Location-Based Schemes for Mitigating Cyber Threats on Connected and Automated Vehicles: A Survey and Design Framework
Location-Based Schemes for Mitigating Cyber Threats on Connected and Automated Vehicles: A Survey and Design Framework
复制标题
基于位置的缓解联网和自动车辆网络威胁的方案：调查和设计框架
DOI：
--
复制
发表时间：
2022
期刊：
影响因子：
--
通讯作者：
S. Sarma
中科院分区：
文献类型：
--
作者：
Dajiang Suo;Jonathan Moore;M. Boesch;Kyle Post;S. Sarma
车辆和道路基础设施的自动化程度和连接性的提高可以使未来的交通系统更高效、更智能，并实现新的交通商业模式。联网和自动驾驶车辆（cav）可能会组成一组自动车队，以改变当今的共享移动服务，并发挥移动传感器的作用，共享实时交通和道路信息，用于运输管理。然而，这些技术进步也会导致新的网络和物理威胁，从而造成安全隐患或其他不良后果。尽管已经有大量关于识别和减轻每种威胁类型的论文，但缺乏设计支持仍然对开发cav的安全工程构成挑战。这限制了原始设备制造商在多个系统属性（包括安全性、安全性和隐私）之间优先考虑的工程能力，以及处理不断变化的攻击面和攻击者的能力。本文从工程设计的角度研究了自动驾驶汽车的安全漏洞和防御机制。我们说明了如何识别和减轻危及单个车辆安全的物理威胁，以及如何以系统的方式破坏新启用的自动驾驶汽车运输服务的网络威胁。提出了一个集成的安全工程流程和多层设计框架，为威胁识别和缓解提供可追溯性和指导。
The increased automation and connectivity of vehicles and road infrastructure can make future transportation systems more efficient and smarter and enable new transportation business models. Connected and automated vehicles (CAVs) may form a group of autonomous fleets to transform today’s shared mobility services and also play the role of mobile sensors, which share real-time traffic and road information for transportation management. However, these technological advancements also lead to new cyber and physical threats that cause safety hazards or other undesired consequences. Although there have been a large number of papers about identifying and mitigating each type of threat, the lack of design support still challenges security engineering for developing CAVs. This limits the engineering capabilities of original equipment manufacturers to prioritize among multiple system properties, including safety, security, and privacy, and dealing with ever-changing attack surfaces and the power of attackers. This paper surveys security vulnerabilities and defense mechanisms for CAVs from an engineering design perspective. We illustrate how to identify and mitigate physical threats that compromise the safety of individual vehicles and cyber threats that disrupt newly CAV-enabled transportation services in a systematic way. An integrated security engineering process and a multi-layer design framework are presented for providing traceability and guidance in threat identification and mitigation.