Reacting to Vulnerabilities
via Threat and Control Catalogs
for ISO/SAE 21434

Jens Bühl
Jens Bühl is IT Consultant and Product Owner of itemis CREATE at itemis AG. For the past 3 years, he has been focussing on tool development for efficient automotive security risk analyses, including related processes, regulations, and norms, e.g. ISO/SAE 21434. Holding a degree in computer science from the University of Hagen, he has 10 years of professional experience in software engineering and architecture in various industries and globally distributed teams.

Bastian Kruck
Bastian Kruck studied software engineering in Potsdam. He plays the double bass and likes to create domain-specific tools. He performed scientific research in the domain of human-computer interaction and programming language tools, especially debugging tools. He also was a cofounder of a startup that focussed on asynchronous appointment making with service providers. At itemis AG, he is a software consultant and now facilitates the creation of the Security Analyst Tool. He is keen to see the 21434-related tooling grow into a whole appliance and considers his co-authored format openXSAM an enabling technology for that. The tool assists in performing cybersecurity threat analyses and risk assessments of component-based systems.