BranchesTags

Repository files navigation

AVCDL

Overview

The AVCDL is a set of identified processes, requirements of those processes, generated products, and mappings from the generated products to their corresponding technical standard and regulatory (ISO/SAE 21434, ISO 24089, UN R155/6) work products: for the purpose of ensuring the creation of secure systems. It has been assessed by a leading certification body (see AVCDL Assessments below).

Where to Start (all)

There's a lot of material here with more on the way. The recommended starting point is the AVCDL primary document. Between the primary and roughly 100 supporting documents, the AVCDL is over 950 pages, so it's recommended that you download or clone the repository. Although you could just download the primary document itself, there are outbound links to the secondary documents that are path relative. If you can get by with just picking things out yourself, then download the primary document, the secondary documents directory, and the working material directory.

There's a video overview of the AVCDL available here.

If you're just interested in the final product, use the distribution sub-tree. If you're interested in working on / with the source material, use the source sub-tree.

The AVCDL document workflow is described here.

Where to Start (suppliers)

The AVCDL has specific material that addressing supply chain issues.

The recommended starting point for suppliers is this page. It summarizes the documents, templates and links specific to suppliers.

Note for non-Git Users

If you'd like to download the repository, but aren't a Git user, you can download a ZIP archive. Instructions are provided here.

Note for Windows Users

If you attempt to clone this repository on a Windows machine, you may run up against the 260 character fully-qualified path name limit. You can enable long FQPNs by following the instructions provided here.

Reference Material

The AVCDL is backed by a lot of preceding work. You can see a summary here.

Introductory Material

We've written a series of blog posts to introduce the concepts motivating the AVCDL. You can find them here.

Elaboratory Material

We've written a set of documents that elaborate on the AVCDL, its implementation and related topics. You can find them here.

Certification Material

There is documentation relating to the use of the AVCDL in the context of ISO/SAE 21434, ISO 26262, and UNECE WP.29 certification. You can find them here.

Training Material

Companion video training material is currently under development.

AVCDL Assessments

The AVCDL has been assessed as complying to ISO/SAE 21434.

The AVCDL has been assessed as complying to UN R155.

The AVCDL is currently being assessed in the context of ISO 24089 and UN R156.

You can find results of these assessments here.

Mentions

We're tracking when the AVCDL gets attention. You can find a list of mentions here.

Release Timetable

The AVCDL has a lot of moving parts. We'll be providing material as soon as it has been reviewed by the certification body we're working with. You can see a summary of the secondary document status here.

About

This repository contains material related to A Versatile Cybersecurity Development Lifecycle (AVCDL)

Topics

attack-surface-analysisautomotive-securityautonomous-vehiclesavcdlcybersecuritydevelopment-lifecyclefuzz-testingiso-24089iso-sae-21434penetration-testingthreat-modelingthreat-prioritizationun-r155un-r156

Resources

Readme
License
Activity
Custom properties

Stars

121 stars

Watchers

16 watching

Forks

37 forks
Report repository

Releases

Contributors

, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Add copy buttons to all 
 blocks\n(function() {\n function addCopyButtons() {\n document.querySelectorAll('pre code').forEach(function(codeBlock) {\n if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;\n codeBlock.parentElement.setAttribute('data-copy-added', 'true');\n \n var btn = document.createElement('button');\n btn.textContent = 'Copy';\n btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';\n btn.onmouseover = function() { this.style.opacity = '1'; };\n btn.onmouseout = function() { this.style.opacity = '0.7'; };\n btn.onclick = function() {\n navigator.clipboard.writeText(codeBlock.textContent).then(function() {\n btn.textContent = 'Copied!';\n setTimeout(function() { btn.textContent = 'Copy'; }, 1500);\n });\n };\n codeBlock.parentElement.style.position = 'relative';\n codeBlock.parentElement.appendChild(btn);\n });\n }\n \n addCopyButtons();\n \n // Re-run on dynamic content\n var observer = new MutationObserver(addCopyButtons);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Add Copy Buttons to Code Blocks");
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '

Skip to content
BranchesTags
Repository files navigation
AVCDL
Overview
The AVCDL is a set of identified processes, requirements of those processes, generated products, and mappings from the generated products to their corresponding technical standard and regulatory (ISO/SAE 21434, ISO 24089, UN R155/6) work products: for the purpose of ensuring the creation of secure systems. It has been assessed by a leading certification body (see AVCDL Assessments below).
Where to Start (all)
There's a lot of material here with more on the way. The recommended starting point is the AVCDL primary document. Between the primary and roughly 100 supporting documents, the AVCDL is over 950 pages, so it's recommended that you download or clone the repository. Although you could just download the primary document itself, there are outbound links to the secondary documents that are path relative. If you can get by with just picking things out yourself, then download the primary document, the secondary documents directory, and the working material directory.
There's a video overview of the AVCDL available here.
If you're just interested in the final product, use the distribution sub-tree. If you're interested in working on / with the source material, use the source sub-tree.
The AVCDL document workflow is described here.
Where to Start (suppliers)
The AVCDL has specific material that addressing supply chain issues.
The recommended starting point for suppliers is this page. It summarizes the documents, templates and links specific to suppliers.
Note for non-Git Users
If you'd like to download the repository, but aren't a Git user, you can download a ZIP archive. Instructions are provided here.
Note for Windows Users
If you attempt to clone this repository on a Windows machine, you may run up against the 260 character fully-qualified path name limit. You can enable long FQPNs by following the instructions provided here.
Reference Material
The AVCDL is backed by a lot of preceding work. You can see a summary here.
Introductory Material
We've written a series of blog posts to introduce the concepts motivating the AVCDL. You can find them here.
Elaboratory Material
We've written a set of documents that elaborate on the AVCDL, its implementation and related topics. You can find them here.
Certification Material
There is documentation relating to the use of the AVCDL in the context of ISO/SAE 21434, ISO 26262, and UNECE WP.29 certification. You can find them here.
Training Material
Companion video training material is currently under development.
AVCDL Assessments
The AVCDL has been assessed as complying to ISO/SAE 21434.
The AVCDL has been assessed as complying to UN R155.
The AVCDL is currently being assessed in the context of ISO 24089 and UN R156.
You can find results of these assessments here.
Mentions
We're tracking when the AVCDL gets attention. You can find a list of mentions here.
Release Timetable
The AVCDL has a lot of moving parts. We'll be providing material as soon as it has been reviewed by the certification body we're working with. You can see a summary of the secondary document status here.
About
This repository contains material related to A Versatile Cybersecurity Development Lifecycle (AVCDL)
Topics
attack-surface-analysisautomotive-securityautonomous-vehiclesavcdlcybersecuritydevelopment-lifecyclefuzz-testingiso-24089iso-sae-21434penetration-testingthreat-modelingthreat-prioritizationun-r155un-r156
Resources
Readme
License
Activity
Custom properties
Stars
121 stars
Watchers
16 watching
Forks
37 forks
Report repository
Releases
Contributors

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Force GitHub README to respect dark mode\n(function() {\n var style = document.createElement('style');\n style.textContent = '\n .markdown-body {\n color-scheme: dark light;\n }\n .markdown-body pre { background: #161b22 !important; }\n .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }\n .markdown-body table th, .markdown-body table td { border-color: #30363d !important; }\n .markdown-body img { background: #0d1117; }\n .markdown-body blockquote { border-left-color: #8b949e; }\n .markdown-body hr { border-color: #30363d; }\n ';\n document.head.appendChild(style);\n})();", "GitHub Dark Mode README Fix");
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
BranchesTags
Repository files navigation
AVCDL
Overview
The AVCDL is a set of identified processes, requirements of those processes, generated products, and mappings from the generated products to their corresponding technical standard and regulatory (ISO/SAE 21434, ISO 24089, UN R155/6) work products: for the purpose of ensuring the creation of secure systems. It has been assessed by a leading certification body (see AVCDL Assessments below).
Where to Start (all)
There's a lot of material here with more on the way. The recommended starting point is the AVCDL primary document. Between the primary and roughly 100 supporting documents, the AVCDL is over 950 pages, so it's recommended that you download or clone the repository. Although you could just download the primary document itself, there are outbound links to the secondary documents that are path relative. If you can get by with just picking things out yourself, then download the primary document, the secondary documents directory, and the working material directory.
There's a video overview of the AVCDL available here.
If you're just interested in the final product, use the distribution sub-tree. If you're interested in working on / with the source material, use the source sub-tree.
The AVCDL document workflow is described here.
Where to Start (suppliers)
The AVCDL has specific material that addressing supply chain issues.
The recommended starting point for suppliers is this page. It summarizes the documents, templates and links specific to suppliers.
Note for non-Git Users
If you'd like to download the repository, but aren't a Git user, you can download a ZIP archive. Instructions are provided here.
Note for Windows Users
If you attempt to clone this repository on a Windows machine, you may run up against the 260 character fully-qualified path name limit. You can enable long FQPNs by following the instructions provided here.
Reference Material
The AVCDL is backed by a lot of preceding work. You can see a summary here.
Introductory Material
We've written a series of blog posts to introduce the concepts motivating the AVCDL. You can find them here.
Elaboratory Material
We've written a set of documents that elaborate on the AVCDL, its implementation and related topics. You can find them here.
Certification Material
There is documentation relating to the use of the AVCDL in the context of ISO/SAE 21434, ISO 26262, and UNECE WP.29 certification. You can find them here.
Training Material
Companion video training material is currently under development.
AVCDL Assessments
The AVCDL has been assessed as complying to ISO/SAE 21434.
The AVCDL has been assessed as complying to UN R155.
The AVCDL is currently being assessed in the context of ISO 24089 and UN R156.
You can find results of these assessments here.
Mentions
We're tracking when the AVCDL gets attention. You can find a list of mentions here.
Release Timetable
The AVCDL has a lot of moving parts. We'll be providing material as soon as it has been reviewed by the certification body we're working with. You can see a summary of the secondary document status here.
About
This repository contains material related to A Versatile Cybersecurity Development Lifecycle (AVCDL)
Topics
attack-surface-analysisautomotive-securityautonomous-vehiclesavcdlcybersecuritydevelopment-lifecyclefuzz-testingiso-24089iso-sae-21434penetration-testingthreat-modelingthreat-prioritizationun-r155un-r156
Resources
Readme
License
Activity
Custom properties
Stars
121 stars
Watchers
16 watching
Forks
37 forks
Report repository
Releases
Contributors

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Highlight search terms from Google/DuckDuckGo/Bing referrer\n(function() {\n var ref = document.referrer;\n var terms = [];\n \n if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {\n var url = new URL(ref);\n var q = url.searchParams.get('q') || url.searchParams.get('p');\n if (q) {\n terms = q.split(/\\s+/).filter(function(t) { return t.length > 2; });\n }\n }\n \n if (terms.length === 0) return;\n \n var style = document.createElement('style');\n style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';\n document.head.appendChild(style);\n \n function highlight(node) {\n if (node.nodeType === 3) { // text node\n var text = node.textContent;\n var found = false;\n terms.forEach(function(term) {\n var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\') + ')', 'gi');\n if (regex.test(text)) {\n found = true;\n var frag = document.createDocumentFragment();\n var parts = text.split(regex);\n parts.forEach(function(part, i) {\n if (i % 2 === 0) {\n frag.appendChild(document.createTextNode(part));\n } else {\n var span = document.createElement('span');\n span.className = 'userscript-highlight';\n span.textContent = part;\n frag.appendChild(span);\n }\n });\n node.parentNode.replaceChild(frag, node);\n }\n });\n } else if (node.nodeType === 1 && node.childNodes) { // element\n var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];\n if (!skipTags.includes(node.tagName)) {\n Array.from(node.childNodes).forEach(highlight);\n }\n }\n }\n \n highlight(document.body);\n \n // Re-highlight on dynamic content\n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1 || node.nodeType === 3) highlight(node);\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Highlight Search Terms");
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
BranchesTags
Repository files navigation
AVCDL
Overview
The AVCDL is a set of identified processes, requirements of those processes, generated products, and mappings from the generated products to their corresponding technical standard and regulatory (ISO/SAE 21434, ISO 24089, UN R155/6) work products: for the purpose of ensuring the creation of secure systems. It has been assessed by a leading certification body (see AVCDL Assessments below).
Where to Start (all)
There's a lot of material here with more on the way. The recommended starting point is the AVCDL primary document. Between the primary and roughly 100 supporting documents, the AVCDL is over 950 pages, so it's recommended that you download or clone the repository. Although you could just download the primary document itself, there are outbound links to the secondary documents that are path relative. If you can get by with just picking things out yourself, then download the primary document, the secondary documents directory, and the working material directory.
There's a video overview of the AVCDL available here.
If you're just interested in the final product, use the distribution sub-tree. If you're interested in working on / with the source material, use the source sub-tree.
The AVCDL document workflow is described here.
Where to Start (suppliers)
The AVCDL has specific material that addressing supply chain issues.
The recommended starting point for suppliers is this page. It summarizes the documents, templates and links specific to suppliers.
Note for non-Git Users
If you'd like to download the repository, but aren't a Git user, you can download a ZIP archive. Instructions are provided here.
Note for Windows Users
If you attempt to clone this repository on a Windows machine, you may run up against the 260 character fully-qualified path name limit. You can enable long FQPNs by following the instructions provided here.
Reference Material
The AVCDL is backed by a lot of preceding work. You can see a summary here.
Introductory Material
We've written a series of blog posts to introduce the concepts motivating the AVCDL. You can find them here.
Elaboratory Material
We've written a set of documents that elaborate on the AVCDL, its implementation and related topics. You can find them here.
Certification Material
There is documentation relating to the use of the AVCDL in the context of ISO/SAE 21434, ISO 26262, and UNECE WP.29 certification. You can find them here.
Training Material
Companion video training material is currently under development.
AVCDL Assessments
The AVCDL has been assessed as complying to ISO/SAE 21434.
The AVCDL has been assessed as complying to UN R155.
The AVCDL is currently being assessed in the context of ISO 24089 and UN R156.
You can find results of these assessments here.
Mentions
We're tracking when the AVCDL gets attention. You can find a list of mentions here.
Release Timetable
The AVCDL has a lot of moving parts. We'll be providing material as soon as it has been reviewed by the certification body we're working with. You can see a summary of the secondary document status here.
About
This repository contains material related to A Versatile Cybersecurity Development Lifecycle (AVCDL)
Topics
attack-surface-analysisautomotive-securityautonomous-vehiclesavcdlcybersecuritydevelopment-lifecyclefuzz-testingiso-24089iso-sae-21434penetration-testingthreat-modelingthreat-prioritizationun-r155un-r156
Resources
Readme
License
Activity
Custom properties
Stars
121 stars
Watchers
16 watching
Forks
37 forks
Report repository
Releases
Contributors

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Strip utm_, fbclid, gclid, etc. from all links on page\n(function() {\n var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',\n 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',\n 'ref', 'ref_src', 'source', 'medium', 'campaign'];\n \n function cleanUrl(url) {\n try {\n var u = new URL(url, window.location.origin);\n var changed = false;\n trackingParams.forEach(function(p) {\n if (u.searchParams.has(p)) {\n u.searchParams.delete(p);\n changed = true;\n }\n });\n return changed ? u.toString() : url;\n } catch (e) {\n return url;\n }\n }\n \n function cleanLinks() {\n document.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n \n cleanLinks();\n \n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1) {\n if (node.tagName === 'A') cleanLinks();\n node.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Remove Tracking Parameters from Links");
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '

Skip to content
BranchesTags
Repository files navigation
AVCDL
Overview
The AVCDL is a set of identified processes, requirements of those processes, generated products, and mappings from the generated products to their corresponding technical standard and regulatory (ISO/SAE 21434, ISO 24089, UN R155/6) work products: for the purpose of ensuring the creation of secure systems. It has been assessed by a leading certification body (see AVCDL Assessments below).
Where to Start (all)
There's a lot of material here with more on the way. The recommended starting point is the AVCDL primary document. Between the primary and roughly 100 supporting documents, the AVCDL is over 950 pages, so it's recommended that you download or clone the repository. Although you could just download the primary document itself, there are outbound links to the secondary documents that are path relative. If you can get by with just picking things out yourself, then download the primary document, the secondary documents directory, and the working material directory.
There's a video overview of the AVCDL available here.
If you're just interested in the final product, use the distribution sub-tree. If you're interested in working on / with the source material, use the source sub-tree.
The AVCDL document workflow is described here.
Where to Start (suppliers)
The AVCDL has specific material that addressing supply chain issues.
The recommended starting point for suppliers is this page. It summarizes the documents, templates and links specific to suppliers.
Note for non-Git Users
If you'd like to download the repository, but aren't a Git user, you can download a ZIP archive. Instructions are provided here.
Note for Windows Users
If you attempt to clone this repository on a Windows machine, you may run up against the 260 character fully-qualified path name limit. You can enable long FQPNs by following the instructions provided here.
Reference Material
The AVCDL is backed by a lot of preceding work. You can see a summary here.
Introductory Material
We've written a series of blog posts to introduce the concepts motivating the AVCDL. You can find them here.
Elaboratory Material
We've written a set of documents that elaborate on the AVCDL, its implementation and related topics. You can find them here.
Certification Material
There is documentation relating to the use of the AVCDL in the context of ISO/SAE 21434, ISO 26262, and UNECE WP.29 certification. You can find them here.
Training Material
Companion video training material is currently under development.
AVCDL Assessments
The AVCDL has been assessed as complying to ISO/SAE 21434.
The AVCDL has been assessed as complying to UN R155.
The AVCDL is currently being assessed in the context of ISO 24089 and UN R156.
You can find results of these assessments here.
Mentions
We're tracking when the AVCDL gets attention. You can find a list of mentions here.
Release Timetable
The AVCDL has a lot of moving parts. We'll be providing material as soon as it has been reviewed by the certification body we're working with. You can see a summary of the secondary document status here.
About
This repository contains material related to A Versatile Cybersecurity Development Lifecycle (AVCDL)
Topics
attack-surface-analysisautomotive-securityautonomous-vehiclesavcdlcybersecuritydevelopment-lifecyclefuzz-testingiso-24089iso-sae-21434penetration-testingthreat-modelingthreat-prioritizationun-r155un-r156
Resources
Readme
License
Activity
Custom properties
Stars
121 stars
Watchers
16 watching
Forks
37 forks
Report repository
Releases
Contributors

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Auto-enable theater mode on YouTube\n(function() {\n function tryTheater() {\n var btn = document.querySelector('button[aria-label=\"Theater mode\"], ytd-player #player button[title=\"Theater mode\"]');\n if (btn && !btn.classList.contains('activated')) {\n btn.click();\n }\n }\n \n // Try immediately\n tryTheater();\n \n // Try after navigation (SPA)\n var lastUrl = location.href;\n setInterval(function() {\n if (location.href !== lastUrl) {\n lastUrl = location.href;\n setTimeout(tryTheater, 500);\n }\n }, 1000);\n \n // Also try on player load\n var observer = new MutationObserver(tryTheater);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "YouTube Theater Mode Default");
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
BranchesTags
Repository files navigation
AVCDL
Overview
The AVCDL is a set of identified processes, requirements of those processes, generated products, and mappings from the generated products to their corresponding technical standard and regulatory (ISO/SAE 21434, ISO 24089, UN R155/6) work products: for the purpose of ensuring the creation of secure systems. It has been assessed by a leading certification body (see AVCDL Assessments below).
Where to Start (all)
There's a lot of material here with more on the way. The recommended starting point is the AVCDL primary document. Between the primary and roughly 100 supporting documents, the AVCDL is over 950 pages, so it's recommended that you download or clone the repository. Although you could just download the primary document itself, there are outbound links to the secondary documents that are path relative. If you can get by with just picking things out yourself, then download the primary document, the secondary documents directory, and the working material directory.
There's a video overview of the AVCDL available here.
If you're just interested in the final product, use the distribution sub-tree. If you're interested in working on / with the source material, use the source sub-tree.
The AVCDL document workflow is described here.
Where to Start (suppliers)
The AVCDL has specific material that addressing supply chain issues.
The recommended starting point for suppliers is this page. It summarizes the documents, templates and links specific to suppliers.
Note for non-Git Users
If you'd like to download the repository, but aren't a Git user, you can download a ZIP archive. Instructions are provided here.
Note for Windows Users
If you attempt to clone this repository on a Windows machine, you may run up against the 260 character fully-qualified path name limit. You can enable long FQPNs by following the instructions provided here.
Reference Material
The AVCDL is backed by a lot of preceding work. You can see a summary here.
Introductory Material
We've written a series of blog posts to introduce the concepts motivating the AVCDL. You can find them here.
Elaboratory Material
We've written a set of documents that elaborate on the AVCDL, its implementation and related topics. You can find them here.
Certification Material
There is documentation relating to the use of the AVCDL in the context of ISO/SAE 21434, ISO 26262, and UNECE WP.29 certification. You can find them here.
Training Material
Companion video training material is currently under development.
AVCDL Assessments
The AVCDL has been assessed as complying to ISO/SAE 21434.
The AVCDL has been assessed as complying to UN R155.
The AVCDL is currently being assessed in the context of ISO 24089 and UN R156.
You can find results of these assessments here.
Mentions
We're tracking when the AVCDL gets attention. You can find a list of mentions here.
Release Timetable
The AVCDL has a lot of moving parts. We'll be providing material as soon as it has been reviewed by the certification body we're working with. You can see a summary of the secondary document status here.
About
This repository contains material related to A Versatile Cybersecurity Development Lifecycle (AVCDL)
Topics
attack-surface-analysisautomotive-securityautonomous-vehiclesavcdlcybersecuritydevelopment-lifecyclefuzz-testingiso-24089iso-sae-21434penetration-testingthreat-modelingthreat-prioritizationun-r155un-r156
Resources
Readme
License
Activity
Custom properties
Stars
121 stars
Watchers
16 watching
Forks
37 forks
Report repository
Releases
Contributors

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Remove or un-stick sticky/fixed headers that block content\n(function() {\n function unstick() {\n document.querySelectorAll('header, nav, [role=\"banner\"], .header, .navbar, .sticky, .fixed-top, [style*=\"position: fixed\"], [style*=\"position:sticky\"]').forEach(function(el) {\n if (el.style.position === 'fixed' || el.style.position === 'sticky' || \n getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {\n el.style.position = 'static';\n el.style.top = 'auto';\n el.style.zIndex = 'auto';\n }\n });\n }\n \n unstick();\n \n var observer = new MutationObserver(unstick);\n observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });\n})();", "Kill Sticky Headers");
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
BranchesTags
Repository files navigation
AVCDL
Overview
The AVCDL is a set of identified processes, requirements of those processes, generated products, and mappings from the generated products to their corresponding technical standard and regulatory (ISO/SAE 21434, ISO 24089, UN R155/6) work products: for the purpose of ensuring the creation of secure systems. It has been assessed by a leading certification body (see AVCDL Assessments below).
Where to Start (all)
There's a lot of material here with more on the way. The recommended starting point is the AVCDL primary document. Between the primary and roughly 100 supporting documents, the AVCDL is over 950 pages, so it's recommended that you download or clone the repository. Although you could just download the primary document itself, there are outbound links to the secondary documents that are path relative. If you can get by with just picking things out yourself, then download the primary document, the secondary documents directory, and the working material directory.
There's a video overview of the AVCDL available here.
If you're just interested in the final product, use the distribution sub-tree. If you're interested in working on / with the source material, use the source sub-tree.
The AVCDL document workflow is described here.
Where to Start (suppliers)
The AVCDL has specific material that addressing supply chain issues.
The recommended starting point for suppliers is this page. It summarizes the documents, templates and links specific to suppliers.
Note for non-Git Users
If you'd like to download the repository, but aren't a Git user, you can download a ZIP archive. Instructions are provided here.
Note for Windows Users
If you attempt to clone this repository on a Windows machine, you may run up against the 260 character fully-qualified path name limit. You can enable long FQPNs by following the instructions provided here.
Reference Material
The AVCDL is backed by a lot of preceding work. You can see a summary here.
Introductory Material
We've written a series of blog posts to introduce the concepts motivating the AVCDL. You can find them here.
Elaboratory Material
We've written a set of documents that elaborate on the AVCDL, its implementation and related topics. You can find them here.
Certification Material
There is documentation relating to the use of the AVCDL in the context of ISO/SAE 21434, ISO 26262, and UNECE WP.29 certification. You can find them here.
Training Material
Companion video training material is currently under development.
AVCDL Assessments
The AVCDL has been assessed as complying to ISO/SAE 21434.
The AVCDL has been assessed as complying to UN R155.
The AVCDL is currently being assessed in the context of ISO 24089 and UN R156.
You can find results of these assessments here.
Mentions
We're tracking when the AVCDL gets attention. You can find a list of mentions here.
Release Timetable
The AVCDL has a lot of moving parts. We'll be providing material as soon as it has been reviewed by the certification body we're working with. You can see a summary of the secondary document status here.
About
This repository contains material related to A Versatile Cybersecurity Development Lifecycle (AVCDL)
Topics
attack-surface-analysisautomotive-securityautonomous-vehiclesavcdlcybersecuritydevelopment-lifecyclefuzz-testingiso-24089iso-sae-21434penetration-testingthreat-modelingthreat-prioritizationun-r155un-r156
Resources
Readme
License
Activity
Custom properties
Stars
121 stars
Watchers
16 watching
Forks
37 forks
Report repository
Releases
Contributors

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Universal Dark Mode - works on any site\n(function() {\n var enabled = true;\n \n function applyDarkMode() {\n if (!enabled) return;\n \n // Create style element if it doesn't exist\n var style = document.getElementById('universal-dark-mode-style');\n if (!style) {\n style = document.createElement('style');\n style.id = 'universal-dark-mode-style';\n document.head.appendChild(style);\n }\n \n // Dark mode CSS - inverts colors but preserves images/video\n style.textContent = '\n /* Invert everything except media */\n html {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #1a1a2e !important;\n }\n \n /* Restore images, videos, iframes, canvas */\n img, video, iframe, canvas, svg, picture, [style*=\"background-image\"] {\n filter: invert(1) hue-rotate(180deg) !important;\n }\n \n /* Preserve specific elements that should not be inverted */\n .no-dark-mode, .no-dark-mode *,\n [data-theme=\"light\"], [data-theme=\"light\"],\n .ace_editor, .ace_editor *,\n .CodeMirror, .CodeMirror *,\n .monaco-editor, .monaco-editor *,\n .markdown-body pre, .markdown-body pre *,\n .highlight, .highlight *,\n pre code, pre code * {\n filter: none !important;\n }\n \n /* Fix common UI elements */\n .modal, .popup, .dropdown-menu, .tooltip, .popover {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #2d2d44 !important;\n border-color: #444 !important;\n }\n \n /* Scrollbars */\n ::-webkit-scrollbar { background: #1a1a2e !important; }\n ::-webkit-scrollbar-thumb { background: #444 !important; }\n ::-webkit-scrollbar-thumb:hover { background: #555 !important; }\n \n /* Selection */\n ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ';\n }\n \n function removeDarkMode() {\n var style = document.getElementById('universal-dark-mode-style');\n if (style) style.remove();\n }\n \n // Toggle with Alt+Shift+D\n document.addEventListener('keydown', function(e) {\n if (e.altKey && e.shiftKey && e.key === 'D') {\n e.preventDefault();\n enabled = !enabled;\n if (enabled) {\n applyDarkMode();\n console.log('[Universal Dark Mode] Enabled');\n } else {\n removeDarkMode();\n console.log('[Universal Dark Mode] Disabled');\n }\n }\n });\n \n // Apply on load\n applyDarkMode();\n \n // Re-apply on dynamic content\n var observer = new MutationObserver(function(mutations) {\n if (enabled && !document.getElementById('universal-dark-mode-style')) {\n applyDarkMode();\n }\n });\n observer.observe(document.head, { childList: true });\n \n console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');\n})();", "Universal Dark Mode");
}
} catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); }
})();
})();

Skip to content
BranchesTags
Repository files navigation
AVCDL
Overview
The AVCDL is a set of identified processes, requirements of those processes, generated products, and mappings from the generated products to their corresponding technical standard and regulatory (ISO/SAE 21434, ISO 24089, UN R155/6) work products: for the purpose of ensuring the creation of secure systems. It has been assessed by a leading certification body (see AVCDL Assessments below).
Where to Start (all)
There's a lot of material here with more on the way. The recommended starting point is the AVCDL primary document. Between the primary and roughly 100 supporting documents, the AVCDL is over 950 pages, so it's recommended that you download or clone the repository. Although you could just download the primary document itself, there are outbound links to the secondary documents that are path relative. If you can get by with just picking things out yourself, then download the primary document, the secondary documents directory, and the working material directory.
There's a video overview of the AVCDL available here.
If you're just interested in the final product, use the distribution sub-tree. If you're interested in working on / with the source material, use the source sub-tree.
The AVCDL document workflow is described here.
Where to Start (suppliers)
The AVCDL has specific material that addressing supply chain issues.
The recommended starting point for suppliers is this page. It summarizes the documents, templates and links specific to suppliers.
Note for non-Git Users
If you'd like to download the repository, but aren't a Git user, you can download a ZIP archive. Instructions are provided here.
Note for Windows Users
If you attempt to clone this repository on a Windows machine, you may run up against the 260 character fully-qualified path name limit. You can enable long FQPNs by following the instructions provided here.
Reference Material
The AVCDL is backed by a lot of preceding work. You can see a summary here.
Introductory Material
We've written a series of blog posts to introduce the concepts motivating the AVCDL. You can find them here.
Elaboratory Material
We've written a set of documents that elaborate on the AVCDL, its implementation and related topics. You can find them here.
Certification Material
There is documentation relating to the use of the AVCDL in the context of ISO/SAE 21434, ISO 26262, and UNECE WP.29 certification. You can find them here.
Training Material
Companion video training material is currently under development.
AVCDL Assessments
The AVCDL has been assessed as complying to ISO/SAE 21434.
The AVCDL has been assessed as complying to UN R155.
The AVCDL is currently being assessed in the context of ISO 24089 and UN R156.
You can find results of these assessments here.
Mentions
We're tracking when the AVCDL gets attention. You can find a list of mentions here.
Release Timetable
The AVCDL has a lot of moving parts. We'll be providing material as soon as it has been reviewed by the certification body we're working with. You can see a summary of the secondary document status here.
About
This repository contains material related to A Versatile Cybersecurity Development Lifecycle (AVCDL)
Topics
attack-surface-analysisautomotive-securityautonomous-vehiclesavcdlcybersecuritydevelopment-lifecyclefuzz-testingiso-24089iso-sae-21434penetration-testingthreat-modelingthreat-prioritizationun-r155un-r156
Resources
Readme
License
Activity
Custom properties
Stars
121 stars
Watchers
16 watching
Forks
37 forks
Report repository
Releases
Contributors