SIG · Tokyo, Japan · ニケット

Vehicle networks,
secured by design.

5+ years securing vehicle networks at a major Japanese OEM — AUTOSAR IDS/SecOC, WP.29 certification, and full-stack ECU security from CAN to SOC.

View projects GitHub Resume

0x010 · REGISTER / ABOUT

From attack surface
to architecture.

I'm an automotive cybersecurity engineer working on-site at Nissan Motor, leading a ~10-engineer team across the full vehicle security stack — from CAN-level JASPAR MAC authentication and AUTOSAR SecOC, through AUTOSAR IDS violation aggregation and off-board reporting, to ECU bootstrap and certificate provisioning for Gateway, IVI, and IVC.

I've directly contributed to WP.29/UN-R155 cybersecurity certification for 6 vehicle lines — ICE, E-Power, and EV — and presented security demonstrations at CAR-ELE 2022. On the open-source side I'm building a full AUTOSAR security ecosystem: IdsM toolkit, CAN IDS, SecOC simulator, and a DoIP ECU simulator, all wired into a sensor-to-SOC pipeline.

Based in Tokyo and studying Japanese. My next move is toward Software-Defined Vehicle platforms and embedded software, where security is designed in from the start rather than layered on after.

0x020 · REGISTER / PROJECTS

An open-source
security pipeline.

Three interlocking AUTOSAR toolkits — detection, authentication, and event management — plus the cloud side that makes vehicle security events observable.

0x0100 C++

autosar-idsm-toolkit

AUTOSAR IdsM implementation with async event aggregation, SOC violation forwarding via HTTP, and a 39-test GoogleTest suite referencing SWS_IdM spec requirements.

  • IdsR_ReportType structs with namespaced event IDs (0x01xx CAN IDS, 0x02xx SecOC)
  • IIdsM_ReportingChannel abstraction — IPC and SOME/IP (vsomeip) implementations
  • IdsR forwarder with pluggable transports: MQTT, WebSocket, HTTP REST
  • 39 GoogleTest cases mapped directly to AUTOSAR SWS_IdM requirements
AUTOSARIdsM/IdsRSOME/IPMQTTC++
0x0101 C++

can-ids-toolkit

Whitelist-based CAN IDS with DLC validation and frequency monitoring, aligned with AUTOSAR IDS Protocol Specification — designed for HIL testing and bench validation.

  • Whitelist enforcement + DLC validation + message frequency monitoring
  • Aligned to AUTOSAR IDS Protocol Specification
  • Designed for HIL testing and bench validation environments
  • Feeds qualified security events into the IdsM pipeline
CANSocketCANIDSAUTOSARC++
0x0200 C++

secoc-can-toolkit

AUTOSAR SecOC simulator with OpenSSL AES-128-CMAC, freshness value management, and AUTOSAR C API (SecOc_Init, SecOc_Transmit) over Linux SocketCAN.

  • AES-128-CMAC MAC generation/verification via OpenSSL
  • Freshness value management per AUTOSAR SecOC profiles
  • AUTOSAR C API surface: SecOc_Init, SecOc_Transmit
  • Runs over Linux SocketCAN / vcan
SecOCAUTOSAROpenSSLSocketCANC++
0x0300 C

DoIP_ECU_Simulator

Full ISO 13400-2 DoIP ECU simulator with UDS service handling (ISO 14229), TLS extension, and unit + integration test suite.

  • Full ISO 13400-2 DoIP protocol implementation
  • UDS service handling per ISO 14229
  • TLS extension for secure diagnostic sessions
  • Unit and integration test suite included
DoIPUDSISO 13400TLSC
0x0400 Infra

SOC dashboard pipeline

Vehicle-to-cloud observability for security events: MQTT → Telegraf → InfluxDB → Grafana OSS, fully open-source licensed stack.

  • Telegraf ingestion shaped to the IdsR_ReportType schema
  • Grafana dashboards for fleet-level event correlation
  • All Apache-2.0/MIT components — safe for commercial/OEM contexts
GrafanaInfluxDBTelegrafMQTT
0x0500 Vue 3

Verso — resume builder

A full resume-building web app with a three-pane editor, live preview, PDF export, and a complete design system.

  • Vue 3 + Vite + Tailwind v4, deployed on Vercel with Bun-powered CI/CD
  • Drag-and-drop sections/entries, 15 section types, localStorage + adapter-based storage layer
  • GitHub Actions pipeline: lint → unit tests → Playwright E2E → deploy
Vue 3ViteTailwindCI/CD

0x030 · REGISTER / EXPERIENCE

Five years on
the bus.

Apr 2022 — Present Tokyo, Japan

Automotive Cybersecurity Engineer

Nissan Motor Co., Ltd. (on-site via TCS Japan)

  • Lead a ~10-engineer team delivering cybersecurity test development and validation for Central Gateway ECU across CAN, DoIP, SOME/IP, and Automotive Ethernet attack surfaces (ISO/SAE 21434).
  • Architected and developed C#-based test automation tooling — reduced manual validation effort by 90% across multiple vehicle programs.
  • Developed test scenarios and tools for AUTOSAR SecOC (AES-128-CMAC) and JASPAR MAC authentication over CAN — verifying message integrity between Gateway, Domain ECUs, and external ECUs.
  • Built end-to-end IDS pipeline validation tooling for AUTOSAR IDSM violation aggregation and IDSR off-board reporting via MQTTS/HTTPS.
  • Validated ECU bootstrap and certificate provisioning for GW, IVI, and IVC — covering TLS handshake, PKI certificate exchange, and secure key management.
  • Led CSMS demonstration to Japanese government regulators → supported UN-R155/WP.29 production approval for 6 vehicle lines (ICE, E-Power, EV).
  • Performed reverse engineering of ECU implementations to verify AUTOSAR IDS, JASPAR, and SecOC spec compliance; identified and resolved 5 critical vulnerabilities → 70% improvement in ECU security posture.
  • Conducted TARA for Domain ECU (MAC) and Central Gateway (IDS); produced threat models driving product security requirements.
Oct 2020 — Apr 2022 Pune, India

Security Technology Developer — Automotive Systems

Tata Consultancy Services (TCS)

  • Architected and implemented an ISO-15118 compliant EV charging communication system (C / Qt UI) with TLS mutual authentication and Plug & Charge (PnC) over PLC and Automotive Ethernet — demonstrated at CAR-ELE 2022.
  • Designed and developed a C#/CANoe-based CAN injection simulation tool and IDS meter-cluster visualization system to demonstrate Central Gateway IDS capabilities at CAR-ELE 2021.
  • Authored full technical documentation for both systems covering security architecture, protocol implementation, and test procedures — reviewed by OEM stakeholders.
  • Performed TARA of CAN signals and in-vehicle networks; developed ECU cybersecurity validation tooling.

0x040 · REGISTER / CAPABILITIES

The stack,
top to bottom.

0x01 · VEHICLE SECURITY

ISO/SAE 21434 · UN-R155 / WP.29 · TARA · AUTOSAR SecOC · AUTOSAR IdsM / IdsR · JASPAR MAC · TLS / PKI · Secure OTA · ECU Provisioning · Reverse Engineering

0x02 · PROTOCOLS & NETWORKS

CAN / CAN FD · SOME/IP · DoIP (ISO 13400) · UDS (ISO 14229) · Automotive Ethernet · ISO-15118 / PLC · MQTTS / HTTPS

0x03 · PLATFORMS & TOOLING

AUTOSAR Classic · Vector CANoe / CANalyzer · Linux / SocketCAN · Wireshark · FreeRTOS · Qt · CAPL · Git / SVN

0x04 · LANGUAGES

C / C++ · C# · Python · JavaScript / Vue 3 · CMake · GoogleTest · GitHub Actions · Grafana / InfluxDB

English (Native) / Japanese (Conversational)

0x0FF · REGISTER / CONTACT

Building SDV platforms?
Let's talk.

Open to Software-Defined Vehicle and embedded software roles — and always happy to compare notes on AUTOSAR security.

Email me LinkedIn GitHub