학술논문

A Novel Scalable Hybrid Threat Analysis and Risk Assessment Engine for an Automotive Subsystem
Document Type
Conference
Source
2024 IEEE International Conference on Interdisciplinary Approaches in Technology and Management for Social Innovation (IATMSI) Interdisciplinary Approaches in Technology and Management for Social Innovation (IATMSI), 2024 IEEE International Conference on. 2:1-6 Mar, 2024
Subject
Communication, Networking and Broadcast Technologies
Components, Circuits, Devices and Systems
Computing and Processing
Engineered Materials, Dielectrics and Plasmas
Fields, Waves and Electromagnetics
Power, Energy and Industry Applications
Robotics and Control Systems
Signal Processing and Analysis
Transportation
Technological innovation
Supply chains
Ethernet
Software
User experience
Security
Risk management
TARA
Attack Surfaces
ASIL
AUTOSAR
Automotive Ethernet
Language
Abstract
Modern-day automobiles rely heavily on software capabilities to enhance user experience and comfort. With each passing day, the hardware and software complexity of these systems are rapidly growing. The advancement of driverless technologies and their dependency on software poses a major threat ie., the vulnerability of these systems to external bad agents, who look forward to compromising the system and extracting user-sensitive information or even taking control of these systems. Threat Analysis and Risk Assessment (TARA) systems play an important role in detecting these security loopholes and aid in finding solutions to such vulnerabilities. In this research, we present a novel engine for TARA, which is a lightweight tool, deployable across the automotive supply chain, conforms to AUTOSAR standards, is easy to use, and caters to the needs of modern-day needs of security in the automotive domain. Our experiments with this methodology proved that it could detect security issues of Ethernet, making it relevant to the era of Automotive Ethernet.