Master Thesis - Security Assessment of Over-the-Air (OTA) Software Updates in Connected Vehicles
Scania GroupRekommenderat
Sammanfattning
This thesis project at Scania focuses on enhancing the security of over-the-air (OTA) software updates for heavy-duty vehicles. The role involves analyzing OTA update architectures, developing threat models, and creating automated security test cases. The position is based in Södertälje, Sweden, and is expected to last less than six months, starting on January 11, 2027. This opportunity is ideal for students in software development looking to gain practical experience and contribute to vital vehJobbet i korthet
Arbetstid
deltid
Det här erbjuder vi
Opportunity to build relationships with Scania for future employment.Gain practical experience in cybersecurity and software development.Contribute to important security measures in the automotive industry.
Ansök senast: Öppet tillsvidare
Publicerad: 2026-11-04
Beskrivning
Threat Modeling and Automated Security Validation of Over-the-Air Software Updates in Heavy-Duty Vehicles
Introduction
Thesis work is an excellent way to get closer to Scania and build relationships for the future. Many of today's employees began their Scania career with their degree project.
Background:
OTA updates are critical to maintaining and improving vehicle software. Compromised update processes can introduce unauthorized firmware, downgrade attacks, or disruption of vehicle functions.
Objective
The thesis worker will:
Research questions:
1. What are the most significant cybersecurity threats affecting automotive OTA update mechanisms?
2. How effectively do existing security controls prevent unauthorized or manipulated updates?
3. How can OTA security validation be automated and integrated into release testing?
Expected deliverables
A complete OTA threat model, security requirements traceability matrix, automated Python-based test suite, and a technical evaluation report.
Value for Scania:
Strengthens OTA security assurance and provides reusable test cases supporting cybersecurity engineering under UN R155 and software update management under UN R156.
Education/program/focus
Indicate education, program or focus: Software development
Number of students: 1
Start date for the thesis work: 2027-01-11
Estimated time required: <6 months
Contact persons and supervisors
Adela Åberg, Unit Head, adela.aberg@scania.com,
Mostafa Imam, Master Thesis supervisor mostafa.imam@scania.com
Application:
Your application must include a CV, personal letter and transcript of grades
A background check might be conducted for this position. We are conducting interviews continuously and may close the recruitment earlier than the date specified.
Publication date from - to
2026-11-05 to 2026-11-20.
Requisition ID: 34658
Number of Openings: 1.0
Part-time / Full-time: Full-time
Permanent / Temporary: Temporary
Country / Region: SE
Location(s):
Södertälje, SE, 151 38
Required Travel: 0-25%
Workplace: On-site
Introduction
Thesis work is an excellent way to get closer to Scania and build relationships for the future. Many of today's employees began their Scania career with their degree project.
Background:
OTA updates are critical to maintaining and improving vehicle software. Compromised update processes can introduce unauthorized firmware, downgrade attacks, or disruption of vehicle functions.
Objective
The thesis worker will:
- Analyze the OTA update architecture and associated attack surfaces.
- Develop a threat model using STRIDE and attack trees.
- Investigate firmware authenticity, integrity, authorization, and anti-rollback protections.
- Develop automated security test cases for OTA update workflows.
- Evaluate resilience against interrupted updates, replay attempts, and manipulated update metadata.
Research questions:
1. What are the most significant cybersecurity threats affecting automotive OTA update mechanisms?
2. How effectively do existing security controls prevent unauthorized or manipulated updates?
3. How can OTA security validation be automated and integrated into release testing?
Expected deliverables
A complete OTA threat model, security requirements traceability matrix, automated Python-based test suite, and a technical evaluation report.
Value for Scania:
Strengthens OTA security assurance and provides reusable test cases supporting cybersecurity engineering under UN R155 and software update management under UN R156.
Education/program/focus
Indicate education, program or focus: Software development
Number of students: 1
Start date for the thesis work: 2027-01-11
Estimated time required: <6 months
Contact persons and supervisors
Adela Åberg, Unit Head, adela.aberg@scania.com,
Mostafa Imam, Master Thesis supervisor mostafa.imam@scania.com
Application:
Your application must include a CV, personal letter and transcript of grades
A background check might be conducted for this position. We are conducting interviews continuously and may close the recruitment earlier than the date specified.
Publication date from - to
2026-11-05 to 2026-11-20.
Requisition ID: 34658
Number of Openings: 1.0
Part-time / Full-time: Full-time
Permanent / Temporary: Temporary
Country / Region: SE
Location(s):
Södertälje, SE, 151 38
Required Travel: 0-25%
Workplace: On-site
Ansök till tjänsten
Master Thesis - Security Assessment of Over-the-Air (OTA) Software Updates in Connected Vehicles
Rekommenderat
OM FÖRETAGET
Scania Group
