Yekta IT at SECURWARE 2025 in Barcelona

Our paper: "From ECU to VSOC: UDS Security Monitoring Strategies"

We presented our paper, written with ETAS (Nicolas Loza, Jens Gramm, Michael Peter Schneider) and the University of Passau (Prof. Stefan Katzenbeisser) as part of the FINESSE research project.

The paper deals with the security problems of the Unified Diagnostic Services (UDS) protocol, a critical communication protocol for vehicle diagnostics in the automotive industry. Our monitoring strategies use in-vehicle logging and remote analysis through a Vehicle Security Operations Center (VSOC) to identify UDS attack scenarios.

The approach has three parts:

• Specifying security event logging requirements
• Collecting context data for the relevant vehicle information
• Developing detection strategies for the different attack scenarios

Applying these strategies to a full taxonomy of UDS attack techniques, we could show that the detection methods cover a broad range of potential attack vectors. The paper also assesses how well the current AUTOSAR-standardised security events fit, and identifies the gaps in the standard as it stands.

Links to the paper:

• ArXiv preprint
• SECURWARE 2025 proceedings

Training: "Building Security Monitoring Solutions with Open-Source Tools"

On the first day of the conference our co-founder Ali Recai Yekta ran a training session on building security monitoring in practice. It covered how attackers work (cyber kill chain, MITRE ATT&CK, the VATT&EK framework) and which open-source tools can be used to build a security operations centre.

One point came up repeatedly in the discussion: installing tools does not produce a SOC, it produces a collection of tools. What makes the difference is thinking in systems and integrating the parts into something that works as a whole.

Panel: cybersecurity resilience challenges

Ali Recai Yekta took part in the panel moderated by Prof. Dr. Alexander Lawall (IU International University of Applied Sciences), discussing current problems in cyber resilience with:

• Niklas Lindskog (Ericsson, Sweden)
• Prof. Dr. Aspen Olmsted (Wentworth Institute of Technology, USA)
• Prof. Dr. Yuichi Kaji (Nagoya University, Japan)
• Timm Bostelmann (FH Wedel, Germany)

The panel brought together industrial practice, academic research and concrete implementation work, and showed how differently the same resilience problems look from each of those positions.

The project: FINESSE, attack detection for road and rail