Cybersecurity for automotive systems is challenging, and one of the major challenges is how to measure this specific system property. With the increased need for cybersecurity in automotive systems due to the development of more advanced technologies and corresponding increased threat vectors, coupled with the upcoming International Organization for Standardization and the Society for Automotive Engineers (ISO/SAE) 21434 cybersecurity standard for automotive systems and cybersecurity regulations in The United Nations Economic Commission for Europe World Forum for Harmonization of Vehicle Regulations (UNECE WP.29), it is becoming increasingly important for auto manufacturers and suppliers to have a clear and common understanding and agreement of cybersecurity metrics for the development and deployment of vehicles. The main contribution of this article is the contextualization of existing metrics from literature and mapping out how they may fit within a standardized framework. We highlight the challenges to create awareness around the lack of common understanding and outline the first potential steps towards a consensus. For example, one can consider assurance levels as a form of metric. Since guarantees of security are not possible, verification and validation methods such as various forms of testing can be used to give an assurance of security. For the automotive industry, there are discussions around cybersecurity assurance levels (CALs), which are outlined in an informative annex in the ISO/SAE 21434 draft standard. The CAL values are used to indicate subsequently the increasing scope, extent, and depth of assurance activities to be performed to achieve that level of assurance. A common understanding of the answer to “how much cybersecurity is enough?” will inspire greater confidence in practitioners who design and test the technical measures, in the industry as regards a balanced approach to cybersecurity and ultimately, in consumers who need to know that the products that they buy will be safe and secure.


    Access

    Check access

    Check availability in my library

    Order at Subito €


    Export, share and cite



    Title :

    Cybersecurity Metrics for Automotive Systems


    Additional title:

    Sae Int. J. Transp. Cyber. and Privacy


    Contributors:

    Conference:

    SAE WCX Digital Summit ; 2021



    Publication date :

    2021-04-06


    Size :

    13 pages




    Type of media :

    Conference paper


    Type of material :

    Print


    Language :

    English




    Cybersecurity Metrics for Automotive Systems

    Cheah, Madeline / Oka, Dennis Kengo | British Library Conference Proceedings | 2021


    Automotive cybersecurity

    GALULA YARON / BEN NOON OFER / LAVI ORON | European Patent Office | 2020

    Free access

    Automotive Cybersecurity

    Jadhav, Ashish | Springer Verlag | 2021


    AUTOMOTIVE CYBERSECURITY

    GALULA YARON / BEN NOON OFER / LAVI ORON | European Patent Office | 2019

    Free access