Connected cars — Threats, vulnerabilities and their impact

Strobl, Stefanie; Hofbauer, David; Schmittner, Christoph; Maksuti, Silia; Tauber, Markus; Delsing, Jerker

doi:10.1109/icphys.2018.8387687

Cited by 12 publications

(2 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Research regarding threat modeling in the mobility domain has been carried out in [20]. There, components are modeled for a scenario of connected cars, which are then used to derive a threat and vulnerability catalogue.…”

Section: Threat Modelingmentioning

confidence: 99%

Threat Modeling in the Railway Domain

Schmittner

Tummeltshammer

Hofbauer

et al. 2019

Lecture Notes in Computer Science

Self Cite

View full text Add to dashboard Cite

Connected and intelligent railway technologies like the European Rail Traffic Management System (ERTMS) introduce new risks in cybersecurity. Threat modeling is a building block in security engineering that identifies potential threats in order to define corresponding mitigation. In this paper, we show how to conduct threat modeling for railway security analysis during a development life cycle based on IEC 62443. We propose a practical and efficient approach to threat modeling, extending existing tool support and demonstrating its applicability and feasibility.

show abstract

Section: Threat Modelingmentioning

confidence: 99%

Threat Modeling in the Railway Domain

Schmittner

Tummeltshammer

Hofbauer

et al. 2019

Lecture Notes in Computer Science

Self Cite

View full text Add to dashboard Cite

show abstract

“…3,4 Recent evaluations and disclosures presented multiple vulnerabilities in almost all connected elements in current vehicles. [5][6][7] With the nearly 112 million vehicles now connected around the world potentially at risk from some form of cyber threat, the global market for automotive cybersecurity is expected to exponentially grow to USD 759 million by 2023. 8 Cybersecurity dramatically impacts the safety of automotive systems, their connected control functions, and vehicle fleet management.…”

Section: Introductionmentioning

confidence: 99%

Towards a security‐driven automotive development lifecycle

Dobaj

Macher

Ekert³

et al. 2021

J Software Evolu Process

View full text Add to dashboard Cite

Cybersecurity has become one of the most crucial challenges in the automotive development lifecycle. The upcoming ISO/SAE 21434 standard provides only a generic framework that is insufficient to derive concrete design methods. This article proposes an actionable cybersecurity development lifecycle model that provides concrete action and work product guidance aligned with the ISO/SAE 21434 and Automotive SPICE® extension for cybersecurity. The model has been inspired by action research in “next” industry practice pilot projects, which ensures that it is actionable. It has been augmented by insights gained from literature research in cybersecurity development for embedded systems. The proposed lifecycle model complements the ISO/SAE 21434 standard and provides the basis for the company‐specific process and practice specifications. It has been validated through the integration of cybersecurity‐related aspects in an electric power steering system. A core characteristic of the model is the central role of threat modeling, vulnerability analyses, and cybersecurity requirements derivation on both system and subsystem levels. Without concrete practice guidelines, the ISO/SAE 21434 is very difficult to understand and apply at this stage. This contribution aims to fill this gap through a model inspired by cutting‐edge embedded cybersecurity practices interpreted for the current and near‐future automotive electronic architectures.

show abstract

An Open Software-Based Framework for Automotive Cybersecurity Testing

Faschang,

Macher

2023

Communications in Computer and Information Science

View full text Add to dashboard Cite

Connected cars — Threats, vulnerabilities and their impact

Cited by 12 publications

References 10 publications

Threat Modeling in the Railway Domain

Threat Modeling in the Railway Domain

Towards a security‐driven automotive development lifecycle

An Open Software-Based Framework for Automotive Cybersecurity Testing

Contact Info

Product

Resources

About