Autonomous Vehicle Ecosystem Security: Utilizing Autonomous Vehicle Security-Level Checks through Analytic Hierarchy Process
Source abstract
Abstract
This study aimed to strengthen the security of autonomous vehicles by analyzing the current status of autonomous vehicle security, such as autonomous vehicle features, security threats, and compliance, and deriving security-level check items. Based on this, the relative importance could be obtained by applying it to the AHP (Analytic Hierarchy Process) model. The results of the empirical analysis showed that the order of priority was the establishment/implementation of a cybersecurity management system, encryption, and risk assessment. The significance of this study is that by deriving security-level check items related to autonomous vehicles and verifying the research model, we can reduce cyber security accidents that can cause loss of life and improve the level of autonomous vehicle security management of related companies. Additionally, by applying AHP evaluated by security experts to the autonomous vehicle field for the first time, it will contribute to the market expansion of the autonomous vehicle industry, which is concerned with security. Furthermore, major automobile companies have to manage the security levels of numerous tier companies due to the nature of the industry. Therefore, if they perform a Quick Check (QC) considering the relative importance of the autonomous vehicle security-level check items presented in this paper, they will be able to effectively identify the security levels of tier companies early.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Vehicular Ad Hoc Networks (VANETs) · Autonomous Vehicle Technology and Safety · Traffic control and management
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
School of Cybersecurity, Osan University, Osan 18119, Republic of Korea
Interdisciplinary Program of Digital Future Convergence Service, Chonnam National University, 77, Yongbong-ro, Buk-gu, Gwangju 500-757, Republic of Korea
Funding
Korea government (MSIT) · MSIT
References (59)
Show source-provided references
1. (2024, January 10). Autonomous Vehicle Market. Available online: https://finance.yahoo.com/news/autonomous-vehicle-market-projected-reach-005800485.html?guccounter=1.
2. Upstream (2024). Upstream Security Global Automotive Cybersecurity Report 2024, Upstream Security Ltd.
3. Miller, C., and Valasek, C. (2015, January 1–6). Remote exploitation of an unaltered passenger vehicle. Proceedings of the Black Hat USA 2015, Las Vegas, NV, USA.
4. (2024, January 10). Hackers breach Tesla Model 3’s Infotainment System in Minutes in Competition. Available online: https://ca.news.yahoo.com/hackers-breach-tesla-model-3s-131300278.html.
5. Conceptualizing the key features of cyber-physical systems in a multi-layered representation for safety and security analysis10.1002/sys.21509 ↗
6. Cyber security attacks to modern vehicular systems
7. Cybersecurity for autonomous vehicles: Review of attacks and defense10.1016/j.cose.2020.102150 ↗
8. (2024, January 10). UN Regulations on Cybersecurity. Available online: https://unece.org/sustainable-development/press/un-regulations-cybersecurity-and-software-updates-pave-way-mass-roll.
9. (2024, January 10). Three Landmark UN Vehicle Regulations Enter into Force. Available online: https://unece.org/sustainable-development/press/three-landmark-un-vehicle-regulations-enter-force.
10. (2024, January 10). Increased Automotive Data Use Raises Privacy, Security Concerns. Available online: https://semiengineering.com/increased-automotive-data-use-raises-privacy-security-concerns/.
11. (2024, January 10). Self-Driving. Available online: https://www.oxfordlearnersdictionaries.com/definition/english/self-driving?q=self-driving.
12. (2024, May 22). Automated Vehicles Act 2024, Available online: https://www.legislation.gov.uk/ukpga/2024/10/enacted.
13. Security of self-driving car from the point of view of in-vehicle system10.7467/KSAE.2018.26.2.240 ↗
14. Vehicular Edge Computing and Networking: A Survey10.1007/s11036-020-01624-1 ↗
15. Maple, C., Bradbury, M., Le, A., and Ghirardello, K. (2019). A Connected and Autonomous Vehicle Reference Architecture for Attack Surface Analysis. Appl. Sci., 9.10.3390/app9235101 ↗
16. Rask, E., Auld, J., and Bush, B. (2020). SMART Mobility Connected and Automated Vehicles Capstone Report.10.2172/1656706 ↗
17. SW technology trends related to autonomous vehicles
18. TSP Security in Intelligent and Connected Vehicles: Challenges and Solutions10.1109/MWC.2019.1800289 ↗
19. Remote attacks on automated vehicles sensors: Experiments on camera and lidar
20. Security Trends for Autonomous Driving Vehicle
21. Lee, H., Choi, K., Chung, K., Kim, J., and Yim, K. (2015, January 24–27). Fuzzing CAN Packets into Automobiles. Proceedings of the IEEE 29th International Conference on Advanced Information Networking and Applications, Gwangju, Korea.10.1109/AINA.2015.274 ↗
22. Milburn, A., Timmers, N., Wiersma, N., Pareja, R., and Cordoba, S. (2018, January 8–9). There will be glitches: Extracting and analyzing automotive firmware efficiently. Proceedings of the Black Hat USA, Las Vegas, NV, USA.
23. Enhancement of Automotive Penetration Testing with Threat Analyses Results10.4271/11-01-02-0005 ↗
24. Zachos, M., and Subke, P. (2020, January 21–23). Test Method for the SAE J3138 Automotive Cyber Security Standard. Proceedings of the WCX SAE World Congress, Detroit, MI, USA.10.4271/2020-01-0142 ↗
25. Abbott-McCune, S., and Shay, L.A. (2016, January 24–27). Techniques in hacking and simulating a modem automotive controller area network. Proceedings of the IEEE International Carnahan Conference on Security Technology (ICCST), Orlando, FL, USA.10.1109/CCST.2016.7815712 ↗
26. A Practical Wireless Attack on the Connected Car and Security Protocol for In-Vehicle CAN
27. He, K., Qin, K., Wang, C., and Fang, X. (2020, January 17–19). Research on Cyber Security Test Method for GNSS of Intelligent Connected Vehicle. Proceedings of the International Conference on Computer Information and Big Data Applications (CIBDA), Guiyang, China.10.1109/CIBDA50819.2020.00052 ↗
28. Penetration Testing for Automotive Cybersecurity10.1007/s38314-021-0629-4 ↗
29. Towards a systematic security evaluation of the automotive Bluetooth interface
30. Mazloom, S., Rezaeirad, M., Hunter, A., and McCoy, D. (2016, January 8–9). A Security Analysis of an In-Vehicle Infotainment and App Platform. Proceedings of the 10th USENIX Workshop on Offensive Technologies (WOOT 16), Austin, TX, USA.
31. Nie, S., Liu, L., and Du, Y. (2017, January 22–25). Free-fall: Hacking tesla from wireless to can bus. Proceedings of the Black Hat USA, Las Vegas, NV, USA.
32. Fowler, D.S., Bryans, J., Cheah, M., Wooderson, P., and Shaikh, S.A. (2019, January 22–26). A Method for Constructing Automotive Cybersecurity Tests, a CAN Fuzz Testing Example. Proceedings of the IEEE 19th International Conference on Software Quality, Reliability and Security Companion (QRS-C), Sofia, Bulgaria.10.1109/QRS-C.2019.00015 ↗
33. A Study on the Vulnerability and Security Considerations of Autonomous Vehicles
34. Kexun, H., Changyuan, W., Yanyan, H., and Xiyu, F. (2020, January 12–14). Research on cyber security Technology and Test Method of OTA for Intelligent Connected Vehicle. Proceedings of the International Conference on Big Data, Artificial Intelligence and Internet of Things Engineering (ICBAIE), Fuzhou, China.10.1109/ICBAIE49996.2020.00048 ↗
35. Wen, H., Chen, Q.A., and Lin, Z. (2020, January 12–14). Plug-N-Pwned: Comprehensive Vulnerability Analysis of OBD-II Dongles as A New Over-the-Air Attack Surface in Automotive IoT. Proceedings of the 29th USENIX Security Symposium (USENIX Security 20), Boston, MA, USA.
36. Patki, P., Gotkhindikar, A., and Mane, S. (2018, January 16–18). Intelligent Fuzz Testing Framework for Finding Hidden Vulnerabilities in Automotive Environment. Proceedings of the Fourth International Conference on Computing Communication Control and Automation (ICCUBEA), Pune, India.10.1109/ICCUBEA.2018.8697438 ↗
37. Bayer, S., Enderle, T., Oka, D.K., and Wolf, M. (2014, January 20–22). Security crash test—Practical security evaluations of automotive onboard IT components. Proceedings of the 6th Automotive “Safety and Security 2014”, Stuttgart, Germany.
38. (2021). UN Regulation No. 155-Cyber Security and Cyber Security Management System (Standard No. WP.29 R155).
39. (2021). Road Vehicles—Cybersecurity Engineering. ISO/TC 22/SC 32 Electrical and Electronic Components and General System Aspects (Standard No. ISO/SAE 21434:2021).
40. (2024, January 10). Smart Transportation Cybersecurity Guide. Available online: https://www.kisa.or.kr/2060205/form?postSeq=5&lang_type=KO&page=2.
41. (2024, January 10). Automated Vehicles 4.0, Available online: https://www.transportation.gov/policy-initiatives/automated-vehicles/av-40.
42. The German Act on Autonomous Driving: Why Ethics Still Matters10.1007/s13347-022-00526-2 ↗
43. (2024, May 22). Self-Driving Vehicles Set to Be on Roads by 2026, Available online: https://www.gov.uk/government/news/self-driving-vehicles-set-to-be-on-roads-by-2026-as-automated-vehicles-act-becomes-law.
44. A Systematic Mapping Study on Security Countermeasures of In-Vehicle Communication Systems
45. Autonomous Vehicle Security Threats and Technology Trends
46. Li, Y., Liu, W., Liu, Q., Zheng, X., Sun, K., and Huang, C. (2024). Complying with ISO 26262 and ISO/SAE 21434: A Safety and Security Co-Analysis Method for Intelligent Connected Vehicle. Sensors, 24.10.3390/s24061848 ↗
47. A Survey on Attack Detection and Resilience for Connected and Automated Vehicles: From Vehicle Dynamics and Control Perspective10.1109/TIV.2022.3186897 ↗
48. Attacks and defences on intelligent connected vehicles: A survey10.1016/j.dcan.2020.04.007 ↗
49. Cyberattacks and countermeasures for in-vehicle networks10.1145/3431233 ↗
50. A Survey on Security Attacks and Defense Techniques for Connected and Autonomous Vehicles10.1016/j.cose.2021.102269 ↗
51. A Survey on Cyber-Security of Connected and Autonomous Vehicles (CAVs)10.1109/TITS.2021.3085297 ↗
52. Sommer, F., Dürrwang, J., and Kriesten, R. (2019). Survey and Classification of Automotive Security Attacks. Information, 10.10.3390/info10040148 ↗
53. An Investigation of Cyber-Attacks and Security Mechanisms for Connected and Autonomous Vehicles10.1109/ACCESS.2023.3307473 ↗
54. Arai, K., Kapoor, S., and Bhatia, R. (2020). Network Security Monitoring in Automotive Domain. Advances in Information and Communication, Springer International Publishing.
55. Autonomous Vehicle Security Trends
56. Kim, Y. (2020). A Proposal for Improvement of Safety by Commercialization of Autonomous Vehicles. [Master’s Thesis, Sungkyunkwan University].
57. Aravind, G., Nambiar, S., and Krishnan, M.B.M. (2023, January 5–6). Autonomous Vehicle Security Enhancement. Proceedings of the 2023 International Conference on Networking and Communications (ICNWC), Chennai, India.10.1109/ICNWC57852.2023.10127538 ↗
58. Data Generation and Verification for Development of DoS Attack Detection Model in V2V Communication Environment
59. Axiomatic foundation of the Analytic Hierarchy Process10.1287/mnsc.32.7.841 ↗