Shifting Left Vulnerability Management

Andreas Weichslgartner
Senior Technical Security Engineer
CARIAD SE
Vineeth B. Prasanna
Senior Technical Security Enginee
CARIAD SE
As the automotive industry undergoes a paradigm shift towards software-defined vehicles, the imperative for robust software security becomes obvious. This talk explores the nuanced landscape of identifying, managing, and preventing vulnerabilities early in the product lifecycle from the perspective of an OEM software company. The talk also highlights the role of standardized formats like software bill of materials (SBOMs) and anticipates future challenges such as crypto agility and the use of cryptographic bills of materials (CBOMs).