TY - GEN
T1 - SarA
T2 - 4th ACM Cyber-Physical System Security Workshop, CPSS 2018, co-located with ACM AsiaCCS 2018
AU - Monteuuis, Jean Philippe
AU - Boudguiga, Aymen
AU - Zhang, Jun
AU - Labiod, Houda
AU - Servel, Alain
AU - Urien, Pascal
N1 - Publisher Copyright:
© 2018 ACM.
PY - 2018/5/22
Y1 - 2018/5/22
N2 - Connected and automated vehicles aim to improve the comfort and the safety of the driver and passengers. To this end, car manufacturers continually improve actual standardized methods to ensure their customers safety, privacy, and vehicles security. However, these methods do not support fully autonomous vehicles, linkability and confusion threats. To address such gaps, we propose a systematic threat analysis and risk assessment framework, SARA, which comprises an improved threat model, a new attack method/asset map, the involvement of the attacker in the attack tree, and a new driving system observation metric. Finally, we demonstrate its feasibility in assessing risk with two use cases: Vehicle Tracking and Comfortable Emergency Brake Failure.
AB - Connected and automated vehicles aim to improve the comfort and the safety of the driver and passengers. To this end, car manufacturers continually improve actual standardized methods to ensure their customers safety, privacy, and vehicles security. However, these methods do not support fully autonomous vehicles, linkability and confusion threats. To address such gaps, we propose a systematic threat analysis and risk assessment framework, SARA, which comprises an improved threat model, a new attack method/asset map, the involvement of the attacker in the attack tree, and a new driving system observation metric. Finally, we demonstrate its feasibility in assessing risk with two use cases: Vehicle Tracking and Comfortable Emergency Brake Failure.
KW - Automotive security
KW - Risk assessment
KW - Security requirements
KW - Threat analysis
UR - https://www.scopus.com/pages/publications/85060444196
U2 - 10.1145/3198458.3198465
DO - 10.1145/3198458.3198465
M3 - Conference contribution
AN - SCOPUS:85060444196
T3 - CPSS 2018 - Proceedings of the 4th ACM Workshop on Cyber-Physical System Security, Co-located with ASIA CCS 2018
SP - 3
EP - 14
BT - CPSS 2018 - Proceedings of the 4th ACM Workshop on Cyber-Physical System Security, Co-located with ASIA CCS 2018
PB - Association for Computing Machinery, Inc
Y2 - 4 June 2018
ER -