Measuring Incomplete Hardening Across Production-Class Automotive Firmware Stacks
Vehicle firmware often contains security components whose effective deployment cannot be inferred from their presence alone. This paper examines four anonymized production-class firmware corpora: an Adaptive AUTOSAR-class ADAS platform, a domain-controller–IVI pair, a distributed multi-ECU ADAS network, and a split And...