Conference Description
Key Takeaways
- Annual virtual conference focused on vehicle cybersecurity, hosted by the Automotive Security Research Group
- Covers ISO/SAE 21434, UN R155/156 compliance, Vehicle Security Operations Centers, and threat analysis methodologies
- Designed for cybersecurity engineers, OEM security teams, SOC analysts, and regulatory professionals
- Practitioner-led sessions emphasising real-world implementation over vendor presentations
- Addresses the operational challenges of securing software-defined vehicle architectures
Introduction
Secure Our Streets (SOS) is an annual global online conference dedicated to vehicle cybersecurity, bringing together engineers, researchers, OEMs, suppliers, and regulators working to protect modern connected vehicles. Hosted by the Automotive Security Research Group (ASRG), the event targets practitioners responsible for defending automotive software and systems against emerging cyber threats. With regulatory frameworks such as UN R155 now mandating cybersecurity management systems for vehicle type approval in major markets, and ISO/SAE 21434 establishing engineering requirements across the supply chain, the conference addresses topics of immediate operational relevance to the automotive industry.
About Secure Our Streets
SOS operates as a free, single-day virtual event structured around technical exchange and community building rather than commercial exhibition. The conference distinguishes itself through its practitioner-led format, with sessions delivered by engineers and security professionals actively working in vehicle cybersecurity rather than marketing representatives. This approach prioritises practical insights and lessons learned from real-world implementation over theoretical discussion or product demonstrations.
The Automotive Security Research Group, which hosts the event, serves as a global community for professionals working at the intersection of cybersecurity and automotive engineering. Sponsors supporting the conference include Alpitronic, itemis, C2A Security, and O’Reilly, though the event maintains a clear separation between sponsorship and session content.
Technical Focus Areas
The conference programme spans the full spectrum of vehicle cybersecurity disciplines. Central to the discussion are the regulatory and standards frameworks now shaping automotive development processes. ISO/SAE 21434 establishes cybersecurity engineering requirements throughout the vehicle lifecycle, while UN R155 and R156 mandate cybersecurity and software update management systems for vehicles seeking type approval in regulated markets including the European Union, Japan, and South Korea.
Sessions address the practical implementation of Threat Analysis and Risk Assessment (TARA) methodologies, which form a cornerstone of ISO/SAE 21434 compliance. Related topics include the establishment and operation of Vehicle Security Operations Centers, where teams monitor fleet-wide telemetry for anomalous behaviour and coordinate incident response activities.
The technical programme also covers foundational security technologies including Hardware Security Modules (HSM) for cryptographic key protection, secure boot processes, and CAN Bus security measures designed to protect legacy in-vehicle networks. As vehicles increasingly rely on over-the-air software updates, sessions examine the security considerations surrounding OTA delivery mechanisms and the role of Software Bill of Materials (SBOM) in supply chain transparency.
Industry Context
Modern vehicles represent some of the most complex software systems in consumer use, with premium models containing over one hundred million lines of code distributed across dozens of electronic control units. This software-defined architecture creates an expansive attack surface that extends from infotainment systems and telematics units to safety-critical powertrain and braking controllers.
The regulatory environment has evolved rapidly in response to these risks. UN R155 requirements, which became mandatory for all new vehicle types in the European Union from July 2022 and extend to all new vehicles from July 2024, require manufacturers to demonstrate comprehensive cybersecurity management systems covering risk assessment, threat detection, incident response, and forensic capabilities. These obligations cascade through the supply chain, requiring Tier 1 and Tier 2 suppliers to implement compatible security processes.
Who Should Attend
The conference serves professionals directly engaged in vehicle cybersecurity implementation. This includes cybersecurity engineers and architects working within OEM and supplier organisations, SOC analysts responsible for vehicle fleet monitoring, and incident response teams handling automotive security events. Regulatory and compliance officers navigating ISO/SAE 21434 and UN R155 requirements will find relevant guidance on bridging policy requirements with technical implementation. Technical leaders seeking to understand current practices and emerging challenges in automotive security will benefit from the practitioner perspective that defines the event’s approach.
Conclusion
Secure Our Streets offers automotive cybersecurity professionals an opportunity to engage with peers facing similar implementation challenges across the global industry. As regulatory requirements mature and vehicle architectures grow increasingly complex, forums for sharing practical experience between practitioners become increasingly valuable for advancing collective defence capabilities.