Document Category：Technical Document

Document No：TD-CST-4

This technical document is a guideline for managing penetration testing for in-vehicle ECUs. An ECU with ex-vehicle network communication capability is expected to be shared in future connected and autonomous vehicles. Such an EUC is the primary target of penetration testing because of stringent requirements for fewer vulnerabilities.
For ECUs, which would not seem to require information security measures at first glance, please determine the necessity of applying the guidelines for conducting the penetration test after understanding the background of the requirements.

*Based on intellectual property management rules, etc, this documents is shared with nonmember too.