Dr. André Weimerskirch is an associate research scientist in UMTRI's Engineering Sysytems Group, and he leads UMTRI’s cybersecurity and privacy activities. Before joining UMTRI, André cofounded the automotive cybersecurity company ESCRYPT (sold to Bosch in 2012), where he was in charge of ESCRYPT’s American and Asian operations with offices in the United States, Japan, and Korea.
Dr. Weimerskirch is an internationally known expert in the area of automotive cybersecurity and privacy. André is a main actor in the definition of vehicle-to-everything (V2X) communication security and privacy mechanisms. André’s interests are in all areas of transportation security and privacy with a special focus on connectivity, infotainment systems, secure hardware and trustworthy computing platforms, key management, privacy, and in-vehicle electronics.
At UMTRI, Dr. Weimerskirch and his team are working in the following areas:
- Connected vehicle / V2X cybersecurity and privacy: the design and optimization of privacy preserving and secure vehicle-to-vehicle (V2V) and vehicle-to-infrastructure (V2I) communication security mechanisms.
- Automated vehicle cybersecurity: the design of a new security paradigm for automated vehicles that take into account that automated vehicles have no fail-safe mode by providing control to a human driver.
- Transportation cybersecurity test lab: collaboration with car makers and suppliers to evaluate the security of vehicles and components by penetration testing in order to improve the security design. The test lab also provides a training and education environment for industry and brings together industry and students.
- Risk assessment and security design: consulting support to perform risk assessment and to design secure in-vehicle electronics architectures, communication security protocols, trustworthy computing platforms with secure microcontrollers, and application security.
- Security applications: design and prototype application development of transportation security applications, such as secure CAN and secure in-vehicle communication, intrusion detection and prevention systems, protection of component integrity, secure software updates over-the-air, secure boot, etc.
- Transportation privacy: evaluation of existing systems in terms of end-user privacy and stakeholder confidentiality, and design of privacy preserving systems. The scope includes in-vehicle systems (e.g. event data recorder/black box), cloud systems, and communication systems (e.g. vehicle-to-vehicle communication).
Weimerskirch holds a Ph.D. from Ruhr-University Bochum, Germany, in the area of applied data security and an M.S. in computer science from Worcester Polytechnic Institute. He published numerous articles in the area of automotive and embedded cyber security, and is co-founder of the American workshop on embedded security in cars (escar USA).