2026
Conference article
Restricted
Critical Analysis of ASPICE® 4.0 Machine Learning Engineering Process Requirements
Lami Giuseppe, Falcini FabioThe introduction of machine learning development paradigm into the automotive software industry has made necessary to update the applicable qual- ity evaluation standards such as Automotive SPICE®. As a result the Automotive SPICE® community timely tackled this challenge with the introduction of the ver- sion 4.0 containing a first baseline of process requirements for machine learning engineering. The paper provides a succinct critical analysis of related ASPICE® new content with particular reference to the current state of the art of machine learn- ing development practices. The outcome of this paper aims at being an input for the forthcoming improvement initiatives within the Automotive SPICE working groups.Source: LECTURE NOTES IN COMPUTER SCIENCE, vol. 16362, pp. 346-352. Salerno, Italy, 1-3 December 2025
DOI: 10.1007/978-3-032-12092-2_29Metrics:
See at:
doi.org
| CNR IRIS
| CNR IRIS
| link.springer.com
2025
Conference article
Restricted
A survey of existing standards addressing AI-based technologies
Lami Giuseppe, Merola FrancescoThe rapid integration of Artificial Intelligence (AI) into software sys- tems across many domains, including critical ones such as healthcare, transporta- tion, and public administration, has intensified the need for robust, reliable, and transparent quality evaluation methods. While numerous standards and regula- tory initiatives have emerged and many more are being worked on, the current landscape remains fragmented with varying scopes, definitions, and enforcement mechanisms. This paper provides a structured, yet not exhaustive, overview of current international standards, regulatory instruments, and soft-law guidelines relevant to AI-based software quality evaluation. The purpose of this paper is to provide a starting point for practitioners and researchers for understanding the sta- tus, as well as the short-coming evolution, of the standards addressing AI-based technologies and for orienting their efforts to contribute to fill the existing lacks and weaknesses in the standard corpus.Source: LECTURE NOTES IN COMPUTER SCIENCE, vol. 16362, pp. 323-333. Salerno, Italy, 1-3/12/2025
DOI: 10.1007/978-3-032-12092-2_27Metrics:
See at:
doi.org
| CNR IRIS
| CNR IRIS
| link.springer.com
2025
Conference article
Open Access
Prognostic techniques in automated driving system (ADS) vehicle safety
Merola F., Hanif A., Lami G., Ahmed Q., Monohon M.The recent advancements in fields such as sensors, AI, and IoT are majorly impacting the automotive industry. Automated Driving Systems (ADS) are developing rapidly, meaning that SAE J3016 Level 3 and above vehicles are quickly becoming a reality. As a result, maintenance of such systems becomes essential to ensure their safe and efficient operation. Prognostic techniques in particular are crucial to monitor the state of health and predicting the end of life for components. Prognostics engineering is being applied in many industries and for conventional automotive applications, but ADS is new technology, and the prognostics for these systems are still being developed and adapted. In this paper, we first present a review of the most used prognostic techniques across different safety-critical domains such as aerospace, power, and manufacturing. Then, we summarize the main challenges that must be faced to successfully develop novel approaches for prognostics of ADS components and provide a set of recommendations to support future research in the field. Finally, we present a future project consisting of a scenario-based prognostic framework for ADS-equipped vehiclesSource: SAE TECHNICAL PAPER SERIES. Detroit, USA, 08-10/04/2025
See at:
CNR IRIS
| wcx.sae.org
| CNR IRIS
| CNR IRIS
2025
Conference article
Open Access
Strengthen process debt identification through process assessment standards
Lami G., Merola F.Process Debt (PD), a concept derived from the Technical Debt, consists of a sub-optimal activity that might have short-term benefits but generates a negative impact in the medium-long term. PD identification is a key phase of PD management as it aims to determine the type of PD, where it is located, and how to estimate its impact. However, PD identification is the most challenging phase, as practitioners find it the most effort-intensive, mainly due to the immaterial nature of the process. In this paper, to mitigate the difficulties of PD identification, we propose a methodology that relies on frameworks compliant with the ISO/IEC 33000 family standard, the reference standard for process assessment. We also provide an exemplar application using the data from a process assessment performed using the Automotive SPICE, a framework compliant with the ISO/IEC 33000 requirements. An excerpt of the case study results is presented, showing the potential for a systematic and effective approach to PD identification.Source: COMMUNICATIONS IN COMPUTER AND INFORMATION SCIENCE, vol. 2657, pp. 273-288. Riga, Latvia, 17-19/08/2025
DOI: 10.1007/978-3-032-04288-0_17Metrics:
See at:
CNR IRIS
| link.springer.com
| CNR IRIS
| CNR IRIS
2024
Journal article
Open Access
A risk assessment framework based on fuzzy logic for automotive systems
Merola F., Bernardeschi C., Lami G.Recent advancements in the automotive field have significantly increased the level of complexity and connectivity of modern vehicles. In this context, the topic of cybersecurity becomes extremely relevant, as a successful attack can have an impact in terms of safety on the car navigation, potentially leading to harmful behavior. Risk assessment is typically performed using discrete input and output scales, which can often lead to an identical output in terms of risk evaluation despite the inputs presenting non-negligible differences. This work presents a novel fuzzy-logic-based methodology to assess cybersecurity risks which takes attack feasibility and safety impact as input factors. This technique allows us explicitly model the uncertainty and ambiguousness of input data, which is typical of the risk assessment process, providing an output on a more detailed scale. The fuzzy inference engine is based on a set of control rules expressed in natural language, which is crucial to maintaining the interpretability and traceability of the risk calculation. The proposed framework was applied to a case study extracted from ISO/SAE 21434. The obtained results are in line with the traditional methodology, with the added benefit of also providing the scatter around the calculated value, indicating the risk trend. The proposed method is general and can be applied in the industry independently from the specific case study.Source: SAFETY, vol. 10 (issue 2), pp. 1-21
DOI: 10.3390/safety10020041Metrics:
See at:
Safety
| Safety
| Archivio della Ricerca - Università di Pisa
| IRIS Cnr
| IRIS Cnr
| Archivio della Ricerca - Università di Pisa
| CNR IRIS
2024
Conference article
Restricted
Integrating cybersecurity concerns in automotive safety validation: a systematic approach
Lami G., Merola F.Automated vehicles (AV) are characterized by intelligent functions (many developed using AI-based solutions), autonomy, and high connectivity with the external environment. The high connectivity of AV opens relevant cybersecurity issues due to many potential attack surfaces. Cybersecurity attacks' effects on AV may also determine severe risks in terms of functional safety due to vehicles' high automation and autonomy. Safety validation of AV cannot be disjoint from the analysis and treatment of cybersecurity concerns. In this paper, we define a methodology called Combined Safety and Cybersecurity Validation (CSCV) aimed at strengthening, in a systematic manner, safety validation of AI-based functions of AV by addressing cybersecurity concerns. The CSCV methodology focuses on the emerging scenario-based approach for testing AI-based vehicle functions and is based on creating variants of the scenarios used for functional safety testing. The variants are derived from the original scenarios modified by the effects of highly risky cyberattacks that can occur during the scenario execution.DOI: 10.1109/icsrs63046.2024.10927483Metrics:
See at:
CNR IRIS
| ieeexplore.ieee.org
| CNR IRIS
2023
Conference article
Restricted
Functional safety and cybersecurity improvement areas in automotive: an empirical study
Giuseppe Lami, Francesco MerolaOver the last decade, there has been an exponential increase in software-driven functions embedded in vehicles. In such a scenario, demands and needs regarding Functional Safety assurance have grown in criticality and complexity. As new- generation vehicles are characterized by high connectivity and autonomy, Functional Safety concerns can no longer be disjointed from Cybersecurity implications. To face such a situation, the automotive community has made enormous efforts to define methodologies, set up technologies, and enforce its culture.This paper presents the outcomes of an empirical study performed with the aim of identifying the current Functional Safety and Cybersecurity improvement areas in automotive software-intensive systems development. The study, conducted through an online questionnaire on a selected sample of automotive players, provided some interesting indications on which areas need to be improved the most.The results of the study show that the main improvement needs are related to methodologies deployed, tools in use, skills, and organizational structure for Cybersecurity and Integrated Functional Safety and Cybersecurity practices. In particular, the improvement need is higher for management aspects than engineering ones. We observed also that the need for improvement is markedly higher for small/medium companies than large ones.DOI: 10.1109/icsrs59833.2023.10381401Metrics:
See at:
doi.org
| IRIS Cnr
| IRIS Cnr
| CNR IRIS
2022
Conference article
Restricted
Technical debt management in automotive software industry
Lami G, Spagnolo GoThe suppliers of software-intensive electronic automotive components are facing technical challenges due to the innovation rush and the growing time pressure from customers. As the quality of on-board automotive electronic systems is strongly dependent on the quality of their development practices, car manufacturers and suppliers proactively focus on improving technical and organizational processes. Automotive SPICE (ASPICE) is today the reference standard for assessing and improving automotive electronics processes and projects in this setting. As car manufacturers use ASPICE to qualify their suppliers of software-intensive systems, such a standard becomes a market demand. This paper identifies and discusses the benefits and impact of the integration and harmonization of Technical Debt Management (TDM) in an ASPICE- compliant software development project. Besides this paper provides a conceptual framework and a reference process description for the integration of ASPICE and TDM practices in a sample Software Engineering process.DOI: 10.1109/seaa56994.2022.00053Metrics:
See at:
CNR IRIS
| ieeexplore.ieee.org
| CNR IRIS
2019
Contribution to book
Restricted
Comparing results of natural language disambiguation tools with reports of manual reviews of safety-related standards
Biscoglio I, Ciancabilla A, Fusani M, Lami G, Trentanni GMethods and tools for detecting and measuring ambiguity in texts have been proposed for years, yet their efficacy is still under study for improvement, encouraged by results in various application fields (requirements, legal documents, interviews, ...). The paper presents a fresh-started process aimed at validating such methods and tools by applying some of them to a semi-structured data corpus. This corpus represents results of manual reviews, done by international experts, along with their source texts. The purpose is to check how much results of automated analysis are consistent with the reviewers reports. The application domain is that of safety-related system/software Standards in Railway. Thus, if we increase confidence in tools, then we also increase confidence in Standard correctness, which in turn impacts in conforming products.DOI: 10.1007/978-3-030-30985-5_15Metrics:
See at:
doi.org
| CNR IRIS
| CNR IRIS
| link.springer.com