01854nas a2200289   4500008004100000022001400041245011000055210006900165260004200234300001000276490000600286520099200292653002901284653001501313653001201328653001801340653001401358653001501372653001801387653001601405653001301421653004001434653002001474100001801494700001601512856003601528       2015                        eng d  a1927-032100aSecuring the Car: How Intrusive Manufacturer-Supplier Approaches Can Reduce Cybersecurity Vulnerabilities0 aSecuring the Car How Intrusive ManufacturerSupplier Approaches C  aOttawabTalent First Networkc01/2015  a21-250 v53 aToday's vehicles depend on numerous complex software systems, some of which have been developed by suppliers and must be integrated using "glue code" so that they may function together. However, this method of integration often introduces cybersecurity vulnerabilities at the interfaces between electronic systems. In this article we address the “glue code problem” by drawing insights from research on supplier-manufacturer outsourcing relationships in the automotive industry. The glue code problem can be framed as a knowledge coordination problem between manufactures and suppliers. Car manufacturers often employ different levels of intrusiveness in the design of car subsystems by their suppliers: the more control over the supplier the manufacturer exerts in the design of the subsystem, the more intrusive the manufacturer is. We argue that high intrusiveness by car manufacturers in defining module interfaces and subcomponents for suppliers would lead to more secure cars. 10aautomobile manufacturing10acar design10acontrol10acybersecurity10aglue code10agovernance10aintrusiveness10aoutsourcing10asupplier10asupplier-manufacturer relationships10avulnerabilities1 aAmin, Mohamed1 aTariq, Zaid  uhttp://timreview.ca/article/863