasibility Rating:Medium

Mandated Security Countermeasure:

AUTOSAR SecOC with monotonic freshness counters and CMAC authentication

Complies with UN R155 Cyber Security Management System (CSMS)

Interactive Visual Masterclass🎙️ NotebookLM Multi-Speaker Engine● Daily Stacked Episode #1

ISO/SAE 21434 TARA: Asset Identification, STRIDE & Attack Feasibility

Featuring Dr. Aris Thorne (Senior Safety Fellow) & Elena Vance (Principal Safety Assessor) · Added 2026-10-01 · 26 mins

VEHICLE CAD ARCHITECTUREClick to Inspect Subsystems →

Dr. Aris Thorne

Senior Safety Fellow

Elena Vance

Principal Assessor

Dr. Aris Thorne(Senior Safety Fellow)

Elena, under UN Regulation 155, an OEM cannot sell a vehicle in Europe or Japan without a certified Cyber Security Management System (CSMS). Where must every automotive cybersecurity engineer start?

Elena Vance(Principal Safety Assessor)

Everything begins with TARA: Threat Analysis and Risk Assessment under ISO/SAE 21434 Clause 15. You first identify your Cybersecurity Assets—like the cryptographic private key in a Digital Key smart fob, or the braking actuation command on CAN-FD. Then you assess the Damage Scenario: What happens if an attacker tampers with that asset?

Dr. Aris Thorne(Senior Safety Fellow)

And how do we calculate Attack Feasibility?

Elena Vance(Principal Safety Assessor)

We use the Attack Potential method across five parameters: Elapsed Time, Specialist Expertise, Knowledge of the Item, Window of Opportunity, and Specialized Equipment. If an attack requires a PhD expert with $500,000 lab equipment and physical access for two months, Attack Feasibility is Low. If it can be done over Wi-Fi from 100 meters away by a script kiddie in 5 minutes, Attack Feasibility is High, and risk treatment is mandatory.

Line 1 of 425% Complete

100%

ISO/SAE 21434 TARA: Asset Identification, STRIDE & Attack Feasibility· 26 mins

Master the Threat Analysis and Risk Assessment (TARA) workflow required by UN R155: Asset identification, damage scenarios, STRIDE threat cataloging, and calculating Attack Feasibility via CVSS & Attack Potential methods.

Stacked Masterclass Series (3)Daily Cadence

Hardware & Software Interfaces

BLE / UWB Attack Surface

Wireless interface subject to signal boosting, eavesdropping, and session spoofing.

Hardware Security Module

Dedicated silicon core executing cryptographic MAC generation without leaking keys.

CAN-FD Network Bus

Internal vehicle network protected by SecOC freshness counters to prevent replay attacks.

Relay Attack Threshold

Time-of-Flight verification bounding vehicle unlock to under 50 nanosecond transit delays.

Independent Engineering Takeaways

Identifying cybersecurity assets and evaluating SFOP (Safety, Financial, Operational, Privacy) impacts
Calculating Attack Potential using Elapsed Time, Expertise, Item Knowledge, Window of Opportunity, and Equipment
Deriving Cybersecurity Goals and technical concepts incorporating HSM and AUTOSAR SecOC

Detailed Knowledge Repository

Engineering Curriculum & Standards Guidance

1. Threat Analysis & Risk Assessment (TARA - Clause 15)

Asset identification, damage scenarios, threat scenarios, and attack feasibility

TARA is the cybersecurity counterpart to HARA. It identifies vehicle assets whose compromise impacts Safety (S), Financial (F), Operational (O), or Privacy (P) properties.

Threat Scenarios are modeled using STRIDE (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege).

Attack Feasibility is calculated using either CVSS v3.1 or Attack Potential based on elapsed time, specialist expertise, equipment cost, and window of opportunity.

Core Architectural Takeaways

Cybersecurity goals translate directly into cybersecurity requirements on software and hardware.
Unlike functional safety, cybersecurity risk is dynamic and changes after SOP as new zero-day exploits emerge.

OEM & Tier-1 Technical Interview Guidance

Interview Question: How do you evaluate Attack Feasibility for an automotive telematics ECU?

Winning Answer: By calculating the composite score across Elapsed Time, Specialist Expertise, Knowledge of the Target, Window of Opportunity, and Equipment. Remote cellular attacks generally carry high feasibility if unauthenticated.

2. Automotive Security Architecture: HSM, SecOC & Secure Boot

Hardware Security Modules (EVITA), MAC generation, and chain-of-trust

Hardware Security Module (HSM): Dedicated cryptographic core with isolated memory, AES accelerators, and tamper-resistant key storage.

Secure Boot: Cryptographic verification of bootloader and application software signatures before execution.

Secure Onboard Communication (AUTOSAR SecOC): Appends a truncated Message Authentication Code (MAC) and freshness counter to CAN-FD/Ethernet PDUs to defeat replay and tampering attacks.

Core Architectural Takeaways

Never store private keys or symmetric AES keys in flash memory accessible to the host CPU.
SecOC requires monotonic freshness counters synchronized across ECUs.

OEM & Tier-1 Technical Interview Guidance

Interview Question: How does SecOC prevent replay attacks on a CAN-FD bus?

Winning Answer: By appending a dynamic Freshness Value (counter or timestamp) into the CMAC calculation. Even if an attacker records and replays a valid frame, the receiver rejects it because the freshness counter has already advanced.

AutoSys Professional Certification

Earn Your Accredited Automotive Credential

Register for a free learner account to save your lab progress, unlock downloadable templates (HARA Excel sheets, FMEDA calculators, GSN safety case templates), and earn your verified completion certificate.