Resilient Shield: Reinforcing the Resilience of Vehicles Against Security Threats
Paper in proceeding, 2021

Vehicles have become complex computer systems with multiple communication interfaces. In the future, vehicles will have even more connections to e.g., infrastructure, pedestrian smartphones, cloud, road-side-units and the Internet. External and physical interfaces, as well as internal communication buses have shown to have potential to be exploited for attack purposes. As a consequence, there is an increase in regulations which demand compliance with vehicle cyber resilience requirements. However, there is currently no clear guidance on how to comply with these regulations from a technical perspective.To address this issue, we have performed a comprehensive threat and risk analysis based on published attacks against vehicles from the past 10 years, from which we further derive necessary security and resilience techniques. The work is done using the SPMT methodology where we identify vital vehicle assets, threat actors, their motivations and objectives, and develop a comprehensive threat model. Moreover, we develop a comprehensive attack model by analyzing the identified threats and attacks. These attacks are filtered and categorized based on attack type, probability, and consequence criteria. Additionally, we perform an exhaustive mapping between asset, attack, threat actor, threat category, and required mitigation mechanism for each attack, resulting in a presentation of a secure and resilient vehicle design. Ultimately, we present the Resilient Shield a novel and imperative framework to justify and ensure security and resilience within the automotive domain.

cyber resilience

security

vehicular systems

automotive systems

Author

Kim Strandberg

Volvo Cars

Chalmers, Computer Science and Engineering (Chalmers), Networks and Systems (Chalmers)

Thomas Rosenstatter

Chalmers, Computer Science and Engineering (Chalmers), Networks and Systems (Chalmers)

Rodi Jolak

University of Gothenburg

Nasser Nowdehi

Volvo Cars

Tomas Olovsson

Chalmers, Computer Science and Engineering (Chalmers), Networks and Systems (Chalmers)

IEEE Vehicular Technology Conference

15502252 (ISSN)

Vol. 2021-April 9449029

2021 IEEE 93rd Vehicular Technology Conference (VTC2021-Spring)
Online, ,

Cyber Resilience for Vehicles - Cybersecurity for automotive systems in a changing environment (CyReV phase 2)

VINNOVA (2019-03071), 2019-01-10 -- 2022-03-31.

Subject Categories

Computer Systems

DOI

10.1109/VTC2021-Spring51267.2021.9449029

More information

Latest update

9/24/2021