Development of ISO/SAE 21434 compliant threat analysis innovations: VERZEUSE™ for TARA

Yokohama, Japan, October 24, 2024 - Panasonic Automotive Systems Co., Ltd. (“Panasonic Automotive Systems”) has developed VERZEUSE™ for TARA (Threat Analysis and Risk Assessment), an innovative ISO/SAE 21434-compliant threat analysis system that supports rapid development by automating the threat analysis necessary to protect vehicles from cyber-attacks during the early stages of vehicle development.
It will be showcased at EdgeTech+ 2024*¹ which will take place from November 20 to 22, 2024.

VERZEUSE™ for TARA provides comprehensive analysis of cyber security risks for vehicles and in-vehicle devices in the early stages of development and efficiently derives ISO/SAE 21434 compliant threat analysis results. Even developers who are not security experts can simply answer a few questionnaires to determine countermeasure requirements based on the characteristics of in-vehicle devices from Panasonic Automotive Systems’ Threat Intelligence database, which collates threats, vulnerabilities, and security controls.

This innovative system helps streamline the threat analysis process and has been applied to more than 80 of our company’s in-vehicle products. Compared to the conventional manual process of threat analysis, this system has been proven to reduce workload by up to 90%*² for large-scale products such as navigation systems. Car manufacturers that have used the system have highly evaluated its usefulness, and we have been commissioned to provide multiple consulting projects for risk assessment.

The risk of cyber-attacks targeting automobiles is increasing every year, driven by the development of automated driving technology, the progress of digitization, and the increase in the number of vehicles connected to networks, known as connected cars. Today, automobile cyber security measures are regulated, with measures required at all stages of the automobile lifecycle, including development, manufacturing, post-shipping, and disposal.
In this context, threat analysis is being introduced to identify cyber-attack threats and risks and to establish necessary security countermeasures. Threat analysis requires the latest security knowledge and a high level of expertise, and insufficient qualified human resources can lead to omission of countermeasures, which can have a significant negative impact on development schedules and cybersecurity.

This innovative system integrates the know-how and tacit knowledge of the company’s security experts into three components: Questionnaire, Threat Intelligence, and Automation Tools. Developers do not need to be security experts to obtain immediate threat analysis results and ISO/SAE 21434 work products by simply answering a simple, multiple-choice questionnaire.

The Threat Intelligence accumulates specific security countermeasure examples applied to the company’s consumer and in-vehicle devices, in addition to threats and mitigation measures described in regulations, standards, and industry guidelines*³. By utilizing Threat Intelligence, the system provides developers with immediate to specific security requirements during the requirement definition phase and vulnerability checklists during the design phase, allowing for early determination of security requirements and preventing the introduction of vulnerabilities.

The Automation Tool eliminates the dependency on individuals in traditional analysis tasks and automates ISO/SAE 21434 threat analysis procedures to ensure consistent analysis results and change point management. Developers can easily re-analyze the vehicle throughout its lifecycle, even as specifications change frequently, and keep risks and countermeasures up to date.

*3 This system references the following regulations, standards, and industry guidelines:
UN-R155 (UN Regulation No.155), ISO/SAE 21434 (International Standard 21434), JASPAR (Japan Automotive Software Platform and Architecture), CAPEC (Common Attack Pattern Enumeration and Classification), CWE (Common Weakness Enumeration)

Panasonic Automotive Systems Co., Ltd. markets VERZEUSE™*⁴ cybersecurity technology and services globally. Engineers at Panasonic Automotive Systems who worked together in the development of security technologies in various Panasonic Group products, including TVs, recorders, mobile phones, smartphones, payment terminals, and semiconductors, have turned their expertise toward developing cyber security technologies since 2014, drawing on their individual strengths to apply these technologies to automotive products. Panasonic Automotive Systems helps to ensure the safety and security of automated driving functions and network services to benefit society with technologies underpinned by a wealth of knowledge and experience.
VERZEUSE™ introduction website https://automotive.panasonic.com/en/technology/cyber-security

*4 VERZEUSE™ was coined by combining the Spanish word “ver” meaning “look” and the god Zeus. The name is meant to inspire the feeling of a protective god of the sky watching over the safety of society.

Corporate Communications Office, Corporate Planning Center, Panasonic Automotive Systems Co., Ltd.
Email: press-pas@ml.jp.panasonic.com

Panasonic Automotive Systems Co., Ltd. was launched on April 1, 2022, as a business company responsible for the automotive business in line with the start of the Panasonic Group’s business company system. We are a global company with operations in 22 countries and regions, approximately 30,000 employees, and sales of approximately 1,491.9 billion yen (fiscal 2023 results). As a Tier 1 company, we provide advanced technologies unique to Panasonic, such as infotainment systems, to automakers in Japan and overseas, contributing to the creation of comfortable, safe, and secure automobiles. Our corporate vision is to be the “Joy in Motion” Design Company, and we are committed to meeting the expectations of our customers around the world with technology that stands by people. To learn more about our company, please visit: https://automotive.panasonic.com/en