Detailed Analysis of Security Evaluation of Automotive Systems Based on JASO TP15002

Kawanishi, Yasuyuki; Nishihara, Hideaki; Souma, Daisuke; Yoshida, Hirotaka

doi:10.1007/978-3-319-66284-8_18

Cited by 8 publications

(8 citation statements)

References 6 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In phases 2 and 3 of the TP15002 procedure, Kawanishi et al promoted an efficient risk evaluation method in [15] [17]. They presented the following three ideas:  2-step risk evaluation: Procedures in phases 2 and 3 are divided into 2 processes respectively to minimize the amount of work done by security specialists and reduce the total cost.…”

Section: Ideas For Efficient Risk Evaluation Methodsmentioning

confidence: 99%

“…By writing out all of these combinations, all possible threats to the TOE, specifically "the threat of where an attacker invades and which asset in which module is attacked," are also covered. Kawanishi et al introduced this to guarantee of threat coverage in [15]. In order to ensure completeness and perform risk analysis, a quantification method that does not include factors such as the attacker's motive or environment in the evaluation criteria is suitable, for example, CRSS and our method RSS-CWSS_CPS described later.…”

Section: Ideas For Efficient Risk Evaluation Methodsmentioning

confidence: 99%

“…Kawanishi et al also proposed a 2-step risk evaluation, in which security threats are described and quantified by only three attack victims' perspectives (called the "asset container method") [15]. By the evaluation, critical threats are easily extracted by their risk scores and analyzed in detail.…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

A Study of The Risk Quantification Method of Cyber-Physical Systems focusing on Direct-Access Attacks to In-Vehicle Networks

Kawanishi

Nishihara²,

Yamamoto

et al. 2023

IEICE Trans. Fundamentals

View full text Add to dashboard Cite

Cyber-physical systems, in which ICT systems and field devices are interconnected and interlocked, have become widespread. More threats need to be taken into consideration when designing the security of cyber-physical systems. Attackers may cause damage to the physical world by attacks which exploit vulnerabilities of ICT systems, while other attackers may use the weaknesses of physical boundaries to exploit ICT systems. Therefore, it is necessary to assess such risks of attacks properly. A direct-access attack in the field of automobiles is the latter type of attacks where an attacker connects unauthorized equipment to an in-vehicle network directly and attempts unauthorized access. But it has been considered as less realistic and evaluated less risky than other threats via network entry points by conventional risk assessment methods. We focused on reassessing threats via direct access attacks in proposing effective security design procedures for cyber-physical systems based on a guideline for automobiles, JASO TP15002. In this paper, we focus on "fitting to a specific area or viewpoint" of such a cyber-physical system, and devise a new risk quantification method, RSS-CWSS_CPS based on CWSS, which is also a vulnerability evaluation standard for ICT systems. It can quantify the characteristics of the physical boundaries in cyber-physical systems.

show abstract

Section: Ideas For Efficient Risk Evaluation Methodsmentioning

confidence: 99%

Section: Ideas For Efficient Risk Evaluation Methodsmentioning

confidence: 99%

See 1 more Smart Citation

A Study of The Risk Quantification Method of Cyber-Physical Systems focusing on Direct-Access Attacks to In-Vehicle Networks

Kawanishi

Nishihara²,

Yamamoto

et al. 2023

IEICE Trans. Fundamentals

View full text Add to dashboard Cite

show abstract

“…e Japanese Automotive Standard Organization (JASO) published the TP15002 guideline to standardize the procedures of the security design in the early stage of the development [12]. Kawanishi et al proposed better solutions for security evaluation based on TP15002 [13,14]. e E-safety Vehicle Intrusion Protected Application (EVITA) project, funded by European Union, designed, verified, and prototyped a security architecture for in-vehicle networks where securityrelevant components and data are pretested against unauthorized access.…”

Section: Cybersecurity Designmentioning

confidence: 99%

A Systematic Approach for Cybersecurity Design of In-Vehicle Network Systems with Trade-Off Considerations

Luo

2020

Security and Communication Networks

View full text Add to dashboard Cite

With the increasing connectivity of modern vehicles, protecting systems from attacks on cyber is becoming crucial and urgent. Meanwhile, a vehicle should guarantee a safe and comfortable trip for users. Therefore, how to design a cybersecurity-critical system in vehicles with safety and user experience (UX) considerations is increasingly essential. However, most co-design methods focus on safety engineering with attack concerns and do not discuss conflicts and integration, and few contain the UX aspect. Besides, most existing approaches are abstract at a high level without practical guidelines. This paper presents a literature review of existing safety and security design approaches and proposes a systematic approach for cybersecurity design of in-vehicle network systems based on the guideline in SAE J3061. The trade-off analysis is performed by using association keys and the proposed affecting map. The design process of an example Diagnostic on Internet Protocol (DoIP) system is reported to show how the approach works. Compared with the existing approaches, the proposed one considers safety, cybersecurity, and UX simultaneously, solves conflicts qualitatively or quantitatively, and obtains trade-off design requirements. This approach is applicable to the cybersecurity-driven design of in-vehicle network systems in the early stage with safety and UX considerations.

show abstract

“…This paper is an extended version of [1], which appeared in the proceedings of the DECSoS 2017 Workshop.…”

Section: Appendixmentioning

confidence: 99%

A Comparative Study of JASO TP15002-Based Security Risk Assessment Methods for Connected Vehicle System Design

Kawanishi

Nishihara

Souma

et al. 2019

Security and Communication Networks

Self Cite

View full text Add to dashboard Cite

In recent years, much attention has been paid to autonomous vehicles and security threats on such vehicles have become an important issue. One of these examples is a command injection issue on a gateway ECU, which was reported in 2016. In order to mitigate these threats, the secure design of connected vehicle systems, which is done at the concept phase during development, has become increasingly important in industry. From this perspective, a security guideline such as JASO TP15002 which specifies two concrete methods, CRSS (CVSS Based Risk Scoring System) and RSMA (Risk Scoring Methodology for Automotive System), was made public in 2015. The latest work on the application of TP15002 to the ITU-T X.1373 standard was published in 2017. However, the risk assessment in this publication seems limited. It is not clear from this publication how systematically the risk assessment task in TP15002 can be performed at the implementation level. Another interesting question is how different methods affect the risk scores of connected vehicle systems. In this paper, we focus on the risk assessment phase in JASO TP15002. For a systematic risk assessment, we introduce an idea of asset container and propose to extend CRSS to a novel RSS (Risk Scoring System), RSS-CVSSv3, by appropriately replacing CVSSv2 vulnerability scoring system on which CRSS is based with CVSSv3. To address the above questions, we perform a comparative study on CRSS, RSMA, and RSS-CVSSv3 for multiple use cases such as a CGW (Central Gateway) and a drone, to examine the efficiency and usefulness of our methods. For this comparative purpose, we devise an interesting approach for the refinement of RSMA to the obstacles in comparing CRSS with RSMA.

show abstract

Detailed Analysis of Security Evaluation of Automotive Systems Based on JASO TP15002

Cited by 8 publications

References 6 publications

A Study of The Risk Quantification Method of Cyber-Physical Systems focusing on Direct-Access Attacks to In-Vehicle Networks

A Study of The Risk Quantification Method of Cyber-Physical Systems focusing on Direct-Access Attacks to In-Vehicle Networks

A Systematic Approach for Cybersecurity Design of In-Vehicle Network Systems with Trade-Off Considerations

A Comparative Study of JASO TP15002-Based Security Risk Assessment Methods for Connected Vehicle System Design

Contact Info

Product

Resources

About