AutoSec360Built for Automotive TARA.
Perform, review, and sign off Vehicle electronics systems risk assessments in one governed workspace.
ISO/SAE 21434 TARA
Automated CAL 1–4
Attack Trees
Damage Scenarios
Client ECU
Review Lifecycle
TOTAL ASSETS⚡
0
DAMAGE SCENARIOS📈
0
ATTACK PATHS🎯
0
SECURITY GOALS🛡️
0
Risk Score Distribution
0
Score 4
Total0
Impact Level Distribution
0
Major
Total0
Attack Feasibility Distribution
0
Low
Total0
Attack Vector Distribution
0
Physical
Total0
375 Attack Paths Mapped
CAL 4 Risk Level Computed
ISO 21434 Audit Trail Ready
What is TARA?Threat Analysis and Risk Assessment.
TARA (Threat Analysis and Risk Assessment) is the standardized engineering methodology mandated by ISO/SAE 21434 and UNECE R155. It systematically identifies vehicle electronic assets, uncovers potential cyber attack paths, calculates damage impact to road users (SFOP), and assigns Cybersecurity Assurance Levels (CAL 1–4) to secure modern automotive architectures.
Automated Asset & Threat Identification
Systematically map ECU electronic assets, trust boundaries, and multi-bus interfaces to identify potential threat scenarios without cataloging bottlenecks.
Rigorous Attack Feasibility & CAL Scoring
Evaluate attack feasibility across time, expertise, and equipment parameters to quantify road-user impact and compute CAL 1–4 risk levels with precision.
Governed Review & Compliance Sign-Off
Empower engineering leads with field-level reviews, immutable audit trails, and 1-click compliance dossiers built for UNECE R155 type approvals.
Meet the features
The collaborative platform for automotive TARA, built around ISO/SAE 21434. Replace disconnected spreadsheets with automated calculations, reusable baseline ECUs, and governed multi-role sign-offs.
Review Life Cycle
Each TARA moves through a formal Draft → Pending Review → On Review → Approved lifecycle with role-based responsibilities. Authors edit in Draft; submission enforces a strict edit-lock so reviewers assess a stable snapshot; and approvals create an immutable, tamper-evident audit trail.
Double Click Feature
Double-click any asset to immediately open its properties in place. Modify parameters, reclassify components, and commit governed changes with automatic versioning and zero context switching.
I Button Feature
Hover over any asset tag in damage scenarios to instantly reveal comprehensive technical specifications, hardware attributes, and security boundaries in an upward-expanding contextual inspector.
Attack Tree Feature
Visually model multi-step attack vectors and exploit feasibility down to individual hardware interfaces, evaluating successful versus blocked paths for ISO/SAE 21434 threat assessment.
Live Risk Calculation
Instantly recalculate cybersecurity assurance levels (CAL) and overall risk ratings in real-time as damage scenarios, safety parameters, or attack vectors change, maintaining full ISO/SAE 21434 Annex E compliance.
01 / 05
Advanced Telematics Unit
DRAFT
Advanced Telematics Unit
PENDING
Advanced Telematics Unit
PENDING
Advanced Telematics Unit
PENDING
Report approved
AST-01
MCU (MIMXRT1064)
ASSET TYPE
Hardware
DESCRIPTION
Main processing unit of the telematics device responsible for executing application firmware, handling communication protocols, processing GPS data, and managing peripheral interfaces. Other ECU firmware update via CAN
FEATURES
High-performance ARM Cortex-M7, real-time processing, peripheral interface control, memory management, interrupt handling.
DAMAGE SCENARIOS
1
ATTACK PATHS
9
RISK SCORE
5
CAL LEVEL
CAL 3
Editing: unsaved changes
ATTACK PATH
AP-1
STEP 1[Attack Successful]
To Perform RS232 Debug Port Exploitation Attack
STEP 1[Attack Blocked]
To Perform RS232 Debug Port Exploitation Attack
STEP 2[Attack Successful]
Identify and access exposed RS232 debug interface.
STEP 2[Attack Blocked]
Identify and access exposed RS232 debug interface.
DS-01
MCU (MIMXRT1064)
DAMAGE SCENARIO
Unauthorized execution of malicious or modified firmware on the MCU due to lack of secure boot or validation, leading to complete compromise of device functionality, control logic, and communication interfaces.
SECURITY PROPERTIES
✓ Confidentiality✓ Integrity✓ Availability
IMPACT RATING (15.5)
SAFETY
PRIVACY
Moderate
FINANCIAL
Negligible
OPERATIONAL
Moderate
FINAL RATING
Moderate
JUSTIFICATION
Compromise of MCU enables full control over device logic and communication behavior. This can disrupt trusted operations and influence safety-related decisions indirectly.
CAL ANALYSIS (ANNEX E)
ATTACK VECTOR
MEDIUM OF ATTACK
MCU
THREAT TYPE
Spoofing / Tampering
CAL LEVEL
CAL1
Updated successfully
Feature 01Review Life Cycle
Each TARA moves through a formal Draft → Pending Review → On Review → Approved lifecycle with role-based responsibilities. Authors edit in Draft; submission enforces a strict edit-lock so reviewers assess a stable snapshot; and approvals create an immutable, tamper-evident audit trail.
AutoSec360 vs. Other Approaches
How AutoSec360 Fills the Gaps
| Category | Purpose | Example | Capabilities |
|---|---|---|---|
| Spreadsheets | Ad-hoc data entry & manual calculations | Excel, Google Sheets | Manual matrix lookups, formula errors, and no audit trail |
| Generic ALM | Task & issue tracking | Jira, Confluence | Limited to task lists without automated TARA calculations or ISO 21434 rules |
| Requirements Tools | Static system specification | IBM DOORS, Polarion | Static documentation lacking threat modeling or review edit-locks |
| Automated TARA | Automated ISO/SAE 21434 risk assessment | AutoSec360 | Automated CAL & risk calculations with an enforced audit trail |