Renault — Automotive
Hardening Connected Vehicle Gateways and OTA Updates

A vehicle we ship today has to accept a security fix a decade from now. That makes the update path itself safety-relevant, so it belongs behind the same verified boundary as everything else we trust in the car.
Key outcome
A Minimal Trusted Computing Base Inside the Vehicle
A connected vehicle gateway sits between the outside world and safety-relevant systems. Reducing the amount of code that has to be trusted on that boundary — and proving the correctness of what remains — is the most direct way to shrink the attack surface.











