RCCE Course
Course #1091

Automotive and Vehicle Cybersecurity

📊 Level: Intermediate
⏱️ Duration: 2 Days
🏷️ Track: OT Security
📋 Prerequisites: Foundations
🖥️ Mode: Online Instructor-Led
📝 Course Description

RCCE students will learn the security of modern vehicles including CAN bus risks, electronic control unit trust, telematics exposure, over-the-air update security, and safety implications of cyber compromise. RCCE students will learn to understand attack paths across in-vehicle networks, evaluate isolation assumptions, review update security, and analyze how vehicle ecosystems blend embedded security, supply chain risk, and physical safety. The course covers practical scenarios ranging from architecture analysis to risk assessment and defensive design. RCCE students will learn to analyze complex systems and think like an attacker to better defend the organization. This comprehensive course delivers practical knowledge applicable to real-world cybersecurity operations. Starting from foundational concepts, RCCE students will learn through a combination of concept explanation, practical demonstration, and hands-on exercises.

🎯 Target Audience
  • Security Engineers building defensive controls
  • Security Analysts and Blue Team members
  • Systems Administrators with security responsibilities
  • GRC and Risk Professionals supporting controls
  • Professionals implementing Automotive and Vehicle Cybersecurity
🧠 What You Will Learn
  • Explain Course Overview fundamentals
  • Execute hands-on tasks for learning objectives
  • Execute hands-on tasks for course structure — covering Audience and Prerequisites.
  • Execute hands-on tasks for one of 1,039 rcce courses — covering Audience and Prerequisites.
  • Execute hands-on tasks for automotive cybersecurity landscape
  • Execute hands-on tasks for connected vehicles
  • Execute hands-on tasks for threat growth
  • Build detections and response workflows for privilege escalation, including 50+ ECUs per modern vehicle, and 400% increase in automotive.
  • Design a scalable privilege management architecture with policy and enforcement
  • Execute hands-on tasks for lin / flexray / most — covering Primary in-vehicle bus protocol.
  • Execute hands-on tasks for can bus protocol deep dive — covering 11-bit or 29-bit arbitration ID, 0-8 byte data payload (64 for CAN-FD).
  • Execute hands-on tasks for can frame structure — covering 11-bit or 29-bit arbitration ID, 0-8 byte data payload (64 for CAN-FD).
📚 Course Outline
Module 01Course Overview
Module 02Learning Objectives
Module 03Course Structure
Module 04One of 1,039 RCCE courses
Module 05Automotive Cybersecurity Landscape
Module 06Connected Vehicles
Module 07Threat Growth
Module 08Industry Response
Module 09Modern Vehicle Architecture
Module 10LIN / FlexRay / MOST
Module 11CAN Bus Protocol Deep Dive
Module 12CAN Frame Structure
Module 13Security Weaknesses
Module 14Electronic Control Unit Trust Models
🧪 Lab Details

All hands-on labs run on Rocheston Rose X OS. Students practice automotive and vehicle cybersecurity by implementing the controls discussed in class, with a focus on real-world deployment, monitoring, and validation.

  • Lab 1: Explain Course Overview fundamentals
  • Lab 2: Execute hands-on tasks for learning objectives
  • Lab 3: Execute hands-on tasks for course structure
  • Lab 4: Execute hands-on tasks for one of 1,039 rcce courses
  • Lab 5: Execute hands-on tasks for automotive cybersecurity landscape
📊 Skill Level
Intermediate
Beginner Intermediate Advanced Expert
Duration
2 Days
🎓
Certificate
Completion
🖥️
Lab Platform
Rose X OS
👨‍🏫
Mode of Training
Online Instructor-Led
🔥
Platform
Zelfire
🐦‍⬛
Cyber Range
Raven
📓
Study Material
CyberNotes
🏆 Certificate

Upon successful completion of this course, students will receive an official RCCE Course Completion Certificate for Automotive and Vehicle Cybersecurity, verifiable through the Rocheston certification portal.

🔑 Student Access & Materials
  • Full access to all course materials and slide decks
  • Hands-on lab access on Rocheston Rose X OS environment
  • Access to Rocheston CyberNotes
  • Access to Rocheston Zelfire — EDR/XDR SIEM platform
  • Access to Rocheston Raven — online cyber range exercise platform
  • Access to Rocheston Vulnerability Vines AI