The growing complexity of automotive embedded systems has led to an increasingly critical need for safe and secure software. Traditionally, safety and cybersecurity verifications are conducted separately, resulting in duplicated or tripled V-cycle efforts. This talk explores how formal methods empower C/C++ and Rust developers to proactively address specific categories of vulnerabilities and bugs in a single, unified verification step. Combining static analysis with abstract interpretation, full context sensitivity, and hardware memory awareness enables more comprehensive detection of potential bugs and vulnerabilities. This integrated approach leads to more dependable and secure software.

By processing activities such as robustness testing, interface testing, fault injection, data and control flow integrity, determinism check, penetration testing, and fuzz testing at the bottom of the V-cycle with a single tool, we significantly reduce the upward effort for both safety and security. This unified approach demonstrates that the cost of combined activities is lower than the sum of separate activities. This approach aligns with industry best practices, including ISO 26262 and ISO 21434, empowering C/C++/Rust developers to deliver reliable, safe, and secure embedded systems that meet today’s and tomorrow’s application demands. We will illustrate this approach using the TrustInSoft Analyzer, showcasing how it accelerates verification for large codebases and improves developer efficiency.

• Learn how unified verification reduces duplication and improves software reliability
• Discover efficient testing methods that simplify safety and security compliance
• Understand how this approach aligns with ISO 26262/21434 for secure, reliable development