• Automotive
• AUTOSAR
• Framework
• Security

Modern automotive software systems are increasingly connected and increasingly exposed to possible intrusions and security challenges. The AUTOSAR automotive standard acknowledges the need for improved security by providing a set of standard functions and modules for encryption and authentication. However, these modules are currently not matched by corresponding models for security at the application level. This work aims to cover the gap providing both modeling extensions and code generation features. The framework consists of modeling extensions that allow AUTOSAR designers to add a security specification to the communication among components and an extended RTE code generator. A graphical tool developed in the context of this work, named ASER (AUTOSAR SEcurity Requirements), allows the designer to: insert security requirements in the model, map runnables into tasks, export a complete AUTOSAR file (containing the description of system, operating system, run-time environment, and security requirements), and launch an extended RTE generator. Finally, an OpenSSL software simulation of a hardware secure module (HSM) is realized to validate the usability of the system in the context of modern execution platforms with hardware support for security.