In-Depth Exploration of ISO/SAE 21434 and Its Correlations with Existing Standards
Gianpiero Costantino, Marco De Vincenzi, Ilaria Matteucci
Abstract
In recent years, the evolution of road vehicles has strongly required common rules to manage cybersecurity in the automotive industry. In this article, we summarize the ISO/SAE 21434 standard, focusing on the main requirements, work products, and innovations. We identify with an ego-network the possible correlation of ISO/SAE 21434 with the already existing automotive standards, reporting a strong correlation with the ISO 26262 safety standard. Following, we discuss the relationship between safety and security in the automotive field, and between ISO/SAE 21434 and regulation UNECE WP.29 R155. Then we focus on possible limits and implementations of the standard such as the introduction of application methods or specific thresholds for the required security risk analysis. Finally, we propose a structured list of documents that can be used as a landmark to achieve compliance with the cyber-security standard and an example of the application of ISO/SAE 21434 to an electric window power regulator system.