确保云辅助连接和自动驾驶汽车的安全:深入的威胁分析和风险评估
Al Tariq Sheik1, Carsten Maple1, Gregory Epiphaniou1
1Warwick Manufacturing Group (WMG), University of Warwick, Coventry CV4 7AL, UK.
Sensors (Basel, Switzerland)
|January 11, 2024
概括
这项研究增强了云辅助连接和自动驾驶汽车 (CCAV) 的威胁分析和风险评估 (TARA). 它完善了TARA的方法,以更好地识别复杂的CCAV系统中的漏洞和管理风险.
科学领域:
- 网络安全 网络安全
- 汽车工程 汽车工程
- 风险管理 风险管理
背景情况:
- 云辅助连接和自动驾驶汽车 (CCAV) 面临越来越多的网络攻击风险,因为威胁和复杂的系统不断发展.
- 现有的威胁分析和风险评估 (TARA) 方法在捕获CCAV特定威胁数据方面往往不足,导致效率下降.
- 诸如复杂的硬件-软件交互,快速的技术变化和多样化的标准等因素使CCAV安全性复杂化.
研究的目的:
- 系统地评估和增强TARA对CCAVs的方法.
- 在CCAV系统中提高识别漏洞,量化风险和定义威胁边界的精度.
- 开发一种新的防御分类学,并为增强安全工程提供先进的威胁分析信息.
主要方法:
- 对现有的TARA方法进行系统评估.
- 应用伪造,改,拒绝,信息披露,拒绝服务和特权升级 (STRIDE) 威胁模型.
- 利用损害,可重复性,可利用性,受影响的用户和可发现性 (DREAD) 进行风险评估.
- 开发一个攻击树和一个新的防御分类学.
主要成果:
- 在CCAV架构中确定了特定的漏洞和量化了相关风险.
- 证明了改进后的TARA在更精确地捕获安全要求,威胁和限制方面的更强效.
- 提供了一个结构化的方法来理解和减轻对硬件-软件资产的多阶段攻击.
结论:
- 拟议的TARA增强方案为CCAV提供了更精确,更有效的网络安全方法.
- 解决复杂的交互和新出现的漏洞对于强大的CCAV安全至关重要.
- 这项研究为网络物理CCAV系统中先进的威胁分析和风险管理提供了基础.
关键词:
攻击树攻击树自动驾驶汽车是自动驾驶的这是一个云云云.连接的车辆连接的车辆.采取反制措施的措施.网络安全 网络安全边缘计算是一种边缘计算.风险评估 风险评估 风险评估分类学 分类学.威胁分析,威胁分析.威胁建模威胁建模更多相关视频
07:49Automated Deployment of an Internet Protocol Telephony Service on Unmanned Aerial Vehicles Using Network Functions Virtualization
Published on: November 26, 2019
8.0K
11:18Using the Threat Probability Task to Assess Anxiety and Fear During Uncertain and Certain Threat
Published on: September 12, 2014
15.2K
相关概念视频
Manipulation and Analysis
26
GIS manipulation and analysis functions are vital for decision-making and planning. These activities range from data retrieval tasks, such as selecting information based on specific criteria, to advanced analytical techniques that address complex spatial problems.One critical GIS analysis method is overlaying, which combines multiple data layers to examine impacts. For example, overlaying a river-dammed lake boundary with road networks can identify affected infrastructure. Another common...
26
Issues And Trends In Healthcare Delivery System
5.6K
The issues and trends in healthcare delivery are constantly changing. The COVID-19 pandemic is one recent issue that wreaked havoc on healthcare systems, causing a shortage of healthcare workers, high demand for medicines and supplies, and increased medical expenditure due to a lack of insurance. Other issues include rising healthcare costs and care fragmentation.
Cost Containment
Payment for healthcare services has historically promoted adoption of costly and often unnecessary or inefficient...
Cost Containment
Payment for healthcare services has historically promoted adoption of costly and often unnecessary or inefficient...
5.6K
Quality Assurance
129
Quality assurance is the overarching term used to describe the activities employed to ensure the proper performance of a system. These activities can be classified into three categories: quality control, quality assessment, and internal corrective measures. Typically, these activities work cyclically: quality control is performed before and during the analysis, while quality assessment occurs during and after the investigation. Internal corrective measures are implemented based on the findings...
129
Design Example: Analyzing Capacity Contours for Flood Risk Assessment
47
Flood risk assessment involves careful planning and analysis to ensure the safety of communities near water retention structures. Capacity contours are a vital tool in this process, as they illustrate the potential spread of water at specific levels in a given area. In the context of building a bund across a small valley, these contours play a critical role in evaluating the safety of nearby residential areas.In this example, the bund is intended to store stormwater in the valley. The engineers...
47
Control Systems: Applications
615
Electrical engineering plays a pivotal role in our daily lives, with control systems at the heart of many applications, from home appliances to sophisticated space shuttles. Control systems manage and regulate the behavior of devices and processes, ensuring they function safely, correctly, and efficiently.
In modern vehicles, control systems manage various functions to enhance performance and safety. The steering wheel and accelerator are primary inputs in a car's control system. The...
In modern vehicles, control systems manage various functions to enhance performance and safety. The steering wheel and accelerator are primary inputs in a car's control system. The...
615
PD Controller: Design
234
In automotive engineering, car suspension systems often employ Proportional Derivative (PD) controllers to enhance performance. PD controllers are utilized to adjust the damping force in response to road conditions. A controller, acting as an amplifier with a constant gain, demonstrates proportional control, with output directly mirroring input.
Designing a continuous-data controller requires selecting and linking components like adders and integrators, which are fundamental in Proportional,...
Designing a continuous-data controller requires selecting and linking components like adders and integrators, which are fundamental in Proportional,...
234
