https://www.mdu.se/

Security and resilience have become paramount concerns for integrated system manufacturers as the number of vulnerabilities continues to increase annually. Cyber threats pose significant risks with substantial potential impacts on both manufacturers and end users. New regulations, such as the EU Cybersecurity Act and Cyber Resilience Act, mandate stricter practices and thorough verification throughout development and operations. Implementing a holistic DevSecOps process encompassing threat analysis, requirements engineering, development practices, verification, and operations management is challenging for large enterprises and SMEs. This complexity arises from the need for specialized expertise, knowledge of various techniques and tools, rigorous principle application, and thorough verification at each step, making the process costly, time-consuming, and potentially stifling innovation and time-to-market. Our proposal introduces a suite of smart assistants designed to work collaboratively with engineers. These assistants recommend best practices and tools, suggest context-specific regulatory requirements, analyze design architecture, generate tailored code and configurations, and conduct resilience tests. This comprehensive approach aims to ensure the correctness and completeness necessary for security and regulatory compliance.