search

w3c / automotive

W3C Automotive Working Group Specifications
Other
145 stars 68 forks source link

Add in-line privacy and security considerations to VISS transport #465

Open samuelweiler opened 1 year ago

samuelweiler commented 1 year ago

https://www.w3.org/TR/viss2-transport/ has no in-line Privacy nor Security writeup. I suggest the WG to prioritize the architectural stuff in https://github.com/w3c/automotive/issues/464 over this issue.

tguild commented 1 year ago

Transport cannot be used without Core, inclined to refer to its privacy and security considerations. Additional security considers exist for each underlying protocol, what to reference or direct implementers to, OWASP as WoT did?

https://www.w3.org/TR/2023/CR-wot-discovery-20230119/#security-considerations

provide link to COVESA Mira board of some potential architectures - there is no one defined one - including some where VISS may be used.

W3C Automotive Best Practices is stalled but still desirable, intent to do with COVESA Data Expert Group.

https://www.w3.org/TR/2019/NOTE-wot-security-20191106/

UlfBj commented 11 months ago

Architecture figures:

Slide 5: https://docs.google.com/presentation/d/1y7xJabLK9iUubxR8_4z1M6rlci_fT13V/edit#slide=id.p14

Autosar Data Arch Diagram draft: https://drive.google.com/drive/folders/10P5KanrU-CwR4xfQnL0rPxAorlPuuYWD