The process of hazard analysis and risk assessment (H&R or HARA) is well-established in standards and methods for functional safety, such as the automotive functional safety standard ISO 26262. Considering the parallel discipline of cyber security, it is necessary to establish an analogous process of threat analysis and risk assessment (T&R) in order to identify potential security attacks and the risk associated with these attacks if they were successful.While functional safety H&R processes could be used for threat analysis, these methods need extension and adaptation to the cyber security domain. This paper describes how such a method has been developed based on the approach described in ISO 26262 and the related MISRA Safety Analysis Guidelines. In particular key differences are described in the understanding of the severity of a security attack, and the factors that contribute to the probability of a successful attack. However it also acknowledges that some threats may contribute to a safety-relevant hazard.The paper will also explore some potential future directions, such as how the T&R can be used to support an assurance case for cyber security.


    Zugriff

    Zugriff prüfen

    Verfügbarkeit in meiner Bibliothek prüfen

    Bestellung bei Subito €


    Exportieren, teilen und zitieren



    Titel :

    Threat Analysis and Risk Assessment in Automotive Cyber Security


    Weitere Titelangaben:

    Sae International Journal of Passenger Cars- Electronic and Electrical Systems
    Sae Int. J. Passeng. Cars – Electron. Electr. Syst


    Beteiligte:
    Ruddle, Alastair (Autor:in) / Ward, David (Autor:in) / Ibarra, Ireri (Autor:in)

    Kongress:

    SAE 2013 World Congress & Exhibition ; 2013



    Erscheinungsdatum :

    2013-04-08


    Format / Umfang :

    7 pages




    Medientyp :

    Aufsatz (Konferenz)


    Format :

    Print


    Sprache :

    Englisch




    GNSS Threat Identification and Mitigation, Cyber-Security aspects in Automotive Scenarios

    Gianni, Carmine / Giordano, Rosario / Pitolli, Gregorio et al. | IEEE | 2023


    Security Threat Analysis of Automotive Infotainment Systems

    Takahashi, Junko / Iwamura, Makoto / Tanaka, Masashi | IEEE | 2020


    Automotive Cyber Security Best Practices

    Springer India-New Delhi | Springer Verlag | 2016


    Cyber threat panel

    Vout, Paul | IEEE | 2012


    Cyber Threat Risk Assessment of Uplink and Commanding System for Mission Operation

    Ko, Adans / Faris, Grant B. / Tan, Kymie et al. | AIAA | 2014