Resilient Shield: Reinforcing the Resilience of Vehicles Against Security Threats
Paper i proceeding, 2021

Vehicles have become complex computer systems with multiple communication interfaces. In the future, vehicles will have even more connections to e.g., infrastructure, pedestrian smartphones, cloud, road-side-units and the Internet. External and physical interfaces, as well as internal communication buses have shown to have potential to be exploited for attack purposes. As a consequence, there is an increase in regulations which demand compliance with vehicle cyber resilience requirements. However, there is currently no clear guidance on how to comply with these regulations from a technical perspective.To address this issue, we have performed a comprehensive threat and risk analysis based on published attacks against vehicles from the past 10 years, from which we further derive necessary security and resilience techniques. The work is done using the SPMT methodology where we identify vital vehicle assets, threat actors, their motivations and objectives, and develop a comprehensive threat model. Moreover, we develop a comprehensive attack model by analyzing the identified threats and attacks. These attacks are filtered and categorized based on attack type, probability, and consequence criteria. Additionally, we perform an exhaustive mapping between asset, attack, threat actor, threat category, and required mitigation mechanism for each attack, resulting in a presentation of a secure and resilient vehicle design. Ultimately, we present the Resilient Shield a novel and imperative framework to justify and ensure security and resilience within the automotive domain.

cyber resilience

vehicular systems

security

automotive systems

Författare

Kim Strandberg

Chalmers, Data- och informationsteknik, Nätverk och system

Thomas Rosenstatter

Chalmers, Data- och informationsteknik, Nätverk och system

Rodi Jolak

Chalmers, Data- och informationsteknik, Software Engineering, Software Engineering for Cyber Physical Systems

Nasser Nowdehi

Chalmers, Data- och informationsteknik, Nätverk och system

Tomas Olovsson

Chalmers, Data- och informationsteknik, Nätverk och system

IEEE Vehicular Technology Conference

15502252 (ISSN)

1-7

2021 IEEE 93rd Vehicular Technology Conference (VTC2021-Spring)
, ,

Datasäkerhet för fordonssystem i en föränderlig miljö (CyReV fas 2)

VINNOVA (2019-03071), 2019-01-10 -- 2022-03-31.

Ämneskategorier

Datorsystem

DOI

10.1109/VTC2021-Spring51267.2021.9449029

Mer information

Senast uppdaterat

2021-06-21