This thesis focuses on increasing the cybersecurity of automotive company’s ECU (electronic control unit) systems. Through comprehensive risk assessment and vulnerability scanning, ECUs are key components of modern automotive systems. It manages important vehicle functions. This makes security paramount.

Our research begins with a detailed threat analysis and risk assessment. Based on the TARA (Threat Analysis and Risk Assessment) methodology, we identify key assets, potential vulnerabilities and classify threats using the STRIDE model. High-risk areas include network communications and physical interfaces. It has been found to be vulnerable to spoofing,tampering, and denial-of-service attacks.

Using the Snyk tool, we performed a vulnerability scan of the ECU software, identifying several high severity issues. These findings highlight the need for strict security measures.

The key conclusion of our research is that ECU systems face significant security risks that require immediate attention. By using multi-factor authentication Safe coding practices and regular software updates Automotive companies can thus greatly improve the safety of their ECU systems. This thesis provides a roadmap