For inquiries about GlobalPlatform or website assistance, contact secretariat@globalplatform.org.

Overview

Cybersecurity Vehicle Forum

Help shape practical, scalable cybersecurity for the automotive ecosystem

The Cybersecurity Vehicle Forum (CSVF) brings together the wider automotive value chain to exchange experience, identify shared cybersecurity priorities and help translate industry needs into practical work within GlobalPlatform.

Open dialogue between vehicle manufacturers, suppliers, technology providers, software and security specialists, laboratories, certification bodies, industry associations, standards organizations, regulators and researchers helps GlobalPlatform understand where common specifications, services, tools and assurance approaches can create the greatest value.

What the CSVF does

The CSVF provides a collaborative forum for discussing emerging automotive cybersecurity requirements, use cases and technology developments.

Discussions explore topics such as:

  • Security priorities, industry use cases and emerging developments
  • Security platform services and common security APIs
  • The evolution of trusted and isolated execution environments
  • Secure component and platform lifecycle management
  • Supply-chain security and responsibility across complex automotive systems
  • Assurance metrics for automotive components
  • The composition and reuse of security certification evidence
  • Practical support for ISO/SAE 21434, ISO 24089 and UNECE R155/R156
  • New threats, attack techniques and developments that may need to be addressed by future specifications, profiles or certification schemes

The forum enables participants to compare experiences across organizations and markets, identify areas of common need and distinguish between challenges requiring industry alignment and those that can be addressed through existing technologies.

Why attend?

By participating in the CSVF, you can:

  • Bring your organization’s priorities and real-world use cases into the discussion
  • Help identify gaps in existing security architectures, APIs, assurance methods and lifecycle processes
  • Exchange experience with stakeholders from across the automotive value chain
  • Learn how other industries deploy secure components and trusted digital architectures at scale
  • Explore common approaches that can reduce fragmentation and duplicated implementation effort
  • Anticipate developments in regulation, standards, certification and security evaluation
  • Connect automotive requirements with GlobalPlatform’s technical and certification expertise
  • Contribute to a shared understanding of where new specifications, profiles, tools or reference implementations may be needed

The CSVF is particularly valuable for organizations seeking interoperable and reusable approaches to automotive cybersecurity rather than solutions developed in isolation.

How CSVF input creates value

The CSVF provides an important connection between the wider automotive community and GlobalPlatform’s member-driven technical work.

Priorities, use cases and implementation challenges raised through the forum can be captured and developed by the GlobalPlatform Automotive Task Force and, where relevant, shared with other specialist task forces. These task forces help translate ecosystem needs into structured requirements for consideration by GlobalPlatform’s Technical Committees.

This creates a pathway from industry experience to potential deliverables such as:

  • Technical specifications and automotive profiles
  • Functional APIs and implementation guidance
  • Security and lifecycle-management requirements
  • Test suites and functional-compliance tools
  • Security-evaluation and certification methodologies
  • Assurance metrics that support comparable results
  • Reference implementations and supporting resources

The CSVF does not replace GlobalPlatform’s formal technical and governance processes. It strengthens them by ensuring that the work is informed by practical automotive use cases, emerging threats, regulatory developments and the experience of stakeholders beyond GlobalPlatform’s membership.

Who should participate?

  • The forum welcomes perspectives from across the automotive cybersecurity ecosystem, including:
  • Vehicle manufacturers and mobility providers
  • Tier 1 and Tier 2 suppliers
  • Semiconductor and hardware providers
  • Software, platform and security-service providers
  • Testing laboratories and certification bodies
  • Industry associations and standards organizations
  • Regulators and public authorities
  • Academic and applied-research organizations
  • GlobalPlatform members and non-members

About GlobalPlatform

GlobalPlatform is a member-driven standards organization with more than 20 years of experience developing specifications and certification programs for secure digital services. Its technologies support secure components and services used across sectors including payments, identity, government, mobile and connected devices.

Through its automotive initiative, GlobalPlatform brings this cross-industry expertise together with the automotive value chain. The objective is to accelerate the deployment of secure components, trusted digital architectures, interoperable security APIs and effective security lifecycle management throughout the vehicle ecosystem.

Join the conversation

Participate in the Cybersecurity Vehicle Forum to share your priorities, learn from the wider ecosystem and help direct attention toward the technical and assurance challenges that matter most to automotive cybersecurity.

Past forum presentations, discussion summaries and related insights are available through the GlobalPlatform blog.

Agenda

Topics

Supply Chain Security

  • What information should be available to whom?
  • Component exposure: how prevalent, how deep in the chain.
  • What is the role of attestation vs contractual trust, and where each stops being credible?

Secure Boot Guidelines

  • What does "good" look like and how it is evidenced.
  • Which definitions and evidence formats are worth standardizing first, and what stays vendor-specific?

Automotive HSM Evolution

  • Where automotive HSMs go next as compute consolidates and assurance and PQC demands rise.
  • Are there new services the HSM must expose to the stack?
  • What to standardize now to avoid fragmentation?

Embedded Secure Elements (eSEs) in Evolving Architectures

  • A valuable solution for ECU management (provisioning, traceability, maintenance, data storage and data management), and security services calls
  • What are the highest-priority gaps and ownership?

TEE Evolution

  • TEE 2.0 Specifications status
  • Developments on GP’s Micro-TEE, extending Firmware Foundation for M and PSA APIs.
  • What are the must-have trusted services for auto MCUs, and current gaps?

ECU SESIP Profile

  • Current scope (SFRs, assurance level) and open decisions.
  • How OEMs and suppliers actually procure and evaluate.
Speakers

Francesca Forrestieri is GlobalPlatform’s Automotive Lead and is responsible for connecting the automotive value chain with experts on trusted digital services to address the latest developments in the automotive ecosystem and work to future-proof connected services.

Christian Appold works as a Technical Manager in the field of Microprocessor R&D at automotive supplier DENSO in Munich. He studied Computer Science and did his PhD in the field of Model Checking based formal verification of parallel software at University of Würzburg. Afterwards he worked for companies like ARM, IBM or Dialog Semiconductor (now Renesas) in the field of formal verification of hardware, as a research engineer or in product development. One focus of his work in DENSO is ensuring Hardware Security of our processors and SoCs.

Travel & Venue

In-person attendees:

This meeting will be hosted by CARIAD and located in the Audi Conference Center within the Munich airport in Germany.

Munich International Airport
Audi Conference Center
Terminalstraße Mitte 18, 85356
Oberding, Germany

Online attendees:

Register here for online attendance. The meeting will be held via Zoom, and you will receive the meeting link after registration.

Register Now

Chat with us
GlobalPlatform
Hey There!

It seems you are using an outdated browser, unfortunately this means that our website will not render properly for you. Update your browser to view this website correctly.

GOOGLE CHROME
FIREFOX
MICROSOFT EDGE