Skip to main content
Switch Language
Cybersecurity

TARA实践

此培训为期一天,旨在助力提高参与者的风险评估技能水平,并介绍如何进行初步威胁分析和风险评估(TARA)。

威胁分析与风险评估(TARA)是汽车网络安全的核心。这一为期一天的培训将指导学员进行初始的TARA操作,同时也有助于提升现有的风险评估能力。培训中将介绍由ISO/SAE 21434国际标准第15条所定义的风险评估概念,并结合实践导向的七步法来完成评估。

在汽车行业,该ISO标准要求开发电子系统的公司在其整个车辆或产品生命周期内多次进行威胁分析与风险评估(TARA)。根据ISO/SAE 21434第15条,每次风险评估均需通过七个连续的步骤来完成。定期且有条不紊地开展TARA,使其成为以网络安全为导向的流程中的关键一环。

Key Takeaways

  • 动机、术语和定义
  • 第15条款:网络安全风险评估方法概述
  • ISO/SAE 21434建议的7个步骤
  • 详细演示
  • 从第9条款:项目定义开始
  • 关于此培训中基于Excel的具体TARA模板的概述
  • 逐步执行TARA
  • 推导网络安全目标
  • 推导网络安全需求及其分配以确定网络安全概念
  • 确定标准中未提及的其他外部来源和方法
  • 其他信息来源的概述,包括ENISA、UNECE和MS STRIDE
  • 总结和回顾

Target Audience

  • 网络安全经理/工程师
  • 功能安全经理/工程师
  • 软件/硬件/系统工程师
  • 软件/硬件/系统架构师
  • 项目主管
  • 质量经理

Prerequisites

建议掌握电子系统工程开发,或者Automotive SPICE或ISO 26262/功能安全的相关知识。同时还建议对汽车电子产品的网络安全有大致了解。 

Further Information

在线培训涉及的相关资料均以数字形式提供。线下培训涉及的相关资料也以数字形式提供,同时可能还会有纸质补充材料。另外,学员还必须自行准备相关标准副本。 

Course Dates

Dates 地点 Time Language Status Price
2024/12/12 Virtual 09:00 AM - 05:00 PM CET English
2025/9/26 Virtual 09:00 AM - 05:00 PM CET English €690 REGISTER
Booking
details
Participant
details
Payment
details
GENERAL INFORMATION
Training ID:
地点:Onsite-Training
Date:2/7 -2/10/2024
Time:09:00 AM - 05:00 PM
Language:English (EN)
Examination Fee:$Xx per participant
Online Price:#Xx per participant, plus vat
Services Provided by:UL
Thank you for booking

Your registration was successful. A confirmation email will be sent to you.

Continue exploring
Booking Overview
Name:
Company:
Email:
Phone:
Address:
Order number (if available):--
Participants
Please enter the full company name.
Please enter the full company name.

To register for this event, please agree to our privacy policies as well as our GTC and the processing of your data.

UL Solutions Online Policies
GTC
Data Processing

For in-person training only, please let us know if you do not eat certain foods for ethical, health or religious reasons.

* Mandatory fields

Payment Method

We’re unable to process your registration due to an unexpected error. Try again or if the problem continues, contact us.

X

联系我们

无论您需要定制报价还是专属培训,我们都能为您提供服务。请填写此表,我们会尽快与您联系。

Please wait…

Can't find what you're looking for?

Click the link and request a quote tailored to your organization's needs.

Request a Quote

Private Trainings Available

Click the link for information on scheduling a private training for your organization.

Contact Sales

Cancellation Policy

Contractual cancellation right

The registration can be cancelled free of charge 30 days before the training date, after which the following rules apply: 

  • 30 days – 14 days before the start of the training: 50% of the participation fee
  • 14 days or less before the start of the training: 100% of the participation fee
  • This shall not apply when a substitute attendee is named. This is possible until the registration at the beginning of the event.

The relevant cut-off date for the calculation of the cancellation period is the first training day of a bindingly booked training.

The cancellation must be declared in writing and sent by email to the training provider.

Naming substitutes

The participant may, after receiving the registration confirmation, name a substitute in writing prior to the beginning of the seminar.

This change of reservation is free of charge; seminars spanning several days may be transferred only in their entirety, i.e. attended by one substitute.

Date cancellations and date changes

The training provider has the right to change the location of events and/or specify a different date as a substitute. The training provider also reserves the right to cancel dates for organizational reasons (e.g. number of participants too low, illness of the speaker at short notice).

The training provider will notify the participant of the cancellation and of the reason with-out undue delay and will attempt to change the participant's reservation, provided that he agrees to a different date or event location. Otherwise, the full amount of any already paid attendance fee will be refunded in the case of a cancellation; no further claims exist, particularly no refund of travel and/or accommodation cost.

Within UL Solutions we provide a broad portfolio of offerings to many industries. This includes certification, testing, inspection, assessment, verification and consulting services. In order to protect and prevent any conflict of interest, perception of conflict of interest and protection of both our brand and our customers brands, UL Solutions has processes in place to identify and manage any potential conflicts of interest and maintain the impartiality of our conformity assessment services.