Attack Surface Assessment for Cybersecurity Engineering in the Automotive Domain

• Main Authors: Plappert, Christian, Zelle, Daniel, Gadacz, Henry, Rieke, Roland, Scheuermann, Dirk, Kraus, Christoph
• Format: Conference Proceeding
• Language: English
• Subjects: attack feasibility rating; Automobiles; Automotive engineering; automotive security; AUTOSAR; Computer security; connected car; cybersecurity engineering; ISO 15118; ISO/SAE 21434; risk analysis; Risk management; road vehicles; Surface treatment; threat analysis and risk assessment (TARA); threat mitigation and resilience
• ISSN: 2377-5750
• DOI: 10.1109/PDP52278.2021.00050

Connected smart cars enable new attacks that may have serious consequences. Thus, the development of new cars must follow a cybersecurity engineering process as defined for example in ISO/SAE 21434. A central part of such a process is the threat and risk assessment including an attack feasibility rating. In this paper, we present an attack surface assessment with focus on the attack feasibility rating compliant to ISO/SAE 21434. We introduce a reference architecture with assets constituting the attack surface, the attack feasibility rating for these assets, and the application of this rating on typical use cases. The attack feasibility rating assigns attacks and assets to an evaluation of the attacker dimensions such as the required knowledge and the feasibility of attacks derived from it. Our application of sample use cases shows how this rating can be used to assess the feasibility of an entire attack path. The attack feasibility rating can be used as a building block in a threat and risk assessment according to ISO/SAE 21434.