As vehicles evolve into highly connected, software-defined platforms, APIs and service-oriented architectures play a central role in enabling flexibility, scalability, and faster development cycles. However, they also introduce new attack surfaces and security challenges, both inside the vehicle and in its connection to the cloud. This session explores how to design, secure, and govern APIs and SOA components in modern E/E architectures, with a focus on best practices, pitfalls, and compliance with emerging automotive cybersecurity standards.

In this session, you will gain a deeper understanding of:

• The role of APIs and SOA in modern vehicle platforms and their impact on cybersecurity
• Common security risks in automotive API ecosystems including authentication, access control, and data exposure
• Best practices and mitigation strategies for securing service-based architectures in SDVs, from in-vehicle communication to cloud integration