Information Security Risk Management of Vehicles

2018-01-0015

04/03/2018

Features
Event
WCX World Congress Experience
Authors Abstract
Content
The results of this work is allowed to identify a number of cybersecurity threats of the automated security-critical automotive systems, which reduces the efficiency of operation, road safety and system safety. Wired or wireless access of the information networks of the modern vehicles allows to gain control over power unit, chassis, security system components and comfort systems.
According to the evaluating criterion of board electronics, the presence of poorly-protected communication channels, the 75% of the researched modern vehicles do not meet the minimum requirements of cybersecurity due to the danger of external blocking of vital systems. The revealed vulnerabilities of the security-critical automotive systems lead to the necessity of developing methods for mechanical and electronic protection of the modern vehicle.
The law of normal distribution of the mid-points of the expert evaluation of the cyber-security of a modern vehicle has been determined. Based on the system approach, ranking of the main cybersecurity treats is performed. Electronic body systems of modern vehicles are the most likely to be damaged by intruders, which can lead to the vehicle theft.
Using the complex of safety criteria of modern vehicles, the probability and possible consequences of risks in the interception of the control of vehicles are determined.
The obtained results can be used at the stages of production and operation of the vehicles with the aim to improve cybersecurity, road safety and system safety as a whole taking into account its life-cycle management.
Meta TagsDetails
DOI
https://doi.org/10.4271/2018-01-0015
Pages
11
Citation
Klets, D., Gritsuk, I., Makovetskyi, A., Bulgakov, N. et al., "Information Security Risk Management of Vehicles," SAE Technical Paper 2018-01-0015, 2018, https://doi.org/10.4271/2018-01-0015.
Additional Details
Publisher
Published
Apr 3, 2018
Product Code
2018-01-0015
Content Type
Technical Paper
Language
English