Cybersecurity in Automotive OTA Update Systems and Automotive Software Stores Elektrobit

Format:

Book

Conference/Event

Author/Creator:

Kurumbudel, Prashanth Ram, author.

Conference Name:

Symposium on International Automotive Technology (2026) (2026-01-28 : Pune, India)

Language:

English

Physical Description:

1 online resource cm

Place of Publication:

Warrendale, PA SAE International 2026

Summary:

Automotive Over-the-Air (OTA) software updating has become a cornerstone of the modern connected vehicle, enabling manufacturers to remotely deploy bug fixes, security patches, and new features. However, this convenience comes with significant cybersecurity challenges. This paper provides a detailed examination of automotive OTA update security and the software store (software Applications and services store) mechanisms. I discuss the current industry standards and regulations, notably ISO/SAE 21434 and the United Nations Economic Commission for Europe (UNECE) regulations UN R155 (cybersecurity) and UN R156 (software updates) and explain their relevance to secure OTA and software update management. I then explored the Uptane framework, an open and widely adopted architecture specifically designed to secure automotive OTA updates. Next, OTA-specific threat models are analyzed, detailing potential attack vectors and corresponding mitigation strategies. Real-world case studies are presented to illustrate both the risks and the successful deployment of secure OTA systems in the industry. I conclude with insights into best practices for implementing a robust, compliant OTA update ecosystem, emphasizing a global perspective on regulations and the need for continuous vigilance throughout the vehicle lifecycle

Notes:

Vendor supplied data

Publisher Number:

2026-26-0621

Access Restriction:

Restricted for use by site license