ISO/SAE 21434-Based Risk Assessment of Security Incidents in Automated Road Vehicles

Püllen, Dominik; Liske, Jonas; Katzenbeisser, Stefan

doi:10.1007/978-3-030-83903-1_6

Cited by 5 publications

(1 citation statement)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…We plan to expand these experiments to encompass more components within the EV charging ecosystem, such as the OCPP-related attacks and more advanced cloud-based attacks. Future expansion of this study will also include performing an ISO/SAE 21434-compliant Threat Analysis and Risk Assessment (TARA) on the system at hand [23].…”

Section: Discussionmentioning

confidence: 99%

Untitled

2024

IJCSIT

View full text Add to dashboard Cite

The security of Electric Vehicle (EV) charging has gained momentum after the increase in the EV adoption in the past few years. Mobile applications have been integrated into EV charging systems that mainly use a cloud-based platform to host their services and data. Like many complex systems, cloud systems are susceptible to cyberattacks if proper measures are not taken by the organization to secure them. In this paper, we explore the security of key components in the EV charging infrastructure, including the mobile application and its cloud service. We conducted an experiment that initiated a Man in the Middle attack between an EV app and its cloud services. Our results showed that it is possible to launch attacks against the connected infrastructure by taking advantage of vulnerabilities that may have substantial economic and operational ramifications on the EV charging ecosystem. We conclude by providing mitigation suggestions and future research directions.

show abstract

Section: Discussionmentioning

confidence: 99%

Untitled

2024

IJCSIT

View full text Add to dashboard Cite

show abstract

Secure by Design Autonomous Emergency Braking Systems in Accordance with ISO 21434

Berdich,

Groza

2023

Machine Learning and Optimization Techniques for Automotive Cyber-Physical Systems

View full text Add to dashboard Cite

Blockchain integration for in-vehicle CAN bus intrusion detection systems with ISO/SAE 21434 compliant reporting

Andreica,

Musuroi,

Anistoroaei

et al. 2024

Sci Rep

View full text Add to dashboard Cite

The development of Intrusion Detection Systems (IDS) for in-vehicle buses has gained a lot of momentum in recent years as the number of reported vulnerabilities and the degree of interconnectivity for modern vehicles are on the rise. Since intrusion detection is resource consuming, it can be performed on computationally capable Android head units that are now present inside vehicles. Moreover, these units are connected to the internet, which enables the use of more complex algorithms that run in cloud environments. In this work we develop one such approach: an IDS that consists of a locally installed copy, running on head units, and a centralized instance of it that runs in the cloud and monitors traffic for groups of similar vehicles. Additionally, the centralized instance is part of a cloud service for intrusion detection which is continuously updated with the most recent types of attacks. The classification results of the cloud-based service are further analyzed by an incident response team which confirms the presence of known attacks, analyzes new types of attacks and assesses their impact. The output of this activity is stored on the Blockchain as ISO/SAE 21434 compliant reports, ensuring the transparency and traceability of the reported incidents.

show abstract

ISO/SAE 21434-Based Risk Assessment of Security Incidents in Automated Road Vehicles

Cited by 5 publications

References 12 publications

Untitled

Untitled

Secure by Design Autonomous Emergency Braking Systems in Accordance with ISO 21434

Blockchain integration for in-vehicle CAN bus intrusion detection systems with ISO/SAE 21434 compliant reporting

Contact Info

Product

Resources

About