Kelly Stephenson Email and Phone Number

In my current role, I am tasked with ensuring the security of the MY25 infotainment system, which is under development for a leading automotive Original Equipment Manufacturer (OEM). As the principal liaison between Panasonic Automotive and the client, I oversee all aspects of cybersecurity-related design and implementation queries. Furthermore, I spearhead the development of cybersecurity requirements across various technologies to be integrated into the product, including Digital Rights Management and secure Ethernet communications.Key Responsibilities:- Conduct comprehensive Threat Analysis and Risk Assessment (TARA) for the infotainment system, identifying potential vulnerabilities and mitigating risks.- Formulate and implement a set of cybersecurity requirements tailored to specific technologies, enhancing the overall security posture of the product.- Serve as the primary interface with the client on all matters related to cybersecurity design, ensuring alignment with their expectations and requirements for satisfaction.- Lead the provision of TARA training to software and system cybersecurity teams, utilizing Ansys Medini to foster a robust understanding of risk management principles.- Offer expert assessments and recommendations on the management of Software Bill of Materials (SBOM), ensuring effective tooling and practices are in place for comprehensive vulnerability tracking and mitigation.

I conduct a variety of cybersecurity tasks, adhering to industry standards to ensure the security of embedded products throughout their lifecycle for multiple clients. As a member of the TUV Nord North American ISO/SAE 21434 instructor team, I contribute to the education of future automotive cybersecurity engineers. Additionally, I offer my expertise to the IoT industry to enhance the security of products utilizing POSIX operating systems like Linux with WiFi, BLE and Cellular networking capabilities.In addition to these responsibilities, I lead and provide training for LHP's internal cybersecurity team and offer tailored training sessions for external clients, focusing on various embedded cybersecurity subjects.Some of the responsibilities I have:- Conduct threat modeling and vulnerability analysis- Select cybersecurity tools based on customers needs (TARA, SBOM, Vulnerability Management, Incident Management, Static Analysis tools and rules )- Review C/C++ Code for security related issues- Provide leadership on UNECE WP29 R155/R156 and ISO/SAE ISO21434 compliance- Provide in-depth training on cybersecurity related topics like Secure Boot, Trusted Execution Environments, PKI, and others- Create blog posts for the state of cybersecurity in the Automotive space. Blog Link: https://www.lhpes.com/blog/author/kelly-stephenson

Created and maintained cybersecurity requirements for automotive ethernet applications as well as OS cybersecurity requirements. Conducted comprehensive threat evaluations on next-generation Automated Driving Assist Systems.

- Executed comprehensive cyber security threat modeling and risk evaluations for embedded systems, deploying strategic initiatives to safeguard assets from discerned threats and vulnerabilities.- Utilized avant-garde frameworks to fortify Internet of Things (IoT) devices throughout the entire development cycle, from business requirements definition to production phase.- Engaged directly with clients, offering Public Key Infrastructure (PKI) solutions to facilitate secure development and production processes. This included the generation, installation, and management of certificates essential for authentication and code signing.- Spearheaded the cyber security approach to bolster the security of industrial application IoT devices.- Conducted tailored security training sessions for clients, focusing on specific microprocessor applications.- Secured a patent for innovating a detection method for ramp obstruction in mobility vehicles.- Integrated Automotive Ethernet with XCP functionality for a client's prototype Electronic Control Unit (ECU), using the Vector stack with DaVinci Developer and Vehicle-Spy Tool.

- Oversaw product management and development strategies, directing the complete product lifecycle management for automotive controllers. Concurrently designed and executed battery management system and J1939 protocol software stack.- Devised software modules using C and C++, optimizing interfacing across diverse platforms, domains, adapters, and stacks.- Fortified communications on Microsoft Azure servers using Win10 IoT device, and simultaneously integrated Safety Critical C code into the battery management system to ensure adherence to MISRA C compliance.- Developed a USB service tool to facilitate the monitoring and maintenance of Windows Presentation Foundation (WPF) systems and the certification of engine emission data.- Worked in tandem with the safety team to establish cyber security processes, incorporating these procedures into hands-on functions and daily operations.Key Achievements:- Pioneered the development of a production line test system, resulting in a 30% reduction in defects.- Successfully led the design and deployment of C coding standards and an extensive review process.- Guided the design team in the effective implementation of SafeRTOS into an existing bare-metal code base.- Accomplished reverse engineering of vehicle datalink buses (CAN), enabling an aftermarket device to reach the market as an industry first.- Designed a J1939 protocol stack, facilitating an industry-first CAN bus analysis.

As the Senior Software Engineer, I was responsible for embedding software within various domains. One of my main functions within the automotive departments was designing and implementing displays to show vehicle data. In order to execute this project, I had to evaluate complex engine systems, including the coding required for the systems so that I could successfully install C code for the automated driving system. This was a complex project that I was able to successfully execute while maintaining cybersecurity compliance across all domains and platforms.Notable Contributions Include:• Drafted Verilog code for Altera FPGA in order to control single cylinder engine with a SPI interface, receiving a patent for the design.

Developed multiple design requirements for engine aftertreatment controls including the SAE J1939 messaging for complex CAN systems in heavy duty truck applications.