Information Security Compliance over Intelligent Transport Systems: Is IT Possible?

Abstract

e automotive industry has used emerging technological concepts to transform automobiles into sophisticated cyber platforms. However, this extended technological evolution hides multiple security risks capable of a ecting both the intelligent transportation domain and human life itself.E very government takes advantage of cooperation between industrial and technological domains to achieve social and economic prosperity. e automotive industry's use of information and communications technology (ICT), for example, has triggered the evolution of the global phenomenon known today as intelligent transport systems (ITSs; h p://sites.ieee .org/itss). Any disruption or disconnection in modern transport operations makes the entire ITS structure vulnerable at every level architectural, national, regional, global, physical, cyber, and human. Unfortunately, cyberthreats and a acks are a spreading menace for all critical infrastructure (CI), including the ITS domain. 1 us, ITS safety and security are major concerns when selecting security management (SM) frameworks to apply in the delicate yet complex cyber environment, in which robustness against a acks must be ensured. However, SM and critical infrastructure protection (CIP) standards and frameworks don't adequately address the various cascading e ects associated with modern ITS security incidents. More speci cally, existing security standards, methodologies, and tools don't explicitly cover the rapidly developed ITS environment or address its speci c large-scale requirements. Consequently, cyberthreats and a acks can't be fully identied, which means malicious actions can't be prevented, thereby creating critical ITS security gaps. We seek to raise awareness of cybersecurity issues and concerns in the ITS arena by presenting an extensive threat analysis of the ITS environment. Vulnerabilities and the E orts to Counter eme ITS environment consists of multiple heterogeneous and complex layers of physical infrastructures (highways, roads, platforms, vehicles, and buildings), IT infrastructures (hardware equipment, ITS stations, onboard/roadside units, and nomadic devices), communication systems (networks and transmissions), ITS services and applications (cooperative and safety), and users (drivers, passengers, administrators, and security o cers or managers).To provide intelligent and real-time services in such a highly mobile environment, the ITS domain collects, processes, and returns data from all participating entities, forcing the in-vehicle network architecture used for data exchange among the electronic control units (ECUs) to evolve accordingly. Until recently, there was no need to secure automotive buses: they weren't connected to the user domain or the vehicle's exterior, so the ITS domain wasn't fully connected (and therefore vulnerable). But as technology evolves, so do threats and vulnerabilities, in spite of the countermeasures applied by ITS architects, security experts, manufacturers, and vendors. Consequently, in less than a decade, numerous security breaches ha...

Cybersecurity capabilities for critical infrastructure resilience

“…Many of the cybersecurity tools and techniques, processes and procedures to identify and assess security vulnerabilities have been developed over the years (Dellios et al , 2015). Some of these are defined in familiar information and cyber security frameworks, standards and guidelines, such as COBIT and ISO 27001 (Baskerville et al , 2014).…”

İnformasi̇ya Təhlükəsi̇zli̇yi̇ Mi̇lli̇ Təhlükəsi̇zli̇yi̇n Mühüm Komponenti̇ Ki̇mi̇

“…Nəqliyyat sistemində İKT-nin tətbiqi ilə reallaşdırılan bütün proseslər infrastruktur obyektləri, nəqliyyat vasitələri, bu sistemdə dövr edən informasiya, o cümlədən fiziki poçt məlumatları informasiya təhlükəsizliyinin obyektinə çevrilir [68].…”

External Monitoring Changes in Vehicle Hardware Profiles: Enhancing Automotive Cyber-Security

“…A more private solution for vehicle EDRs has recently been introduced in [64], exploiting the properties of timed release encryption. Unfortunately, this fragmented landscape extends even further since existing security standards, methodologies, and tools don't explicitly cover the rapidly developed automotive and ITS environment or address its specific requirements, as indicated by Dellios et al [24].…”