Three-day course on vulnerability analysis and assessment under ISO/SAE 21434: scanning and exploits, infrastructure and controller vulnerabilities, failure modes, vulnerabilities and effects analysis (FMVEA), CVSS scoring and risk assessment.
Provides the knowledge and skills to plan, conduct and report vulnerability analysis and assessment activities under ISO/SAE 21434. The first day introduces the standard and vulnerability analysis, its prerequisites (target of analysis, architectural design, threat scenarios and software cybersecurity requirements), scanners and exploit types, and infrastructure and communication weaknesses. The second day covers vulnerabilities in microcontrollers and controllers, attack types such as buffer overflows and rogue scripts, failure modes, vulnerabilities and effects analysis (adapting FMEA to vulnerabilities), configuring scans, handling false results and interpreting reports. The third day covers researching alerts in the National Vulnerability Database, scoring with CVSS, judging the factors that affect risk, attack impact, frequency and severity, risk assessment, the vulnerability management cycle, patch and configuration management, and writing the vulnerability assessment report. Concepts are reinforced through breakout exercises.
Facilitator not identified in public sources checked.
ISO/SAE 21434 purpose, scope and framework · Prerequisites for vulnerability analysis · Scanning, exploits and infrastructure vulnerabilities
Microcontroller and controller vulnerabilities · Failure modes, vulnerabilities and effects analysis (FMVEA) · Scanner configuration, false results and reports
Vulnerability databases and CVSS scoring · Risk assessment · Vulnerability management, patching and the assessment report
Design accelerated tests to estimate how products perform over their service lives.
Three-day blended short course on the systems engineering and safety assurance of autonomous systems that use AI, from hazards and machine learning assurance to human-autonomy teaming and the autonomous systems safety case.
Two-day hands-on course on system and design FMEA using the AIAG-VDA seven-step approach, from boundary and P diagrams to risk analysis, optimisation and design verification planning (DVP&R), with an optional certification exam.