CINXE.COM

What Is Cyber Security for Connected Cars and How Does It Work? | Black Duck

<!DOCTYPE HTML> <html lang="en"> <head> <!-- OneTrust Cookies Consent Notice start for blackduck.com --> <script defer="defer" type="text/javascript" src="/.rum/@adobe/helix-rum-js@%5E2/dist/rum-standalone.js"></script> <script src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js" type="text/javascript" charset="UTF-8" data-domain-script="01914ce7-a755-7d2f-8c7a-a2de5df03bad"></script> <script type="text/javascript"> function OptanonWrapper() { } </script> <!-- OneTrust Cookies Consent Notice end for blackduck.com --> <script type="text/javascript" src="/content/dam/black-duck/util/gdpr/geo_v1.js"></script> <meta charset="UTF-8"/> <meta name="viewport" content="width=device-width, initial-scale=1.0"/> <meta http-equiv="X-UA-Compatible" content="IE=edge"/> <link rel="alternate" hreflang="en-us" href="https://www.blackduck.com/glossary/what-is-connected-car-cyber-security.html"/> <link rel="alternate" hreflang="x-default" href="https://www.blackduck.com/glossary/what-is-connected-car-cyber-security.html"/> <title>What Is Cyber Security for Connected Cars and How Does It Work? | Black Duck</title> <link rel="canonical" href="https://www.blackduck.com/glossary/what-is-connected-car-cyber-security.html"/> <meta name="description" content="While connected cars offer abundant opportunities for consumers, automakers and their suppliers need to consider cyber security."/> <meta name="last-modified" content="2024-10-08 12:51:54 PM"/> <meta property="og:description" content="While connected cars offer abundant opportunities for consumers, automakers and their suppliers need to consider cyber security."/> <meta property="og:title" content="What Is Cyber Security for Connected Cars and How Does It Work? | Black Duck"/> <meta property="og:type" content="website"/> <meta property="og:url" content="https://www.blackduck.com/glossary/what-is-connected-car-cyber-security.html"/> <meta name="searchBusinessArea" content="Securing the Software Supply Chain"/> <meta name="searchContentType" content="Web Page"/> <meta name="searchMarketingStageType" content="Awareness"/> <meta name="searchProductCategory" content="Securing the Software Supply Chain"/> <meta name="searchSolutionType"/> <meta name="twitter:card" content="summary_large_image"/> <meta name="twitter:description" content="While connected cars offer abundant opportunities for consumers, automakers and their suppliers need to consider cyber security."/> <meta name="twitter:site" content="blackduck_sw"/> <meta name="twitter:title" content="What Is Cyber Security for Connected Cars and How Does It Work? | Black Duck"/> <meta name="p:domain_verify" content="2070085ca3a586484558bf4ee3e19943"/> <link rel="icon" href="/etc.clientlibs/synopsys-clientlibs/synopsys-pagelibs/resources/images/favicon.svg"/> <script src="https://assets.adobedtm.com/4cb89ff5b198/2b1d17b087b8/launch-4040a5db2c0a.min.js" async></script> <script src="/etc.clientlibs/synopsys/clientlibs/custom-jquery.lc-5127896d4b794468acf1aedaafa37991-lc.min.js"></script> <script src="/etc.clientlibs/core/wcm/components/commons/datalayer/v1/clientlibs/core.wcm.components.commons.datalayer.v1.lc-70264651675213ed7f7cc5a02a00f621-lc.min.js"></script> <script src="/etc.clientlibs/synopsys-clientlibs/synopsys-headlibs.lc-e6656ae98ae5c559ddc01225c2b98796-lc.min.js"></script> <link rel="stylesheet" href="/etc.clientlibs/synopsys-clientlibs/synopsys-pagelibs.lc-2ee7db836cd34b0ac51ffc8c47c2c9d1-lc.min.css" type="text/css"> </head> <body data-template="sig--glossary" data-content-type="sig" data-sticky-nav="false" class="page sig-page publish "> <input type="hidden" id="campaign"/> <script> var camp=document.getElementById('campaign').value; url = new URL(window.location.href); if (url.searchParams.get('intcmp') || camp.length>2 ) { const params = new Proxy(new URLSearchParams(window.location.search), { get: (searchParams, prop) => searchParams.get(prop), }); campaignCode = params.intcmp; window.adobeDataLayer = window.adobeDataLayer || []; window.adobeDataLayer.push({ web: { webPageDetails: { URL:'https:\/\/www.blackduck.com\/glossary\/what\u002Dis\u002Dconnected\u002Dcar\u002Dcyber\u002Dsecurity.html', name:'Connected Car Cyber Security', } }, _softwareintegritygroupinc:{ internalCampaign: { campaignCode: campaignCode, campaignName: '', campaignClicks: {value: 1}, } } });} url2 = new URL(window.location.href); if (url2.searchParams.get('cmp') || url2.searchParams.get('utm_source') || url2.searchParams.get('utm_medium') || url2.searchParams.get('utm_campaign') || url2.searchParams.get('utm_group')|| url2.searchParams.get('utm_creative')|| url2.searchParams.get('utm_keyword')) { var utm_source='no_source'; var utm_cmp='no_cmp'; var utm_medium='no_medium'; var utm_campaign='no_campaign'; var utm_group='no_group'; var utm_creative='no_creative'; var utm_keyword='no_keyword'; const params = new Proxy(new URLSearchParams(window.location.search), { get: (searchParams, prop) => searchParams.get(prop), }); if(params.utm_source!=null) utm_source = params.utm_source; if(params.utm_medium!=null) utm_medium = params.utm_medium; if(params.utm_campaign!=null) utm_campaign = params.utm_campaign; if(params.utm_group!=null) utm_group = params.utm_group; if(params.utm_creative!=null) utm_creative = params.utm_creative; if(params.utm_keyword!=null) utm_keyword = params.utm_keyword; if(params.cmp!=null) { utm_cmp = params.cmp; var trackingCode=utm_cmp; } else { var trackingCode=utm_source+":"+utm_medium+":"+utm_campaign+":"+utm_group+":"+utm_creative+":"+utm_keyword; } window.adobeDataLayer = window.adobeDataLayer || []; window.adobeDataLayer.push({ web: { webPageDetails: { URL:'https:\/\/www.blackduck.com\/glossary\/what\u002Dis\u002Dconnected\u002Dcar\u002Dcyber\u002Dsecurity.html', name:'Connected Car Cyber Security', } }, _softwareintegritygroupinc:{ externalCampaign: { campaignClicks: {value: 1}, } }, marketing:{ trackingCode: trackingCode, } }); } let hs_id=''; const params2 = new Proxy(new URLSearchParams(window.location.search), { get: (searchParams, prop) => searchParams.get(prop), }); hs_id = params2.hs_id; window.adobeDataLayer = window.adobeDataLayer || []; window.adobeDataLayer.push({ event: "page-view", web: { webPageDetails: { name: 'Connected Car Cyber Security', url: 'https:\/\/www.blackduck.com\/glossary\/what\u002Dis\u002Dconnected\u002Dcar\u002Dcyber\u002Dsecurity.html', siteSection: 'Glossary', server: window.location.hostname, pageViews: { value: 1 }, } }, _softwareintegritygroupinc:{ web:{ webPageDetails:{ webURL: window.location.href, pageType: 'Glossary', siteSubSection2: 'Glossary|Connected Car Cyber Security', siteSubSection3: 'n\/a', siteSubSection4: 'n\/a', siteSubSection5: 'n\/a', siteName: 'blackduck', countryLanguage: 'en_US', articleAuthor: '', pageTitle: 'Connected Car Cyber Security', defensicsProtocol: '', defensicsIndustry: '', defensicsTechnology: '', product: 'Securing the Software Supply Chain', solution: '', marketingStage: 'Awareness', contentType: 'Web Page' }, queryParam: { hsid: hs_id } } } }); </script> <div class="site-wrapper"> <div class="root synopsysContainer responsivegrid"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="experiencefragment aem-GridColumn aem-GridColumn--default--12"> <div id="experiencefragment-efafa687f1" class="cmp-experiencefragment cmp-experiencefragment--sig-topnav"> <div class="xf-content-height"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="header aem-GridColumn aem-GridColumn--default--12"> <link rel="stylesheet" href="/etc.clientlibs/synopsys/clientlibs/navigation/header.lc-7fdde5b39943414ceea6ece1e1b53c26-lc.min.css" type="text/css"> <section id="ab5aaa59d-dbdf-4dce-9c2e-c3fdaeb3f269" class="navigation-header-component"> <!-- <section class="appSec-top-alert-banner"> <p class="appSec-top-alert-banner-p"><span class="appSec-top-alert-banner-close">&#10005;</span> <i class="fa-duotone fa-bullhorn"></i> Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt <a class="appSec-top-alert-banner-a" href="#" target="_blank">Learn More</a></p> </section> --> <!-- <section class="appSec-top-alert-banner"> <p class="appSec-top-alert-banner-p"><span class="appSec-top-alert-banner-close">&#10005;</span> <i class="fa-duotone fa-bullhorn"></i> Synopsys Enters into Definitive Agreement for Sale of Application Security (Software Integrity Group) <a class="appSec-top-alert-banner-a" href="https://news.synopsys.com/2024-05-06-Synopsys-Enters-Definitive-Agreement-to-Sell-its-Software-Integrity-Business-to-Clearlake-Capital-and-Francisco-Partners" target="_blank">Learn More</a></p> </section> --> <!-- /////////////////////////////////////////////// MOBILE NAV //////////////////////////////////////////////////--> <nav class="AppSec-mobileNav"> <section class="SIG-Main-container"> <figure class="SIG-bd-logo-figure"> <a href="/"> <img class="SIG-bd-logo" src="/content/dam/black-duck/en-us/images/BlackDuckLogo-OnDark.svg" alt="Black Duck Home Page"> </a> </figure> <figure class="search-icon-mobile"><i class="fa-regular fa-magnifying-glass"></i></figure> <figure id="hamburger"></figure> </section> </nav> <!-- /////////////////////////////////////////////// MAIN MENU //////////////////////////////////////////////////--> <section id="topNav" class="mobileSlide"> <nav class="SIG-Main"> <section class="SIG-Main-container"> <figure class="SIG-bd-logo-figure desktopMain"> <a href="/"> <img class="SIG-bd-logo" src="/content/dam/black-duck/en-us/images/BlackDuckLogo-OnDark.svg" alt="Black Duck Home Page"> </a> </figure> <a class="AppSecHome" href="/"> <span class="SIG-Main-h1 desktopMain"> <!-- <span class="h1a"> Application Security</span> --> <span class="h1b"> <!-- <span class="sloganPipe">|</span> --> Build trust in your software</span> </span> </a> <div class="divider"></div> <ul class="SIG-Main-Corp"> <li class="LiNoDropdown"> <a href="https://community.blackduck.com" target="_blank">Support</a> </li> <li class="search-icon"><i class="fa-regular fa-magnifying-glass"></i></li> <li class="globalSitesIcon" aria-label="Language"><i class="fa-light fa-globe"></i></li> <li class="mobile-Global lang-selected" data-id=".com" data-glossary-id=".com/glossary">English</li> <li class="mobile-Global" data-id=".com/ja-jp" data-glossary-id=".com/ja-jp/glossary">日本語</li> <li class="mobile-Global" data-id=".com/zh-cn" data-glossary-id=".com/zh-cn/glossary">简体中文</li> </ul> </section> </nav> <!-- /////////////////////////////////////////////// SEARCH BAR //////////////////////////////////////////////////--> <section class="searchBarHidden"> <div class="search-wrapper"> <svg class="close-search-bar" aria-labelledby="svg-close-searchbar" version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 20.1 12.2" style="enable-background:new 0 0 20.1 12.2;" xml:space="preserve"> <text id="svg-close-searchbar">close search bar</text> <style type="text/css"> .st0bnbn{fill:#ffffff;} </style> <path id="bx-up-arrow-alt" class="st0bnbn" d="M8.6,5.7l1.5-1.2l0,0l1.5,1.2l6.4,6.4l2.1-2.1L10.1,0L0,10.1l2.1,2.1L8.6,5.7z"/> </svg> <section class="component-search clearfix"> <div id="searchbox" class="snps-searchbox" data-enable-history="true" data-endpoint="default"> <div class="coveo-search-section"> <atomic-external id="coveoSearchboxExt"> <atomic-search-box class="CoveoSearchbox hydrated" data-atomic-rendered="true" data-atomic-loaded="true" number-of-queries="5" minimum-query-length="0" clear-filters="false"></atomic-search-box> </atomic-external> <atomic-search-interface id="coveoSearchboxInterface"></atomic-search-interface> </div> </div> </section> </div> </section> <p class="noLanguage">Sorry, not available in this language yet</p> <!-- /////////////////////////////////////////////// GLOBAL //////////////////////////////////////////////////--> <section class="languageHidden"> <div class="lauguage-wrapper"> <svg class="close-language" aria-labelledby="svg-close-lang" version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 20.1 12.2" style="enable-background:new 0 0 20.1 12.2;" xml:space="preserve"> <text id="svg-close-lang">close language selection</text> <style type="text/css"> .st0vmvm{fill:#ffffff;} </style> <path id="bx-up-arrow-alt" class="st0vmvm" d="M8.6,5.7l1.5-1.2l0,0l1.5,1.2l6.4,6.4l2.1-2.1L10.1,0L0,10.1l2.1,2.1L8.6,5.7z"/> </svg> <ul class="globalLinks"> <li class="desktop-Global lang-selected" data-id=".com" data-glossary-id=".com/glossary">English</li> <li class="desktop-Global" data-id=".com/ja-jp" data-glossary-id=".com/ja-jp/glossary">日本語</li> <li class="desktop-Global" data-id=".com/zh-cn" data-glossary-id=".com/zh-cn/glossary">简体中文</li> </ul> </div> </section> <!-- /////////////////////////////////////////////// SUB MENU //////////////////////////////////////////////////--> <nav id="Sig-Sub" class="SIG-Sub"> <section class="SIG-Sub-container"> <ul class="SIG-Sub-ul"> <!-- <li id="Platform" class=""> <a href="#">Platform</a> </li> --> <li id="Solutions" class="LihasDropdown"> <a href="#">Solutions</a> </li> <li id="Tools-Services" class="LihasDropdown"> <a href="#">Products</a> </li> <li id="Customer-Success" class="LihasDropdown"> <a href="#">Services</a> </li> <li><a href="/partners.html">Partners</a></li> <li id="Resources" class="LihasDropdown"> <a href="#">Resources</a> </li> <li id="Blog" class=""> <a href="/blog.html">Blog</a> </li> <li id="AboutUs" class="LihasDropdown"> <a href="#">Company</a> </li> <li id="Contact-Sales" class="SIG-Sub-CS"><a href="/contact-sales.html">Contact Sales</a></li> </ul> </section> </nav> </section> <!-- /////////////////////////////////////////////// COMPANY DROPDOWN //////////////////////////////////////////////////--> <nav id="Nav-Why-Sierra" class="AboutUs SIG-Sub-dropdown"> <p class="SIG-mobile-breadcrumb">Company</p> <section id="Container-Tools-Services" class="SIG-Sub-dropdown-container"> <!-- MOBILE GO BACK --> <svg class="mobile-go-back" aria-labelledby="svg-go-back1" version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 27 15.8" style="enable-background:new 0 0 27 15.8;" xml:space="preserve"><style type="text/css">.st0xmmxm{fill-rule:evenodd;clip-rule:evenodd;}</style><g id="arrow-left" transform="translate(-4.498 -10.123)"><path id="Path_367" class="st0xmmxm" d="M13.2,10.5c0.4,0.4,0.4,1.2,0,1.6c0,0,0,0,0,0l-6,6l6,6c0.4,0.4,0.4,1.2,0,1.6s-1.2,0.4-1.6,0l-6.7-6.7c-0.4-0.4-0.4-1.2,0-1.6c0,0,0,0,0,0l6.8-6.8C12,10,12.7,10,13.2,10.5C13.2,10.5,13.2,10.5,13.2,10.5L13.2,10.5z"/><path id="Path_368" class="st0xmmxm" d="M5.6,18c0-0.6,0.5-1.1,1.1-1.1h23.6c0.6,0,1.1,0.5,1.1,1.1s-0.5,1.1-1.1,1.1H6.8C6.1,19.1,5.6,18.6,5.6,18z"/></g></svg> <text id="svg-go-back1">go back</text> <button class="mobile-go-back-txt">Go Back</button> <section> <h2><a href="/company.html">About Black Duck</a></h2> <ul id="toolsServicesFirst"> <li class="defaultLi"><a href="/company/leadership.html">Leadership <li><a href="https://news.blackduck.com">Newsroom</a></li> <li><a href="/blog.html">Blog</a></li> <!-- <li><a href="#">Events & Webinars</a></li> --> <li><a href="/partners.html">Partners</a></li> <li><a href="/company/careers.html">Careers</a></li> <li><a href="/contact-sales.html">Contact Sales</a></li> </ul> </section> <!-- work area --> <section class="ad-rotator rotationAd"> <div class="ad-dots"> <span class="dot active" data-ad="0"></span> <span class="dot" data-ad="1"></span> <span class="dot" data-ad="2"></span> </div> <div class="ads"> <div class="ad" id="ad0"> <img src="/content/dam/black-duck/en-us/images/Gartner_Magic_Quadrant_AST_2023-final-bg.svg" alt="Gartner Magic Quadrant" class="navAdImg"> <p class="adCopy"> 2023 Gartner® Magic Quadrant™ for AppSec Testing <a href="/resources/analyst-reports/gartner-magic-quadrant-appsec.html">Read more</a> </p> </div> <div class="ad" id="ad1"> <img src="/content/dam/black-duck/en-us/images/2023Q3_sast-optimized.png" alt="Gartner Magic Quadrant" class="navAdImg"> <p class="adCopy"> Forrester Wave Leader for SAST <a href="/resources/analyst-reports/forrester-wave-sast.html">Read more</a> </p> </div> <div class="ad" id="ad2"> <img src="/content/dam/black-duck/en-us/images/forrester-wave-sca-smallNav.jpg" alt="Gartner Magic Quadrant" class="navAdImg"> <p class="adCopy"> Forrester Wave Leader for SCA <a href="/resources/analyst-reports/forrester-wave-software-composition-analysis.html">Read more</a> </p> </div> </div> </section> </section> <!-- //////////////////////////////////////// DEFINITIONS - COMPANY //////////////////////////////////////// --> <section class="navDefinitions"> <!-- <img src="https://iili.io/HSa2v4f.jpg" class="navDefBanner"> --> <ul class="navDefUl toolsServicesFirst"> <!-- <li class="default"><span>About Black Duck</span> | Provides an overview of Black Duck's mission and services </li> --> <li><span>Leadership</span> | Meet the team guiding Black Duck's vision and strategy.</li> <li><span>Newsroom</span> | Latest news, press releases, and media coverage about Black Duck.</li> <li><span>Blog</span> | Insights, updates, and expert opinions on application security.</li> <li><span>Partners</span> | Information on Black Duck's partnerships and collaboration opportunities.</li> <li><span>Careers</span> | Explore job opportunities and career paths at Black Duck.</li> <li><span>Contact Sales</span> | Get in touch with our sales team for product inquiries and consultations.</li> </ul> <!-- CLOSE X - DESKTOP --> <svg class="close-sub-nav" aria-labelledby="svg-close-subnav1" version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 20.1 12.2" style="enable-background:new 0 0 20.1 12.2;" xml:space="preserve"> <text id="svg-close-subnav1">close sub navigation</text> <style type="text/css"> .st0bnbn{fill:#ffffff;} </style> <path id="bx-up-arrow-alt" class="st0bnbn" d="M8.6,5.7l1.5-1.2l0,0l1.5,1.2l6.4,6.4l2.1-2.1L10.1,0L0,10.1l2.1,2.1L8.6,5.7z"/> </svg> </section> <!-- //////////////////////////////////////// END DEFINITIONS //////////////////////////////////////// --> <section class="indexBar"> <button class="indexBarContainer"> <a class="indexBarA" href="/all-products-services.html"> <span>See All Product Services</span> </a> </button> </section> </nav> <!-- /////////////////////////////////////////////// PRODUCT DROPDOWN //////////////////////////////////////////////////--> <nav id="Nav-Tools-Services" class="Tools-Services SIG-Sub-dropdown"> <p class="SIG-mobile-breadcrumb">Products</p> <section id="Container-Tools-Services" class="SIG-Sub-dropdown-container"> <!-- MOBILE GO BACK --> <svg class="mobile-go-back" aria-labelledby="svg-go-back1" version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 27 15.8" style="enable-background:new 0 0 27 15.8;" xml:space="preserve"><style type="text/css">.st0xmmxm{fill-rule:evenodd;clip-rule:evenodd;}</style><g id="arrow-left" transform="translate(-4.498 -10.123)"><path id="Path_367" class="st0xmmxm" d="M13.2,10.5c0.4,0.4,0.4,1.2,0,1.6c0,0,0,0,0,0l-6,6l6,6c0.4,0.4,0.4,1.2,0,1.6s-1.2,0.4-1.6,0l-6.7-6.7c-0.4-0.4-0.4-1.2,0-1.6c0,0,0,0,0,0l6.8-6.8C12,10,12.7,10,13.2,10.5C13.2,10.5,13.2,10.5,13.2,10.5L13.2,10.5z"/><path id="Path_368" class="st0xmmxm" d="M5.6,18c0-0.6,0.5-1.1,1.1-1.1h23.6c0.6,0,1.1,0.5,1.1,1.1s-0.5,1.1-1.1,1.1H6.8C6.1,19.1,5.6,18.6,5.6,18z"/></g></svg> <text id="svg-go-back1">go back</text> <button class="mobile-go-back-txt">Go Back</button> <section> <h2>Integrated SaaS Platform</h2> <ul id="toolsServicesFirst"> <li class="defaultLi"><a href="/platform.html">Polaris Platform</a></li> <li><a href="/platform.html#A">fAST Static</a></li> <li><a href="/platform.html#A">fAST SCA</a></li> <li><a href="/platform.html#A">fAST Dynamic</a></li> </ul> </section> <section> <h2>Tools</h2> <ul id="toolsServicesSecond"> <li class="defaultLi"><a href="/static-analysis-tools-sast/coverity.html">Coverity Static</a></li> <li><a href="/software-composition-analysis-tools/black-duck-sca.html">Black Duck SCA</a></li> <li><a href="/dast.html">Continuous Dynamic</a></li> <li><a href="/interactive-application-security-testing.html">Seeker Interactive</a></li> <li><a href="/software-risk-manager.html">Software Risk Manager ASPM</a></li> <li><a href="/fuzz-testing.html">Defensics Protocol Fuzzing</a></li> </ul> </section> <section> <h2><a href="/integrations.html">Integrations</a></h2> <ul id="toolsServicesThird"> <li><a href="/code-sight.html">Code Sight IDE Plug-in</a></li> <li><a href="/integrations.html#scm">SCM Integrations</a></li> <li><a href="/integrations.html#build-ci">Build & CI Tool Integrations</a></li> <li><a href="/integrations.html#workflow">Developer Workflow Integrations</a></li> <li><a href="/integrations.html#security">3rd-Party AST Tool Integrations</a></li> <li><a href="/integrations.html#cloud">Cloud Deployment Integrations</a></li> </ul> </section> <section> <a id="navAd" href="/resources/analyst-reports/gartner-magic-quadrant-appsec.html"> <img src="/content/dam/black-duck/en-us/images/Gartner_Magic_Quadrant_AST_2023-final-bg.svg" alt="Gartner Magic Quadrant" class="navAdImg"> <span class="navAdP"> <span class="navAdSpanMain">2023 Gartner® Magic Quadrant™ for AppSec Testing</span> <span class="navAdSpanSub">See why Black Duck is a Leader</span> </span> </a> </section> </section> <!-- //////////////////////////////////////// DEFINITIONS - PRODUCT //////////////////////////////////////// --> <section class="navDefinitions"> <!-- <img src="https://iili.io/HSa2v4f.jpg" class="navDefBanner"> --> <ul class="navDefUl toolsServicesFirst"> <li class="default"><span>Polaris Platform</span> | Unified platform for managing software security and compliance.</li> <li><span>fAST Static</span> | Unified platform for managing software security and compliance.</li> <li><span>fAST SCA</span> | Unified platform for managing software security and compliance.</li> <li><span>fAST Dynamic</span> | Unified platform for managing software security and compliance.</li> </ul> <ul class="navDefUl toolsServicesSecond"> <li><span>Coverity Static</span> | Static analysis tool for detecting software defects and vulnerabilities.</li> <li><span>Black Duck SCA</span> | Software composition analysis to manage open source security and license compliance.</li> <li><span>Continuous Dynamic</span> | Continuous dynamic application security testing.</li> <li><span>Seeker Interactive</span> | Interactive application security testing tool for detecting vulnerabilities.</li> <li><span>Software Risk Manager ASPM</span> | Application security posture management tool for risk management.</li> <li><span>Defensics Protocol Fuzzing</span> | Protocol fuzzing tool to identify and fix security flaws.</li> </ul> <ul class="navDefUl toolsServicesThird"> <!-- <li><span>Integrations</span> | Connecting security tools and processes with your existing systems.</li> --> <li><span>Code Sight IDE Plug-in</span> | Integrated development environment plug-in for real-time security feedback.</li> <li><span>SCM Integrations</span> | Source code management integrations for seamless security checks.</li> <li><span>Build & CI Tool Integrations</span> | Integrations with build and continuous integration tools.</li> <li><span>Developer Workflow Integrations</span> | Tools to integrate security into the developer workflow.</li> <li><span>3rd-Party AST Tool Integrations</span> | Integrations with third-party application security testing tools.</li> <li><span>Cloud Deployment Integrations</span> | Integrations for securing cloud deployments.</li> </ul> <ul class="navDefUl toolsServicesFourth"> <li><span>Open Source & Security Audits</span> | Comprehensive technical due diligence services for M&A.</li> </ul> <!-- CLOSE X - DESKTOP --> <svg class="close-sub-nav" aria-labelledby="svg-close-subnav1" version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 20.1 12.2" style="enable-background:new 0 0 20.1 12.2;" xml:space="preserve"> <text id="svg-close-subnav1">close sub navigation</text> <style type="text/css"> .st0bnbn{fill:#ffffff;} </style> <path id="bx-up-arrow-alt" class="st0bnbn" d="M8.6,5.7l1.5-1.2l0,0l1.5,1.2l6.4,6.4l2.1-2.1L10.1,0L0,10.1l2.1,2.1L8.6,5.7z"/> </svg> </section> <!-- //////////////////////////////////////// END DEFINITIONS //////////////////////////////////////// --> <section class="indexBar"> <button class="indexBarContainer"> <a class="indexBarA" href="/all-products-services.html"> <span>See All Product Services</span> </a> </button> </section> </nav> <!-- /////////////////////////////////////////////// SOLUTIONS DROPDOWN //////////////////////////////////////////////////--> <nav id="Nav-Solutions" class="Solutions SIG-Sub-dropdown"> <p class="SIG-mobile-breadcrumb">Solutions</p> <section id="Container-Tools-Services" class="SIG-Sub-dropdown-container"> <!-- MOBILE GO BACK --> <svg class="mobile-go-back" aria-labelledby="svg-go-back2" version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 27 15.8" style="enable-background:new 0 0 27 15.8;" xml:space="preserve"><style type="text/css">.st0xmmxm{fill-rule:evenodd;clip-rule:evenodd;}</style><g id="arrow-left" transform="translate(-4.498 -10.123)"><path id="Path_367" class="st0xmmxm" d="M13.2,10.5c0.4,0.4,0.4,1.2,0,1.6c0,0,0,0,0,0l-6,6l6,6c0.4,0.4,0.4,1.2,0,1.6s-1.2,0.4-1.6,0l-6.7-6.7c-0.4-0.4-0.4-1.2,0-1.6c0,0,0,0,0,0l6.8-6.8C12,10,12.7,10,13.2,10.5C13.2,10.5,13.2,10.5,13.2,10.5L13.2,10.5z"/><path id="Path_368" class="st0xmmxm" d="M5.6,18c0-0.6,0.5-1.1,1.1-1.1h23.6c0.6,0,1.1,0.5,1.1,1.1s-0.5,1.1-1.1,1.1H6.8C6.1,19.1,5.6,18.6,5.6,18z"/></g></svg> <text id="svg-go-back2">go back</text> <button class="mobile-go-back-txt">Go Back</button> <section> <h2>Use Cases</h2> <ul id="solutionsFirst"> <li><a href="/solutions/artificial-intelligence-software-development.html">AI-generated code</a></li> <li><a href="/solutions/api-security-testing.html">API Security Testing</a></li> <li><a href="/solutions/appsec-consolidation.html">AppSec Program Consolidation</a></li> <li><a href="/solutions/application-security-testing.html">Application Security Testing</a></li> <li><a href="/solutions/devsecops.html">DevSecOps</a></li> <li><a href="/solutions/software-supply-chain-security.html">Software Supply Chain Security</a></li> <li><a href="/solutions/enterprise-application-security-risk-management.html">Manage Enterprise AppSec Risk</a></li> <li><a href="/solutions/cloud-security.html">Cloud & Container Security</a></li> <li><a href="/solutions/open-source-security.html">Open Source License Compliance</a></li> <li><a href="/solutions/mergers-and-acquisitions.html">M&A Due Diligence</a></li> <li><a href="/solutions/compliance.html">Quality and Security Standards Compliance</a></li> </ul> </section> <section> <h2>By Technology</h2> <ul id="solutionsSecond"> <li><a href="/static-analysis-tools-sast.html">Static Analysis (SAST)</a></li> <li><a href="/software-composition-analysis-tools.html">Software Composition Analysis (SCA)</a></li> <li><a href="/dast.html">Dynamic Analysis (DAST)</a></li> <li><a href="/interactive-application-security-testing.html">Interactive Analysis (IAST)</a></li> <li><a href="/services/penetration-testing.html">Penetration Testing</a></li> <li><a href="/services/security-testing/mobile-application-security-testing.html">Mobile Application Security Testing (MAST)</a></li> <li><a href="/software-risk-manager.html">Application Security Posture Management (ASPM)</a></li> <li><a href="/fuzz-testing.html">Fuzz Testing Solutions</a></li> </ul> </section> <section> <h2>By Industry</h2> <ul id="solutionsThird"> <li><a href="/solutions/automotive.html">Automotive</a></li> <li><a href="/solutions/financial-services.html">Financial Services</a></li> <li><a href="/solutions/iot-embedded.html">IoT & Embedded</a></li> <li><a href="/solutions/healthcare.html">Medical Devices</a></li> <li><a href="/solutions/government.html">Public Sector</a></li> </ul> </section> <section> <h2>By Role</h2> <ul id="solutionsFourth"> <li><a href="/solutions/dev-devops.html">Dev and DevOps Teams</a></li> <li><a href="/solutions/security-teams.html">Security Teams</a></li> <li><a href="/solutions/legal-teams.html">Legal Teams</a></li> </ul> </section> </section> <!-- //////////////////////////////////////// DEFINITIONS - Solutions //////////////////////////////////////// --> <section class="navDefinitions"> <ul class="navDefUl solutionsFirst"> <li><span>AI-generated code</span> | Harness the power of AI coding assistants while managing the risks.</li> <li><span>API Security Testing</span> | Manage software risks with a holistic API security testing program.</li> <li><span>AppSec Program Consolidation</span> | Simplify your application security program.</li> <li><span>Application Security Testing</span> | Solutions to address security risks at all stages of the application life cycle. </li> <li><span>DevSecOps</span> | Solutions to help shift security left without slowing down your development teams.</li> <li><span>Software Supply Chain Security</span> | Solutions to identify and manage software supply chain risks end-to-end.</li> <li><span>Manage Enterprise AppSec Risk</span> | Scale your application security program without increasing complexity or adding friction.</li> <li><span>Cloud & Container Security</span> | Optimize your applications for secure deployment and operation in the cloud.</li> <li><span>Open Source License Compliance</span> | Effective solutions for ensuring open source license compliance.</li> <li><span>M&A Due Diligence</span> | Identify software risks that could negatively impact the value of acquired IP.</li> <li><span>Quality and Security Standards Compliance</span> | Ensure your software complies with the standards critical to customers and regulators.</li> </ul> <ul class="navDefUl solutionsSecond"> <li><span>Static Analysis (SAST)</span> | Analyzing code for security vulnerabilities without executing it.</li> <li><span>Software Composition Analysis (SCA)</span> | Analyzing software components for security and license compliance.</li> <li><span>Dynamic Analysis (DAST)</span> | Testing running applications for security vulnerabilities.</li> <li><span>Interactive Analysis (IAST)</span> | Real-time security testing during application execution.</li> <li><span>Penetration Testing</span> | Simulated cyberattacks to identify vulnerabilities.</li> <li><span>Mobile Application Security Testing (MAST)</span> | Ensuring the security of mobile applications.</li> <li><span>Application Security Posture Management (ASPM)</span> | Managing and improving application security posture.</li> <li><span>Fuzz Testing Solutions</span> | Identifying vulnerabilities by inputting random data to applications.</li> </ul> <ul class="navDefUl solutionsThird"> <li><span>Automotive</span> | Security solutions for automotive industry applications.</li> <li><span>Financial Services</span> | Security solutions tailored for financial services.</li> <li><span>IoT & Embedded</span> | Security for Internet of Things and embedded systems.</li> <li><span>Medical Devices</span> | Security solutions for medical devices.</li> <li><span>Public Sector</span> | Security solutions for government and public sector organizations.</li> </ul> <ul class="navDefUl solutionsFourth"> <li><span>Dev and DevOps Teams</span> | Security tools and practices for development and DevOps teams.</li> <li><span>Security Teams</span> | Solutions and support for dedicated security teams.</li> <li><span>Legal Teams</span> | Resources and compliance tools for legal teams.</li> </ul> <!-- CLOSE X - DESKTOP --> <svg class="close-sub-nav" aria-labelledby="svg-close-subnav2" version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 20.1 12.2" style="enable-background:new 0 0 20.1 12.2;" xml:space="preserve"> <text id="svg-close-subnav2">close sub navigation</text> <style type="text/css"> .st0bnbn{fill:#ffffff;} </style> <path id="bx-up-arrow-alt" class="st0bnbn" d="M8.6,5.7l1.5-1.2l0,0l1.5,1.2l6.4,6.4l2.1-2.1L10.1,0L0,10.1l2.1,2.1L8.6,5.7z"/> </svg> </section> <!-- //////////////////////////////////////// END DEFINITIONS //////////////////////////////////////// --> <section class="indexBar"> <button class="indexBarContainer"> <a class="indexBarA" href="/all-products-services.html"> <span>See All Product Services</span> </a> </button> </section> </nav> <!-- /////////////////////////////////////////////// SERVICES DROPDOWN //////////////////////////////////////////////////--> <nav id="Nav-Customer-Success" class="Customer-Success SIG-Sub-dropdown"> <p class="SIG-mobile-breadcrumb">Services</p> <section id="Container-Tools-Services" class="SIG-Sub-dropdown-container"> <!-- MOBILE GO BACK --> <svg class="mobile-go-back" aria-labelledby="svg-go-back3" version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 27 15.8" style="enable-background:new 0 0 27 15.8;" xml:space="preserve"><style type="text/css">.st0xmmxm{fill-rule:evenodd;clip-rule:evenodd;}</style><g id="arrow-left" transform="translate(-4.498 -10.123)"><path id="Path_367" class="st0xmmxm" d="M13.2,10.5c0.4,0.4,0.4,1.2,0,1.6c0,0,0,0,0,0l-6,6l6,6c0.4,0.4,0.4,1.2,0,1.6s-1.2,0.4-1.6,0l-6.7-6.7c-0.4-0.4-0.4-1.2,0-1.6c0,0,0,0,0,0l6.8-6.8C12,10,12.7,10,13.2,10.5C13.2,10.5,13.2,10.5,13.2,10.5L13.2,10.5z"/><path id="Path_368" class="st0xmmxm" d="M5.6,18c0-0.6,0.5-1.1,1.1-1.1h23.6c0.6,0,1.1,0.5,1.1,1.1s-0.5,1.1-1.1,1.1H6.8C6.1,19.1,5.6,18.6,5.6,18z"/></g></svg> <text id="svg-go-back3">go back</text> <button class="mobile-go-back-txt">Go Back</button> <section> <h2>Testing Services</h2> <ul id="customerFirst"> <li><a href="/services/security-testing.html">Security Testing Services Overview</a></li> <li><a href="/services/penetration-testing.html">Penetration Testing</a></li> <li><a href="/services/security-testing/mobile-application-security-testing.html">Mobile Application Security Testing (MAST)</a></li> </ul> </section> <section> <h2>Program Services</h2> <ul id="customerSecond"> <li><a href="/services/security-program/software-architecture-design.html">Threat & Risk Assessments</a></li> <li><a href="/services/security-program/strategy-planning.html">Program Strategy & Planning</a></li> <li><a href="/training.html">Security Training</a></li> <li><a href="/customer-success/implementation.html" target="_blank">Implementation & Deployment</a></li> </ul> </section> <section> <h2>Audit Services</h2> <ul id="customerThird"> <li><a href="/services/open-source-software-audit.html">Open Source & Security Audits</a></li> <!-- <li><a href="#">SBOM Generation & Validation</a></li> --> </ul> </section> <section> <a id="navAd" href="/resources/analyst-reports/gartner-magic-quadrant-appsec.html"> <img src="/content/dam/black-duck/en-us/images/Gartner_Magic_Quadrant_AST_2023-final-bg.svg" alt="Gartner Magic Quadrant" class="navAdImg"> <span class="navAdP"> <span class="navAdSpanMain">2023 Gartner® Magic Quadrant™ for AppSec Testing</span> <span class="navAdSpanSub">See why Black Duck is a Leader</span> </span> </a> </section> </section> <!-- //////////////////////////////////////// DEFINITIONS - SERVICES //////////////////////////////////////// --> <section class="navDefinitions"> <ul class="navDefUl customerFirst"> <li><span>Security Testing Services Overview</span> | Summary of the security testing services offered.</li> <li><span>Penetration Testing</span> | Simulated cyberattacks to identify vulnerabilities in your systems.</li> <li><span>Mobile Application Security Testing (MAST)</span> | Ensuring the security of mobile apps against threats.</li> </ul> <ul class="navDefUl customerSecond"> <!-- <li><span>Program Services</span> | Comprehensive services to support your security program.</li> --> <li><span>Threat & Risk Assessments</span> | Evaluation of potential security threats and vulnerabilities.</li> <li><span>Program Strategy & Planning</span> | Developing effective strategies for your security program.</li> <li><span>Security Training</span> | Courses and workshops to enhance your security skills and knowledge.</li> <li><span>Implementation & Deployment</span> | Assistance with deploying and integrating security solutions.</li> </ul> <ul class="navDefUl customerThird"> <li><span>Open Source & Security Audits</span> | Evaluations of open source components and overall security posture.</li> </ul> <!-- CLOSE X - DESKTOP --> <svg class="close-sub-nav" aria-labelledby="svg-close-subnav3" version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 20.1 12.2" style="enable-background:new 0 0 20.1 12.2;" xml:space="preserve"> <text id="svg-close-subnav3">close sub navigation</text> <style type="text/css"> .st0bnbn{fill:#ffffff;} </style> <path id="bx-up-arrow-alt" class="st0bnbn" d="M8.6,5.7l1.5-1.2l0,0l1.5,1.2l6.4,6.4l2.1-2.1L10.1,0L0,10.1l2.1,2.1L8.6,5.7z"/> </svg> </section> <!-- //////////////////////////////////////// END DEFINITIONS //////////////////////////////////////// --> <section class="indexBar"> <button class="indexBarContainer"> <a class="indexBarA" href="/all-products-services.html"> <span>See All Product Services</span> </a> </button> </section> </nav> <!-- /////////////////////////////////////////////// RESOURCES DROPDOWN //////////////////////////////////////////////////--> <nav id="Nav-Resources" class="Resources SIG-Sub-dropdown"> <p class="SIG-mobile-breadcrumb">Resources</p> <section id="Container-Resources" class="SIG-Sub-dropdown-container"> <!-- MOBILE GO BACK --> <svg class="mobile-go-back" version="1.1" aria-labelledby="svg-go-back4" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 27 15.8" style="enable-background:new 0 0 27 15.8;" xml:space="preserve"><style type="text/css">.st0xmmxm{fill-rule:evenodd;clip-rule:evenodd;}</style><g id="arrow-left" transform="translate(-4.498 -10.123)"><path id="Path_367" class="st0xmmxm" d="M13.2,10.5c0.4,0.4,0.4,1.2,0,1.6c0,0,0,0,0,0l-6,6l6,6c0.4,0.4,0.4,1.2,0,1.6s-1.2,0.4-1.6,0l-6.7-6.7c-0.4-0.4-0.4-1.2,0-1.6c0,0,0,0,0,0l6.8-6.8C12,10,12.7,10,13.2,10.5C13.2,10.5,13.2,10.5,13.2,10.5L13.2,10.5z"/><path id="Path_368" class="st0xmmxm" d="M5.6,18c0-0.6,0.5-1.1,1.1-1.1h23.6c0.6,0,1.1,0.5,1.1,1.1s-0.5,1.1-1.1,1.1H6.8C6.1,19.1,5.6,18.6,5.6,18z"/></g></svg> <text id="svg-go-back4">go back</text> <button class="mobile-go-back-txt">Go Back</button> <section> <h2>Latest Updates</h2> <ul id="resourcesFirst"> <li><a href="https://news.blackduck.com">Newsroom</a></li> <li><a href="/blog.html">Blog</a></li> <!-- <li><a href="#">Events & Webinars</a></li> --> <li><a href="/resources/cybersecurity-research-center.html">Cybersecurity Research Center</a></li> </ul> </section> <section> <h2>Customer Resources</h2> <ul id="resourcesSecond"> <li><a href="https://community.blackduck.com" target="_blank">Support</a></li> <li><a href="https://documentation.blackduck.com" target="_blank">Documentation</a></li> <li><a href="https://blackduck.skilljar.com" target="_blank">Black Duck Academy</a></li> <li><a href="https://community.blackduck.com/s/global-search/%40uri" target="_blank">Search Knowledge Base </a></li> <li><a href="https://community.blackduck.com/s/synopsys-product-directory" target="_blank">Community Q&A</a></li> </ul> </section> <section> <h2>Other Resources</h2> <ul id="resourcesThird"> <li><a href="/resources/ebooks.html">eBooks</a></li> <li><a href="/resources/case-studies.html">Case Studies</a></li> <li><a href="/resources/analyst-reports.html">Research & Reports</a></li> <li><a href="/resources/webinars.html">Webinars</a></li> <li><a href="/resources/white-papers.html">White Papers</a></li> <li><a href="/glossary.html">AppSec Glossary</a></li> <li><a href="/resources.html">Resource Library</a></li> </ul> </section> <section> <a id="navAd" href="/resources/analyst-reports/gartner-magic-quadrant-appsec.html"> <img src="/content/dam/black-duck/en-us/images/Gartner_Magic_Quadrant_AST_2023-final-bg.svg" alt="Gartner Magic Quadrant" class="navAdImg"> <span class="navAdP"> <span class="navAdSpanMain">2023 Gartner® Magic Quadrant™ for AppSec Testing</span> <span class="navAdSpanSub">See why Black Duck is a Leader</span> </span> </a> </section> </section> <!-- //////////////////////////////////////// DEFINITIONS - Resources //////////////////////////////////////// --> <section class="navDefinitions"> <ul class="navDefUl resourcesFirst"> <li><span>Newsroom</span> | Latest news, press releases, and media coverage about Black Duck.</li> <li><span>Blog</span> | Insights, updates, and expert opinions on application security.</li> <li><span>Cybersecurity Research Center</span> | In-depth studies and findings on cybersecurity topics.</li> </ul> <ul class="navDefUl resourcesSecond"> <li><span>Support</span> | Assistance and troubleshooting for Black Duck products and services.</li> <li><span>Documentation</span> | Detailed guides and manuals for using Black Duck products.</li> <li><span>Black Duck Academy</span> | Educational courses and training on application security.</li> <li><span>Search Knowledge Base </span> | Find answers and solutions in our extensive knowledge repository.</li> <li><span>Community Q&A</span> | Engage with other users and experts to get your questions answered.</li> </ul> <ul class="navDefUl resourcesThird"> <!-- <li><span>Other Resources</span> | Additional tools and information to help you with Black Duck products.</li> --> <li><span>eBooks</span> | Downloadable resources on various application security topics.</li> <li><span>Case Studies</span> | Real-world examples of how customers use Black Duck solutions.</li> <li><span>Research & Reports</span> | Comprehensive reports and analysis on industry trends.</li> <li><span>Webinars</span> | Engage with experts through sessions to enhance your application security knowledge</li> <li><span>White Papers</span> | Explore in-depth research and insights to guide your security strategies and decisions</li> <li><span>AppSec Glossary</span> | Definitions and explanations of common application security terms.</li> <li><span>Resource Library</span> | A collection of all available resources and materials.</li> </ul> <!-- CLOSE X - DESKTOP --> <svg class="close-sub-nav" aria-labelledby="svg-close-subnav4" version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 20.1 12.2" style="enable-background:new 0 0 20.1 12.2;" xml:space="preserve"> <text id="svg-close-subnav4">close sub navigation</text> <style type="text/css"> .st0bnbn{fill:#ffffff;} </style> <path id="bx-up-arrow-alt" class="st0bnbn" d="M8.6,5.7l1.5-1.2l0,0l1.5,1.2l6.4,6.4l2.1-2.1L10.1,0L0,10.1l2.1,2.1L8.6,5.7z"/> </svg> </section> <!-- //////////////////////////////////////// END DEFINITIONS //////////////////////////////////////// --> <section class="indexBar"> <button class="indexBarContainer"> <a class="indexBarA" href="/all-products-services.html"> <span>See All Product Services</span> </a> </button> </section> </nav> </section> <script src="/etc.clientlibs/synopsys/clientlibs/navigation/header.lc-8f0aa4a80ba59246018a5ed193cfeba3-lc.min.js"></script> </div> <div class="htmlTextOnly aem-GridColumn aem-GridColumn--default--12"> <div class="container "> <section id="ac05ee133-1057-42e4-afcf-526b25059874" class="html-text-only-component" data-enable-page-css="true"> <style> ul.SIG-Main-Corp li.LihasDropdown a:after, ul.SIG-Main-Corp li.LihasDropdown span:after { background-image: url("data:image/svg+xml,%3Csvg version='1.1' id='Layer_1b' xmlns='http://www.w3.org/2000/svg' xmlns:xlink='http://www.w3.org/1999/xlink' x='0px' y='0px' viewBox='0 0 9 8' style='enable-background:new 0 0 9 8;' xml:space='preserve'%3E%3Cstyle type='text/css'%3E.st0az%7Bfill:%23111C24;%7D%3C/style%3E%3Cpath id='Polygon_2' class='st0az' d='M4.5,8L0,0h9L4.5,8z'/%3E%3C/svg%3E%0A"); } ul.SIG-Sub-ul li.LihasDropdown a:after { background-image: url("data:image/svg+xml,%3Csvg version='1.1' id='Layer_1b' xmlns='http://www.w3.org/2000/svg' xmlns:xlink='http://www.w3.org/1999/xlink' x='0px' y='0px' viewBox='0 0 9 8' style='enable-background:new 0 0 9 8;' xml:space='preserve'%3E%3Cstyle type='text/css'%3E.st0az%7Bfill:%235A2D83;%7D%3C/style%3E%3Cpath id='Polygon_2' class='st0az' d='M4.5,8L0,0h9L4.5,8z'/%3E%3C/svg%3E%0A"); } ul.SIG-Sub-ul li.LihasDropdown.SIG-Sub-active a:after { background-image: url("data:image/svg+xml,%3Csvg version='1.1' id='Layer_1' xmlns='http://www.w3.org/2000/svg' xmlns:xlink='http://www.w3.org/1999/xlink' x='0px' y='0px' viewBox='0 0 9 8' style='enable-background:new 0 0 9 8;' xml:space='preserve'%3E%3Cstyle type='text/css'%3E .st0msmms%7Bfill:%235A2D83;%7D%0A%3C/style%3E%3Cpath id='Polygon_8' class='st0msmms' d='M4.5,0L9,8H0L4.5,0z'/%3E%3C/svg%3E"); } .SIG-Sub-dropdown section.indexBar span:after { background-image: url("data:image/svg+xml,%3Csvg version='1.1' id='Layer_1' xmlns='http://www.w3.org/2000/svg' xmlns:xlink='http://www.w3.org/1999/xlink' x='0px' y='0px' viewBox='0 0 9 7.9' style='enable-background:new 0 0 9 7.9;' xml:space='preserve'%3E%3Cstyle type='text/css'%3E.st0ccv%7Bfill-rule:evenodd;clip-rule:evenodd;fill:%235A2D83;%7D%3C/style%3E%3Cg id='arrow-right-short' transform='translate(-9 -10.123)'%3E%3Cpath id='Path_365' class='st0ccv' d='M12.3,10.3c0.3-0.2,0.7-0.2,1,0l4.4,3.4c0.2,0.1,0.3,0.4,0.1,0.7c0,0.1-0.1,0.1-0.1,0.1l-4.4,3.4c-0.3,0.2-0.7,0.2-1,0c-0.2-0.1-0.3-0.4-0.1-0.7c0-0.1,0.1-0.1,0.1-0.1l3.9-3l-3.9-3c-0.2-0.1-0.3-0.4-0.1-0.7C12.2,10.4,12.3,10.3,12.3,10.3L12.3,10.3z'/%3E%3Cpath id='Path_366' class='st0ccv' d='M9,14.1c0-0.4,0.2-0.7,0.6-0.7h7.2c0.3,0,0.6,0.3,0.6,0.7s-0.2,0.7-0.6,0.7H9.6C9.2,14.8,9,14.5,9,14.1z'/%3E%3C/g%3E%3C/svg%3E%0A"); } #hamburger { background-image: url("data:image/svg+xml,%3C%3Fxml version='1.0' encoding='utf-8'%3F%3E%3C!-- Generator: Adobe Illustrator 25.2.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --%3E%3Csvg version='1.1' id='Layer_1' xmlns='http://www.w3.org/2000/svg' xmlns:xlink='http://www.w3.org/1999/xlink' x='0px' y='0px' viewBox='0 0 16.1 15' style='enable-background:new 0 0 16.1 15;' xml:space='preserve'%3E%3Cg id='menu' transform='translate(-5.625 -6.75)'%3E%3Cpath id='Path_361' d='M5.6,6.8h16.1V8H5.6V6.8z'/%3E%3Cpath id='Path_362' d='M5.6,13.6h16.1v1.3H5.6V13.6z'/%3E%3Cpath id='Path_363' d='M5.6,20.5h16.1v1.3H5.6V20.5z'/%3E%3C/g%3E%3C/svg%3E%0A"); } @media only screen and (max-width: 1129px) { ul.SIG-Sub-ul li.LihasDropdown a:after, ul.SIG-Main-Corp li.LihasDropdown span:after, ul.SIG-Sub-ul li.LihasDropdown.SIG-Sub-active:after { background-image: url("data:image/svg+xml,%3Csvg version='1.1' id='Layer_1' xmlns='http://www.w3.org/2000/svg' xmlns:xlink='http://www.w3.org/1999/xlink' x='0px' y='0px' viewBox='0 0 9 7.9' style='enable-background:new 0 0 9 7.9;' xml:space='preserve'%3E%3Cstyle type='text/css'%3E.st0ccv%7Bfill-rule:evenodd;clip-rule:evenodd;fill:%23000000;%7D%3C/style%3E%3Cg id='arrow-right-short' transform='translate(-9 -10.123)'%3E%3Cpath id='Path_365' class='st0ccv' d='M12.3,10.3c0.3-0.2,0.7-0.2,1,0l4.4,3.4c0.2,0.1,0.3,0.4,0.1,0.7c0,0.1-0.1,0.1-0.1,0.1l-4.4,3.4c-0.3,0.2-0.7,0.2-1,0c-0.2-0.1-0.3-0.4-0.1-0.7c0-0.1,0.1-0.1,0.1-0.1l3.9-3l-3.9-3c-0.2-0.1-0.3-0.4-0.1-0.7C12.2,10.4,12.3,10.3,12.3,10.3L12.3,10.3z'/%3E%3Cpath id='Path_366' class='st0ccv' d='M9,14.1c0-0.4,0.2-0.7,0.6-0.7h7.2c0.3,0,0.6,0.3,0.6,0.7s-0.2,0.7-0.6,0.7H9.6C9.2,14.8,9,14.5,9,14.1z'/%3E%3C/g%3E%3C/svg%3E%0A"); } .mobile-x-close, #hamburger.mobile-x-close { background-image: url("data:image/svg+xml,%3Csvg class='mobile-x-close' version='1.1' id='Layer_1' xmlns='http://www.w3.org/2000/svg' xmlns:xlink='http://www.w3.org/1999/xlink' x='0px' y='0px' viewBox='0 0 15 15' style='enable-background:new 0 0 15 15;' xml:space='preserve'%3E%3Cg id='close' transform='translate(-6.776 -6.777)'%3E%3Cpath id='Path_364' d='M8.5,7.1c-0.4-0.4-1-0.4-1.4,0c-0.4,0.4-0.4,1,0,1.4l5.8,5.8l-5.8,5.8c-0.4,0.4-0.4,1,0,1.4c0.4,0.4,1,0.4,1.4,0l5.8-5.8l5.8,5.8c0.4,0.4,1,0.4,1.4,0s0.4-1,0-1.4l-5.8-5.8l5.8-5.8c0.4-0.4,0.4-1,0-1.4c-0.4-0.4-1-0.4-1.4,0l-5.8,5.8L8.5,7.1z'/%3E%3C/g%3E%3C/svg%3E"); } } ul.SIG-Sub-ul li.LihasDropdown a:after { background-image: url("data:image/svg+xml,%3Csvg version='1.1' id='Layer_1b' xmlns='http://www.w3.org/2000/svg' xmlns:xlink='http://www.w3.org/1999/xlink' x='0px' y='0px' viewBox='0 0 9 8' style='enable-background:new 0 0 9 8;' xml:space='preserve'%3E%3Cstyle type='text/css'%3E.st0az%7Bfill:%23ffffff;%7D%3C/style%3E%3Cpath id='Polygon_2' class='st0az' d='M4.5,8L0,0h9L4.5,8z'/%3E%3C/svg%3E%0A"); } ul.SIG-Sub-ul li.LihasDropdown.SIG-Sub-active a:after { background-image: url("data:image/svg+xml,%3Csvg version='1.1' id='Layer_1' xmlns='http://www.w3.org/2000/svg' xmlns:xlink='http://www.w3.org/1999/xlink' x='0px' y='0px' viewBox='0 0 9 8' style='enable-background:new 0 0 9 8;' xml:space='preserve'%3E%3Cstyle type='text/css'%3E .st0msmms%7Bfill:%23ffffff;%7D%0A%3C/style%3E%3Cpath id='Polygon_8' class='st0msmms' d='M4.5,0L9,8H0L4.5,0z'/%3E%3C/svg%3E"); } .SIG-Sub-dropdown section.indexBar span:after { background-image: url("data:image/svg+xml,%3Csvg version='1.1' id='Layer_1' xmlns='http://www.w3.org/2000/svg' xmlns:xlink='http://www.w3.org/1999/xlink' x='0px' y='0px' viewBox='0 0 9 7.9' style='enable-background:new 0 0 9 7.9;' xml:space='preserve'%3E%3Cstyle type='text/css'%3E.st0ccv%7Bfill-rule:evenodd;clip-rule:evenodd;fill:%23ffffff;%7D%3C/style%3E%3Cg id='arrow-right-short' transform='translate(-9 -10.123)'%3E%3Cpath id='Path_365' class='st0ccv' d='M12.3,10.3c0.3-0.2,0.7-0.2,1,0l4.4,3.4c0.2,0.1,0.3,0.4,0.1,0.7c0,0.1-0.1,0.1-0.1,0.1l-4.4,3.4c-0.3,0.2-0.7,0.2-1,0c-0.2-0.1-0.3-0.4-0.1-0.7c0-0.1,0.1-0.1,0.1-0.1l3.9-3l-3.9-3c-0.2-0.1-0.3-0.4-0.1-0.7C12.2,10.4,12.3,10.3,12.3,10.3L12.3,10.3z'/%3E%3Cpath id='Path_366' class='st0ccv' d='M9,14.1c0-0.4,0.2-0.7,0.6-0.7h7.2c0.3,0,0.6,0.3,0.6,0.7s-0.2,0.7-0.6,0.7H9.6C9.2,14.8,9,14.5,9,14.1z'/%3E%3C/g%3E%3C/svg%3E%0A"); } text { display:none; } </style> </section> </div> </div> </div> </div> </div> </div> <div class="synopsysContainer responsivegrid aem-GridColumn aem-GridColumn--default--12"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="banner image aem-GridColumn aem-GridColumn--default--12"> <style scoped> .c68c71429-c232-4ea1-89a1-43eab42c2b5c.component-banner .desktop-wrapper { background-image: url("/glossary/what-is-connected-car-cyber-security/_jcr_content/root/synopsyscontainer/banner_copy_copy_cop/image.coreimg.svg/1728391903584/header-purple.svg"); } @media only screen and (min-width: 730px) { .desktop-svg{ opacity: 0; } } </style> <style scoped> @media only screen and (max-width: 729px) { .c68c71429-c232-4ea1-89a1-43eab42c2b5c .dm-mobile{ display: none; } .c68c71429-c232-4ea1-89a1-43eab42c2b5c .dm-desktop{ display: block; } } </style> <section id="banner-bc0d82ea7c" class="component-banner c68c71429-c232-4ea1-89a1-43eab42c2b5c transparent " data-card-type="banner"> <div class="desktop-wrapper "> <div class="text-overlay flex-container content-align-center text-align-center cropped-img"> <div class="content-wrapper text-width-60 paddingSmall "> <div class="text-wrapper contentValignCenter"> <div class="component-text"> <h1 class="title"><span class="text-size-smaller" style="color: #fff;"><p>Connected Car Cyber Security</p></span></h1> <div class="component-text"> </div> </div> </div> <div class="shapeTbg slash transparent" style="background-color: #5A2A82"></div> </div> </div> <div class="shapeTbg slash transparent text-width-60" style="background-color: #5A2A82"></div> </div> </section> </div> <div class="breadcrumb aem-GridColumn aem-GridColumn--default--12"> <div class="background-component breadcrumbBG vert-pad-top-xs "> <div class="container "> <section class="component-breadcrumb "> <nav id="primary_nav_wrap" class="clearfix"> <ul> <li><a class="parent" href="/">Application Security</a> <div class="icon-dropdown-arrow"></div><ul class="dropdown-menu" role="menu"> <li><a class="subBreadcrumb" href="/code-sight.html">Code Sight</a></li> <li><a class="subBreadcrumb" href="/dast.html">Continuous Dynamic</a></li> <li><a class="subBreadcrumb" href="/services.html">Services</a></li> <li><a class="subBreadcrumb" href="/blog.html">Blog Home</a></li> </ul> </li> <li><a class="parent" href="/glossary.html">Glossary</a> <div class="icon-dropdown-arrow"></div><ul class="dropdown-menu" role="menu"> <li><a class="subBreadcrumb" href="/glossary/what-is-owasp-top-10.html">OWASP Top 10</a></li> </ul> </li> </ul> </nav> </section> </div> </div> </div> <div class="column aem-GridColumn aem-GridColumn--default--12"> <div class="background-component vert-pad-top-sm vert-pad-bottom-md"> <div class="container "> <section id="column-9aa3c84881" class="component-column row "> <div class="col-xs-12 col-sm-3 two2575PinnedLeft"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="tableOfContents aem-GridColumn aem-GridColumn--default--12"> <div class="container "> <section id="toc" class="cmp-tableofcontents table-of-contents-article-layout"> <div class="cmp-tableofcontents__header"> <div class="cmp-tableofcontents__title">Table of Contents</div> </div> <div class="cmp-tableofcontents__content-list"> <ul class="cmp-tableofcontents__content-list-wraper"> <li class="cmp-tableofcontents__content-item"> <div class="cmp-tableofcontents__content-item-wraper"> <a data-href="#A" class="cmp-tableofcontents__content-item-text">Cyber security best practices for modern vehicles</a> </div> </li> <li class="cmp-tableofcontents__content-item"> <div class="cmp-tableofcontents__content-item-wraper"> <a data-href="#B" class="cmp-tableofcontents__content-item-text">Examples of vulnerabilities in connected cars</a> </div> </li> <li class="cmp-tableofcontents__content-item"> <div class="cmp-tableofcontents__content-item-wraper"> <a data-href="#C" class="cmp-tableofcontents__content-item-text">SAST for automotive cyber security</a> </div> </li> <li class="cmp-tableofcontents__content-item"> <div class="cmp-tableofcontents__content-item-wraper"> <a data-href="#D" class="cmp-tableofcontents__content-item-text">IAST for automotive cyber security</a> </div> </li> <li class="cmp-tableofcontents__content-item"> <div class="cmp-tableofcontents__content-item-wraper"> <a data-href="#E" class="cmp-tableofcontents__content-item-text">SCA for automotive cyber security</a> </div> </li> <li class="cmp-tableofcontents__content-item"> <div class="cmp-tableofcontents__content-item-wraper"> <a data-href="#F" class="cmp-tableofcontents__content-item-text">Managing software code risk in the automotive industry</a> </div> </li> </ul> </div> <p class="cmp-tableofcontents__scroll-to-top-container"> <a class="cmp-tableofcontents__scroll-to-top visible" data-href="#"> <i class="icon-chevron-up"></i> </a> </p> </section> </div> </div> </div> </div> <div class="col-xs-12 col-sm-9 two2575Right"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="spotlight aem-GridColumn aem-GridColumn--default--12"> <div class="container "> <section class="component-spotlight spotlight-header-indented"> <div class="row"> <h2 class="spotlight-title"><span>Overview</span></h2> </div> <div class="row"> <div> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="text aem-GridColumn aem-GridColumn--default--12"> <div class="container "> <section class="component-textcomp "> <div class="component-text"> <h2 class="title "> <span style="color: ;"> </span> </h2> </div> <div class="component-text"> <p>According to Robert Charette, as summarized on the QSM blog, “The first production car to incorporate embedded software was the 1977 General Motors Oldsmobile Toronado which had an electronic control unit (ECU) that managed electronic spark timing. By 1981, GM had deployed about 50,000 lines of engine control software code across their entire domestic passenger car line.”</p> <p>Joe Madden at QSM notes that cars “cars now depend on millions of lines of code running up to 100 networked ECUs … which control and monitor everything from the powertrain” to safety systems such as airbags and braking.</p> <p>Statista projects that by 2025, there will be over 400 million&nbsp;connected cars in operation, up from some 237 million in 2021.&nbsp;</p> </div> </section> </div> </div> </div> </div> </div> </section> </div> </div> <div class="column aem-GridColumn aem-GridColumn--default--12"> <div class="container "> <section id="column-1400c92bdc" class="component-column row "> <div class="col-xs-12"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="anchor aem-GridColumn aem-GridColumn--default--12"> <div id="A" class="component-anchor"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> </div> </div> </div> <div class="text aem-GridColumn aem-GridColumn--default--12"> <div class="background-component vert-pad-top-md "> <div class="container "> <section class="component-textcomp text-align-center"> <div class="component-text"> <h2 class="title no-margin"> <span class="text-size-larger" style="color: #5A2A82;"> Cyber security best practices for modern vehicles </span> </h2> </div> <div class="component-text"> </div> </section> </div> </div> </div> <div class="text aem-GridColumn aem-GridColumn--default--12"> <div class="background-component vert-pad-bottom-sm"> <div class="container "> <section class="component-textcomp text-align-left"> <div class="component-text"> <h2 class="title "> <span class="text-size-smaller" style="color: #3c3c3c;"> </span> </h2> </div> <div class="component-text"> <p>While connected cars offer abundant opportunities for consumers, automakers and their suppliers need to consider what the connected car means for consumer privacy and security. As more connected vehicles hit the roads, software vulnerabilities become accessible to malicious hackers using cellular networks, Wi-Fi, and hardline connections to exploit them.</p> <p>The potential for hackers to gain unauthorized remote access to the vehicle network and compromise critical safety systems puts at risk not just users’ personal information but their physical safety as well.</p> <p><a href="https://techspective.net/2017/08/16/safety-security-open-source-automotive-industry/">As noted on TechSpective</a>, “Vehicle manufacturers need to adopt a cybersecurity approach that addresses not only obvious exposures in their car’s software, but also the hidden vulnerabilities that could be introduced by open source [or third-party] components in that software.”</p> </div> </section> </div> </div> </div> <div class="text aem-GridColumn aem-GridColumn--default--12"> <div class="background-component vert-pad-top-md "> <div class="container "> <section class="component-textcomp text-align-left"> <div class="component-text"> </div> <div class="component-text"> </div> <hr class="separator"/> </section> </div> </div> </div> <div class="anchor aem-GridColumn aem-GridColumn--default--12"> <div id="B" class="component-anchor"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> </div> </div> </div> <div class="text aem-GridColumn aem-GridColumn--default--12"> <div class="background-component vert-pad-top-md "> <div class="container "> <section class="component-textcomp text-align-center"> <div class="component-text"> <h2 class="title no-margin"> <span class="text-size-larger" style="color: #5A2A82;"> Examples of vulnerabilities in connected car systems </span> </h2> </div> <div class="component-text"> </div> </section> </div> </div> </div> <div class="text aem-GridColumn aem-GridColumn--default--12"> <div class="background-component vert-pad-bottom-sm"> <div class="container "> <section class="component-textcomp text-align-left"> <div class="component-text"> <h2 class="title "> <span class="text-size-smaller" style="color: #3c3c3c;"> </span> </h2> </div> <div class="component-text"> <p><a href="https://semiengineering.com/safety-security-and-open-source-in-the-automotive-industry/">As noted on TechSpective</a>, “When you put new technology into cars, you run into security challenges<i>.</i>&nbsp;For example:</p> <ul> <li>When security researchers demonstrated that&nbsp;<a href="https://www.wired.com/2015/07/jeep-hack-chrysler-recalls-1-4m-vehicles-bug-fix/">they could hack a Jeep over the Internet</a>&nbsp;to hijack its brakes and transmission, it posed a security risk serious enough that Chrysler recalled 1.4 million vehicles to fix the bug that enabled the attack.</li> <li>For nearly half a decade,&nbsp;<a href="https://www.wired.com/2015/09/gm-took-5-years-fix-full-takeover-hack-millions-onstar-cars/">millions of GM cars and trucks were vulnerable</a>&nbsp;to a remote exploit that was capable of everything from tracking vehicles to engaging their brakes at high speed to disabling brakes altogether.</li> <li>The&nbsp;<a href="https://www.wired.com/2015/08/researchers-hacked-model-s-teslas-already/">Tesla Model S’s infotainment system contained a four-year-old vulnerability</a>&nbsp;that could potentially let an attacker conduct a fully remote hack to start the car or cut the motor.”</li> <li><a href="https://www.stout.com/insights/report/2018-automotive-warranty-recall-report">Stout’s 2018 Automotive Warranty &amp; Recall Report</a>&nbsp;suggests companies had to recall nearly 8 million vehicles in 2017 because of software-related issues.</li> </ul> </div> </section> </div> </div> </div> <div class="text aem-GridColumn aem-GridColumn--default--12"> <div class="background-component vert-pad-top-md vert-pad-bottom-md"> <div class="container "> <section class="component-textcomp text-align-left"> <div class="component-text"> </div> <div class="component-text"> </div> <hr class="separator"/> </section> </div> </div> </div> <div class="richTextEditor aem-GridColumn aem-GridColumn--default--12"> <div class="background-component light-grey-bg vert-pad-top-sm vert-pad-bottom-sm"> <div class="container "> <section class="component-rtecomp"> <div class="component-rte left-right-pad-sm"> <h4 style="text-align: center;"><span class="text-color-black">How effective is the auto industry at addressing the software security risks in connected vehicles?</span></h4> <p style="text-align: center;"><a href="/resources/analyst-reports/automotive-cyber-security.html"><span class="component-button-orange">Read the report</span></a></p> </div> </section> </div> </div> </div> <div class="anchor aem-GridColumn aem-GridColumn--default--12"> <div id="C" class="component-anchor"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> </div> </div> </div> <div class="text aem-GridColumn aem-GridColumn--default--12"> <div class="background-component vert-pad-top-md "> <div class="container "> <section class="component-textcomp text-align-center"> <div class="component-text"> <h2 class="title no-margin"> <span class="text-size-larger" style="color: #5A2A82;"> SAST for automotive cyber security </span> </h2> </div> <div class="component-text"> </div> </section> </div> </div> </div> <div class="text aem-GridColumn aem-GridColumn--default--12"> <div class="background-component vert-pad-bottom-sm"> <div class="container "> <section class="component-textcomp text-align-left"> <div class="component-text"> <h2 class="title "> <span class="text-size-smaller" style="color: #3c3c3c;"> </span> </h2> </div> <div class="component-text"> <p>Static analysis (<a href="/static-analysis-tools-sast.html">SAST</a>) is an essential tool for software developers in the auto industry to detect security bugs—such as&nbsp;<a href="/glossary/what-is-sql-injection.html">SQL injection</a>,&nbsp;<a href="/glossary/what-is-cross-site-scripting.html">cross-site scripting</a>, and&nbsp;<a href="/blog/detect-prevent-and-mitigate-buffer-overflow-attacks.html">buffer overflows</a>—in their proprietary code.</p> <p>SAST, also known as&nbsp;white box testing, scans an application before the code is compiled.</p> <p>Since it doesn’t require an application to be run or code to be executed, SAST can take place early in the&nbsp;software development life cycle (<a href="/glossary/what-is-sdlc.html">SDLC</a>). SAST helps developers identify vulnerabilities in the initial stages of development and quickly resolve issues without breaking builds or passing on vulnerabilities to the final release of the application.</p> </div> </section> </div> </div> </div> <div class="text aem-GridColumn aem-GridColumn--default--12"> <div class="background-component vert-pad-top-md "> <div class="container "> <section class="component-textcomp text-align-left"> <div class="component-text"> </div> <div class="component-text"> </div> <hr class="separator"/> </section> </div> </div> </div> <div class="anchor aem-GridColumn aem-GridColumn--default--12"> <div id="D" class="component-anchor"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> </div> </div> </div> <div class="text aem-GridColumn aem-GridColumn--default--12"> <div class="background-component vert-pad-top-md "> <div class="container "> <section class="component-textcomp text-align-center"> <div class="component-text"> <h2 class="title no-margin"> <span class="text-size-larger" style="color: #5A2A82;"> IAST for automotive cyber security </span> </h2> </div> <div class="component-text"> </div> </section> </div> </div> </div> <div class="text aem-GridColumn aem-GridColumn--default--12"> <div class="background-component vert-pad-bottom-sm"> <div class="container "> <section class="component-textcomp text-align-left"> <div class="component-text"> <h2 class="title "> <span class="text-size-smaller" style="color: #3c3c3c;"> </span> </h2> </div> <div class="component-text"> <p>Interactive application security testing (<a href="/interactive-application-security-testing.html">IAST</a>) solutions help automotive organizations identify and manage security risks associated with vulnerabilities discovered in running applications using dynamic testing (often referred to as runtime testing) techniques. Some IAST solutions integrate software composition analysis (SCA) tools to address known vulnerabilities in open source components and frameworks.</p> <p>IAST generally takes place during the test/QA stage of the&nbsp;software development life cycle&nbsp;(SDLC). IAST effectively shifts testing left,&nbsp;so&nbsp;problems are caught earlier in the development cycle, reducing remediation costs and delays. Many IAST tools can&nbsp;be integrated&nbsp;into&nbsp;<a href="/glossary/what-is-cicd-tools.html">continuous integration (CI)&nbsp;and&nbsp;continuous&nbsp;development (CD) tools</a>. The latest generation of IAST tools&nbsp;return&nbsp;results as&nbsp;soon as changed code is recompiled and the running app retested, helping developers identify vulnerabilities even earlier in the development process.</p> </div> </section> </div> </div> </div> <div class="anchor aem-GridColumn aem-GridColumn--default--12"> <div id="E" class="component-anchor"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> </div> </div> </div> <div class="text aem-GridColumn aem-GridColumn--default--12"> <div class="background-component vert-pad-top-md "> <div class="container "> <section class="component-textcomp text-align-center"> <div class="component-text"> <h2 class="title no-margin"> <span class="text-size-larger" style="color: #5A2A82;"> SCA for automotive cyber security </span> </h2> </div> <div class="component-text"> </div> </section> </div> </div> </div> <div class="text aem-GridColumn aem-GridColumn--default--12"> <div class="background-component vert-pad-bottom-sm"> <div class="container "> <section class="component-textcomp text-align-left"> <div class="component-text"> <h2 class="title "> <span class="text-size-smaller" style="color: #3c3c3c;"> </span> </h2> </div> <div class="component-text"> <p>With the growth in open source use, especially by third-party vendors, auto manufacturers need to ensure that&nbsp;<a href="/software-composition-analysis-tools.html">software composition analysis</a>&nbsp;(SCA) is part of their application security toolbelt. Code audits consistently show open source components composing as much as 25% of any given automotive application.&nbsp;<a href="https://www.forrester.com/report/The+Forrester+Wave+Software+Composition+Analysis+Q1+2017/-/E-RES136463">As Forrester Research noted</a>&nbsp;in a 2017 report, “Unfortunately, many of these [open source] components come with liabilities in their license agreements, and one out of every 16 open source download requests is for a component with a known vulnerability.”</p> <p>With the addition of an SCA solution, automotive organizations can effectively identify the use of open source in their code, whether it comes from internal development teams or from external suppliers; detect vulnerabilities in open source components; and manage whatever license compliance their use of open source may require.</p> </div> </section> </div> </div> </div> <div class="text aem-GridColumn aem-GridColumn--default--12"> <div class="background-component vert-pad-top-md vert-pad-bottom-md"> <div class="container "> <section class="component-textcomp text-align-left"> <div class="component-text"> </div> <div class="component-text"> </div> <hr class="separator"/> </section> </div> </div> </div> <div class="anchor aem-GridColumn aem-GridColumn--default--12"> <div id="F" class="component-anchor"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> </div> </div> </div> <div class="text aem-GridColumn aem-GridColumn--default--12"> <div class="background-component vert-pad-top-md "> <div class="container "> <section class="component-textcomp text-align-center"> <div class="component-text"> <h2 class="title no-margin"> <span class="text-size-larger" style="color: #5A2A82;"> Managing code risk in the automotive industry </span> </h2> </div> <div class="component-text"> </div> </section> </div> </div> </div> <div class="text aem-GridColumn aem-GridColumn--default--12"> <div class="background-component vert-pad-bottom-sm"> <div class="container "> <section class="component-textcomp text-align-left"> <div class="component-text"> <h2 class="title "> <span class="text-size-smaller" style="color: #3c3c3c;"> </span> </h2> </div> <div class="component-text"> <p>Effective management of code risk is becoming increasingly important to the automotive industry.&nbsp;<a href="https://techspective.net/2017/08/16/safety-security-open-source-automotive-industry/">As pointed out on TechSpective</a>, “By integrating … processes and automated solutions into their software supply chain, automakers, suppliers, and technology companies servicing the automotive industry can maximize the benefits of [the software their vehicles use] while effectively managing their risks.”</p> <p><a href="https://www.information-age.com/open-source-security-challenges-cars-123466797/">As noted on Information Age</a>, “Just as lean manufacturing and ISO-9000 practices brought both greater agility and quality to the automotive industry, visibility and control will be essential to maintaining the security and code quality of automotive software applications and platforms.” A rigorous approach to cyber security is vital to achieve the full range of benefits new automotive technologies promise while preserving top quality and rapid time to market.</p> </div> </section> </div> </div> </div> <div class="text aem-GridColumn aem-GridColumn--default--12"> <div class="background-component vert-pad-top-md "> <div class="container "> <section class="component-textcomp text-align-left"> <div class="component-text"> </div> <div class="component-text"> </div> <hr class="separator"/> </section> </div> </div> </div> </div> </div> </section> </div> </div> </div> </div> </section> </div> </div> </div> <div class="banner image aem-GridColumn aem-GridColumn--default--12"> <style scoped> .c778a0478-0c3e-4684-8ff4-3e5382308449.component-banner .desktop-wrapper { background-image: url("/glossary/what-is-connected-car-cyber-security/_jcr_content/root/synopsyscontainer/banner_copy_copy_cop_1233284867/image.coreimg.svg/1721847525977/footer-purple.svg"); } @media only screen and (min-width: 730px) { .desktop-svg{ opacity: 0; } } </style> <style scoped> @media only screen and (max-width: 729px) { .c778a0478-0c3e-4684-8ff4-3e5382308449 .dm-mobile{ display: none; } .c778a0478-0c3e-4684-8ff4-3e5382308449 .dm-desktop{ display: block; } } </style> <section id="banner-1947e89594" class="component-banner c778a0478-0c3e-4684-8ff4-3e5382308449 transparent " data-card-type="banner" data-link="/content/black-duck/en-us/contact-sales.html"> <div class="desktop-wrapper "> <div class="text-overlay flex-container content-align-center text-align-center cropped-img"> <div class="content-wrapper text-width-60 paddingSmall "> <div class="text-wrapper contentValignCenter"> <div class="component-text"> <h4 class="title"><span class="text-size-smaller" style="color: #fff;"><p>Questions about application security?</p></span></h4> <div class="component-text"> <div class="component-button padding-10" style="background-color: #fcaf1a"> <a href="/contact-sales.html">Contact us</a> </div> </div> </div> </div> <div class="shapeTbg slash transparent" style="background-color: #5A2A82"></div> </div> </div> <div class="shapeTbg slash transparent text-width-60" style="background-color: #5A2A82"></div> </div> </section> </div> </div> </div> <div class="experiencefragment aem-GridColumn aem-GridColumn--default--12"> <div id="footerSIG" class="cmp-experiencefragment cmp-experiencefragment--sig-footer-js"> <div class="xf-content-height"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div class="footer aem-GridColumn aem-GridColumn--default--12"> <link rel="stylesheet" href="/etc.clientlibs/synopsys/clientlibs/navigation/footer.lc-a1d1a7b1374f3bc3ce1ce3ecaebb0152-lc.min.css" type="text/css"> <section id="a8663ad3b-9030-4e32-bf74-3b76d93e5f06" class="navigation-footer-component"> <footer id="footerBD"> <div class="footerBD-bg-component"> <div class="footerBD-container"> <div class="footerBD-social-icons-wrapper"> <figure class="BD-logo-figure"> <a href="/"> <img class="blackDuck-footer-logo" src="/content/dam/black-duck/en-us/images/BlackDuckLogo-OnDark.svg" alt="Black Duck Home Page"> </a> </figure> <h3>Follow</h3> <ul class="BD-social-icons"> <li> <a href="https://x.com/blackduck_sw" title="Twitter"> <svg class="svg-inline--fa fa-x-twitter" aria-hidden="true" focusable="false" data-prefix="fab" data-icon="x-twitter" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512" data-fa-i2svg=""> <path fill="currentColor" d="M389.2 48h70.6L305.6 224.2 487 464H345L233.7 318.6 106.5 464H35.8L200.7 275.5 26.8 48H172.4L272.9 180.9 389.2 48zM364.4 421.8h39.1L151.1 88h-42L364.4 421.8z"></path> </svg> </a> </li> <li> <a href="https://www.linkedin.com/company/black-duck-software" title="Linkedin"> <svg class="svg-inline--fa fa-linkedin-in" aria-hidden="true" focusable="false" data-prefix="fab" data-icon="linkedin-in" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512" data-fa-i2svg=""> <path fill="currentColor" d="M100.28 448H7.4V148.9h92.88zM53.79 108.1C24.09 108.1 0 83.5 0 53.8a53.79 53.79 0 0 1 107.58 0c0 29.7-24.1 54.3-53.79 54.3zM447.9 448h-92.68V302.4c0-34.7-.7-79.2-48.29-79.2-48.29 0-55.69 37.7-55.69 76.7V448h-92.78V148.9h89.08v40.8h1.3c12.4-23.5 42.69-48.3 87.88-48.3 94 0 111.28 61.9 111.28 142.3V448z"></path> </svg> <!-- <i class="fa-brands fa-linkedin-in"></i> --> </a> </li> <li> <a href="https://www.facebook.com/BlackDuckSoftware" title="Facebook"> <svg class="svg-inline--fa fa-facebook" aria-hidden="true" focusable="false" data-prefix="fab" data-icon="facebook" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512" data-fa-i2svg=""> <path fill="currentColor" d="M512 256C512 114.6 397.4 0 256 0S0 114.6 0 256C0 376 82.7 476.8 194.2 504.5V334.2H141.4V256h52.8V222.3c0-87.1 39.4-127.5 125-127.5c16.2 0 44.2 3.2 55.7 6.4V172c-6-.6-16.5-1-29.6-1c-42 0-58.2 15.9-58.2 57.2V256h83.6l-14.4 78.2H287V510.1C413.8 494.8 512 386.9 512 256h0z"></path> </svg> <!-- <i class="fa-brands fa-facebook"></i> --> </a> </li> <li> <a href="https://www.youtube.com/@BlackDuckSoftware" title="Youtube"> <svg class="svg-inline--fa fa-youtube" aria-hidden="true" focusable="false" data-prefix="fab" data-icon="youtube" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 576 512" data-fa-i2svg=""> <path fill="currentColor" d="M549.655 124.083c-6.281-23.65-24.787-42.276-48.284-48.597C458.781 64 288 64 288 64S117.22 64 74.629 75.486c-23.497 6.322-42.003 24.947-48.284 48.597-11.412 42.867-11.412 132.305-11.412 132.305s0 89.438 11.412 132.305c6.281 23.65 24.787 41.5 48.284 47.821C117.22 448 288 448 288 448s170.78 0 213.371-11.486c23.497-6.321 42.003-24.171 48.284-47.821 11.412-42.867 11.412-132.305 11.412-132.305s0-89.438-11.412-132.305zm-317.51 213.508V175.185l142.739 81.205-142.739 81.201z"></path> </svg> </a> </li> <!-- <li> <a href="https://www.instagram.com" title="Instagram"> <svg class="svg-inline--fa fa-instagram" aria-hidden="true" focusable="false" data-prefix="fab" data-icon="instagram" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512" data-fa-i2svg=""> <path fill="currentColor" d="M224.1 141c-63.6 0-114.9 51.3-114.9 114.9s51.3 114.9 114.9 114.9S339 319.5 339 255.9 287.7 141 224.1 141zm0 189.6c-41.1 0-74.7-33.5-74.7-74.7s33.5-74.7 74.7-74.7 74.7 33.5 74.7 74.7-33.6 74.7-74.7 74.7zm146.4-194.3c0 14.9-12 26.8-26.8 26.8-14.9 0-26.8-12-26.8-26.8s12-26.8 26.8-26.8 26.8 12 26.8 26.8zm76.1 27.2c-1.7-35.9-9.9-67.7-36.2-93.9-26.2-26.2-58-34.4-93.9-36.2-37-2.1-147.9-2.1-184.9 0-35.8 1.7-67.6 9.9-93.9 36.1s-34.4 58-36.2 93.9c-2.1 37-2.1 147.9 0 184.9 1.7 35.9 9.9 67.7 36.2 93.9s58 34.4 93.9 36.2c37 2.1 147.9 2.1 184.9 0 35.9-1.7 67.7-9.9 93.9-36.2 26.2-26.2 34.4-58 36.2-93.9 2.1-37 2.1-147.8 0-184.8zM398.8 388c-7.8 19.6-22.9 34.7-42.6 42.6-29.5 11.7-99.5 9-132.1 9s-102.7 2.6-132.1-9c-19.6-7.8-34.7-22.9-42.6-42.6-11.7-29.5-9-99.5-9-132.1s-2.6-102.7 9-132.1c7.8-19.6 22.9-34.7 42.6-42.6 29.5-11.7 99.5-9 132.1-9s102.7-2.6 132.1 9c19.6 7.8 34.7 22.9 42.6 42.6 11.7 29.5 9 99.5 9 132.1s2.7 102.7-9 132.1z"></path> </svg> </a> </li> --> </ul> </div> <p class="footer-contactUs"> <span class="footer-contactUs-manage footer-contactUs-manage2"> <a href="https://go.blackduck.com/email-subscription-center.html" target="_blank">Manage Email Preferences</a> </span> <span class="footer-contactUs-manage"> <a href="javascript:void(0)" class="ot-sdk-show-settings">Manage Cookie Settings</a> </span> <!-- <span class="footer-contactUs-phone"><i class="fa-sharp fa-thin fa-phone"></i> 800-541-7737</span> --> <a href="https://www.google.com/maps/place/800+District+Ave+%23101,+Burlington,+MA+01803/@42.4824129,-71.28993,12z/data=!4m5!3m4!1s0x89e39e3082ec0bb9:0x4f2eda58614dd0d9!8m2!3d42.482409!4d-71.2075325?entry=ttu" class="footer-contactUs-a" target="_blank"><i class="fa-thin fa-location-crosshairs"></i> 800 District Ave. Ste 201 <br>Burlington, MA 01803</a> </p> <a href="/contact-sales.html" class="footer-contactUs-button"> Contact Us </a> </div> <div class="BD-5ths"> <h3>Solutions</h3> <ul> <li><a href="/solutions/artificial-intelligence-software-development.html">AI-generated Code</a></li> <li><a href="/solutions/api-security-testing.html">API Security Testing</a></li> <li><a href="/solutions/appsec-consolidation.html">AppSec Consolidation</a></li> <li><a href="/solutions/application-security-testing.html">Application Security Testing</a></li> <li><a href="/solutions/devsecops.html">DevSecOps</a></li> <li><a href="/solutions/software-supply-chain-security.html">Software Supply Chain Security</a></li> <li><a href="/solutions/enterprise-application-security-risk-management.html">Manage AppSec Risk</a></li> <li><a href="/solutions/cloud-security.html">Cloud &amp; Container Security</a></li> <li><a href="/solutions/open-source-security.html">Open Source License Compliance</a></li> <li><a href="/solutions/mergers-and-acquisitions.html">M&amp;A Due Diligence</a></li> <li><a href="/solutions/compliance.html">Quality &amp; Security Standards Compliance</a></li> </ul> </div> <div class="BD-5ths"> <h3>Products &amp; Services</h3> <ul> <li><a href="/platform.html">AppSec SaaS Platform</a></li> <li><a href="/static-analysis-tools-sast.html">Static Analysis (SAST)</a></li> <li><a href="/software-composition-analysis-tools.html">Software Composition Analysis (SCA)</a></li> <li><a href="/interactive-application-security-testing.html">Interactive Analysis (IAST)</a></li> <li><a href="/dast.html">Dynamic Analysis (DAST)</a></li> <li><a href="/services/penetration-testing.html">Penetration Testing</a></li> <li><a href="/fuzz-testing.html">Protocol Fuzzing</a></li> <li><a href="/services/security-program.html">AppSec Program Services</a></li> <li><a href="/services/security-program/software-architecture-design.html">Threat &amp; Risk Assessments</a></li> </ul> </div> <div class="BD-5ths"> <h3>Support</h3> <ul> <li><a href="https://community.blackduck.com/">Community</a></li> <li><a href="https://documentation.blackduck.com">Documentation</a></li> <li><a href="https://blackduck.skilljar.com/">Product Education</a></li> <li><a href="/training.html">AppSec Training</a></li> <li><a href="/customer-success.html">Add-On Services</a></li> </ul> <h3>Resources</h3> <ul> <li><a href="/resources.html">Resources Center</a></li> <li><a href="/resources/webinars.html">Webinars</a></li> <li><a href="/contact-sales.html">Demos</a></li> <li><a href="/resources/analyst-reports.html">Research &amp; Reports</a></li> <li><a href="/resources/ebooks.html">eBooks</a></li> <li><a href="/resources/white-papers.html">White Papers</a></li> <li><a href="/blog.html">Blog</a></li> </ul> </div> <div class="BD-5ths"> <h3>Explore more</h3> <ul class="list-4"> <li><a href="/company.html">About us</a></li> <li><a href="/contact-sales.html">Contact sales</a></li> <li><a href="/resources/case-studies.html">Customer stories</a></li> <li><a href="/partners.html">Partners</a></li> <!-- <li><a href="#">Events</a></li> --> <li><a href="https://news.blackduck.com">Newsroom</a></li> <li><a href="/company/careers.html">Careers</a></li> <li><a href="/glossary.html">Glossary</a></li> </ul> <h3>Legal</h3> <ul class="list-4"> <li><a href="/company/legal.html">Agreements</a></li> <li><a href="/company/legal/privacy-policy.html">Privacy</a></li> <li><a href="/company/legal/vulnerability-disclosure-policy.html">Security</a></li> </ul> </div> </div> </div> <div class="bdcopyright"> ©2024 Black Duck Software, Inc. All Rights Reserved </div> </footer> </section></div> <div class="htmlTextOnly aem-GridColumn aem-GridColumn--default--12"> <div class="container "> <section id="ab308620a-aecc-48c1-9563-79e5a37901f0" class="html-text-only-component" data-enable-page-css="true"> <style> #footerSIG .navigation-footer-component { background: #211e1e; } #footerBD { max-width:1600px; } </style> </section> </div> </div> </div> </div> </div> </div> </div> </div> </div> <!-- Loading Font Awesome library script using font awesome kit CDN URL with Auto-Subsetting feature enabled --> <script src="https://kit.fontawesome.com/5126b7755f.js" crossorigin="anonymous" defer></script> <!-- Adding defer attribute only for Synopsys Blogs JS clientlibs --> <script src="/etc.clientlibs/synopsys-clientlibs/synopsys-pagelibs.lc-5263c0ae7e459c024cc4bfff1a48ee3a-lc.min.js"></script> <script src="/etc.clientlibs/synopsys/clientlibs/dataLayer.lc-76e8a51ebc9605249c0760b7e01b1124-lc.min.js"></script> </body> </html>

Pages: 1 2 3 4 5 6 7 8 9 10