Overview of Automotive Security Testing Approaches

This chapter explores practical security testing approaches in more detail. It provides an overview of practical security testing for automotive systems focusing on security functional testing, vulnerability scanning, fuzz testing, and penetration testing. The chapter also provides insights into establishing a framework for security testing to allow for systematic and efficient testing based on defined processes, test tools, and test approaches. It discusses the processes involved in performing a deep‐dive on fuzz testing for automotive systems and the parts required in a fuzz testing environment, including the fuzz engine, injector, and monitor. One crucial aspect for automotive systems fuzzing is to monitor the target system for unexpected behavior. The monitor can be based on in‐band instrumentation, where the same protocol that is being fuzzed is observed, or external instrumentation, where separate means for monitoring the target system is used.