Threat and Risk Assessment Methodologies in the Automotive Domain

Macher, Georg; Armengaud, Eric; Brenner, Eugen; Kreiner, Christian

doi:10.1016/j.procs.2016.04.268

Cited by 47 publications

(22 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Both disciplines focus on system-wide features and should be integrated into the development process from the initial phases and onwards. Safety engineering is already an integral part of automotive engineering and safety standards are well established in the automotive industry [6]. I will further describe the sensor in question, its functionality, but also a short interdisciplinary part between serial production and the R & D department.…”

Section: Methodology Of Researchmentioning

confidence: 99%

Engineering Risk of Series Production in Automotive Industry

Popa

2019

Management Systems in Production Engineering

View full text Add to dashboard Cite

The global objective of this paper is to analyze engineering risk of series production in Automotive Industries based on problems caused by supplied chain of products when a strong process to avoid engineering risk problems is missing. Automotive Industries Companies in Romania use just some theoretical tools like as D-FMEA (Design -Failure Mode and Effect Analysis) for engineering risk in their design products in ADAS domein. The main causes appear after the production starts and sometimes it brings the production to a halt. The risks reveal details of different levels and high risk can be caused by unforeseen challenges during of series production. On this paper, the method for engineering risk of management used is based on project management guide by Paul Roberts adapted to causes identification and risk plan.

show abstract

Section: Methodology Of Researchmentioning

confidence: 99%

Engineering Risk of Series Production in Automotive Industry

Popa

2019

Management Systems in Production Engineering

View full text Add to dashboard Cite

show abstract

“…The common risk assessment approaches try to list all the potential threats and assess their risks through the estimation of likelihood and impact. To prevent the possibility of overlooking potential attacks, many works apply systematic threat modelling techniques to the CAV system assets, which includes all the CAV components and communications [9][10][11].…”

Section: Background and Related Workmentioning

confidence: 99%

A simplified approach for dynamic security risk management in connected and autonomous vehicles

Le¹,

Maple²

2019

Living in the Internet of Things (IoT 2019)

View full text Add to dashboard Cite

show abstract

“…The perspectives of CIA (Confidentiality, Integrity, and Availability) of security are increasingly important in safetycritical systems and a security-for-safety paradigm is necessary when hazards originate from threats. A considerable amount of published work exists in this area, for example [47][48][49].…”

Section: Common Concepts Underlying Safety and Securitymentioning

confidence: 99%

A Comparative Study of JASO TP15002-Based Security Risk Assessment Methods for Connected Vehicle System Design

Kawanishi

Nishihara

Souma

et al. 2019

Security and Communication Networks

View full text Add to dashboard Cite

In recent years, much attention has been paid to autonomous vehicles and security threats on such vehicles have become an important issue. One of these examples is a command injection issue on a gateway ECU, which was reported in 2016. In order to mitigate these threats, the secure design of connected vehicle systems, which is done at the concept phase during development, has become increasingly important in industry. From this perspective, a security guideline such as JASO TP15002 which specifies two concrete methods, CRSS (CVSS Based Risk Scoring System) and RSMA (Risk Scoring Methodology for Automotive System), was made public in 2015. The latest work on the application of TP15002 to the ITU-T X.1373 standard was published in 2017. However, the risk assessment in this publication seems limited. It is not clear from this publication how systematically the risk assessment task in TP15002 can be performed at the implementation level. Another interesting question is how different methods affect the risk scores of connected vehicle systems. In this paper, we focus on the risk assessment phase in JASO TP15002. For a systematic risk assessment, we introduce an idea of asset container and propose to extend CRSS to a novel RSS (Risk Scoring System), RSS-CVSSv3, by appropriately replacing CVSSv2 vulnerability scoring system on which CRSS is based with CVSSv3. To address the above questions, we perform a comparative study on CRSS, RSMA, and RSS-CVSSv3 for multiple use cases such as a CGW (Central Gateway) and a drone, to examine the efficiency and usefulness of our methods. For this comparative purpose, we devise an interesting approach for the refinement of RSMA to the obstacles in comparing CRSS with RSMA.

show abstract

Threat and Risk Assessment Methodologies in the Automotive Domain

Cited by 47 publications

References 7 publications

Engineering Risk of Series Production in Automotive Industry

Engineering Risk of Series Production in Automotive Industry

A simplified approach for dynamic security risk management in connected and autonomous vehicles

A Comparative Study of JASO TP15002-Based Security Risk Assessment Methods for Connected Vehicle System Design

Contact Info

Product

Resources

About