Architectural Guidance in Automotive for Privacy and Security: Survey and Classification

ABSTRACT: Industrial domains, such as Internet of Things, Industry 4.0, and automotive, rapidly move towards autonomous connected systems. Security and privacy of these even-more connected systems demand particular attention. The whole value network serving original equipment manufacturers shall assist in addressing these concerns. System architects responsible for designing (parts) of such future systems can benefit from architectural guidance documents. For example, reference designs can help to resolve recurring architectural questions and assist in making high-level design decisions. A shared understanding of what guidance forms exist and how they differ is desired. 
Unfortunately, it is currently lacking. 

This paper surveys the state-of-the-art and state-of-practice of architectural guidance items in the automotive domain. We analyze what practitioners and researches perceive as guidance useful for addressing security and privacy concerns. To collect inputs, we conducted a survey within SECREDAS-– a project comprised of 69 organizations from both industry and research domains. Based on the content of these inputs, we identified and cross-compared the following types of architectural guidance items: reference architectures, architecture frameworks, standards, protocols, and interfaces. The resulting overview and classification show practitioners which architectural guidance documents are actually used and which are relevant to consider. This paper also aims to inform discussions on architecting autonomous connected systems in general, as the need to address security and privacy concerns has a broad scope.

Full publication available via: Privacy and Security: Survey and Classification. In Proceedings of the 2020 IEEE 14th International Systems Conference (SysCon).