Identifying Cybersecurity Focus Areas in Connected Cars Based on WP.29 UN-R155 Attack Vectors and Beyond Trend Micro Incorporated

Format:

Book

Conference/Event

Author/Creator:

Huq, Numaan, author.

Contributor:

Vosseler, Rainer

Conference Name:

WCX SAE World Congress Experience (2022-04-05 : Detroit & Online, Michigan, United States)

Language:

English

Physical Description:

1 online resource cm

Place of Publication:

Warrendale, PA SAE International 2022

Summary:

The UN working group WP.29 published UN Regulation No. 155, the "Uniform provisions concerning the approval of vehicles with regards to cyber security and cyber security management systems," which became a binding resolution on January 22nd, 2021 with expectations that at least 54 countries will mandate it starting July 2022. The regulation lists 69 attack vectors directly affecting vehicle cyber security. Car manufacturers, suppliers, government organizations, et cetera all stakeholder's cooperation and efforts are necessary for the successful implementation of the published regulation. The first course of action is to sort these attack vectors according to their expected threat severity levels, so stakeholders can determine the order in which to tackle mitigating said threats. In this paper, using the industry standard DREAD threat modelling, we calculated the severity levels of the attack vectors listed in the WP.29 UN-R155 cyber security regulation. Additionally, we go beyond the attack vectors listed in UN-R155 - using our own analysis, experience and insights, we explored other attack vectors that will also affect vehicle cybersecurity

Notes:

Vendor supplied data

Publisher Number:

2022-01-0116

Access Restriction:

Restricted for use by site license