Towards a Severity Assessment Method for Potential Cyber Attacks to Connected and Autonomous Vehicles

Abstract

CAV (connected and autonomous vehicle) is a crucial part of intelligent transportation systems. CAVs utilize both sensors and communication components to make driving decisions. A large number of companies, research organizations, and governments have researched extensively on the development of CAVs. The increasing number of autonomous and connected functions however means that CAVs are exposed to more cyber security vulnerabilities. Unlike computer cyber security attacks, cyber attacks to CAVs could lead to not only information leakage but also physical damage. According to the UK CAV Cyber Security Principles, preventing CAVs from cyber security attacks need to be considered at the beginning of CAV development. In this paper, a large set of potential cyber attacks are collected and investigated from the aspects of target assets, risks, and consequences. Severity of each type of attacks is then analysed based on clearly defined new set of criteria. The levels of severity for the attacks can be categorized as critical, important, moderate, and minor. Mitigation methods including prevention, reduction, transference, acceptance, and contingency are then suggested. It is found that remote control, fake vision on cameras, hidden objects to LiDAR and Radar, spoofing attack to GNSS, and fake identity in cloud authority are the most dangerous and of the highest vulnerabilities in CAV cyber security.

Sensor Data Based Anomaly Detection in Autonomous Vehicles using Modified Convolutional Neural Network

“…Few preliminary works have been done to explore future CAV threats. He et al [20] gathered a wide range of possible cyber-attacks and analyzed them in target properties, threats, and implications. The extent of every category of attack is further evaluated using a newly specified series of parameters.…”

Recuperação do Serviço de Pelotão de Veículos Autônomos e Conectados Baseado em Modelos Virtuais Contra Ataques na Rede e Sensores

“…Além dos ataques em sensores, outros tipos de ataques contribuem no desafio de tornar estes sistemas tolerantes a falhas, como os ataques de injec ¸ão de dos falsos entre os veículos em rede [Onishi 2018]. Diferentemente dos ciber ataques em computadores, os ataques em sistemas ciber-físicos, como sistemas de veículos autônomos e conectados, resultam não apenas ao vazamento de informac ¸ões mas também à desastres físicos [He et al 2020]. Desta forma, surge a necessidade de estratégias de defesa que mantenham estes sistemas disponíveis em meio à diferentes tipos de ataques.…”

Cyber-Attack Detection in Autonomous Vehicle Networks by Energy Aware Optimal Data Transmission with Game Fuzzy Q-Learning based Heuristic Routing Protocol

“…As a subset of intelligent transportation method, connected and autonomous vehicles (CAV) use a numerous hardware, such as electronic control units (ECUS) and sensors, software, like entertainment methods, decision-making units and data merged from various sources to perform driving tasks with changing degrees of automation. With these elements, CAVS may not only operate autonomously but also communicate with their environment to navigate and respond appropriately [1]. The sensors placed all over the vehicle body, which collect data from the surroundings to inform decisions, help the automation of CAVS.…”