EPSRC DTP studentship in Cyber Security Analytics: Decision Support System on Cybersecurity Policies for Autonomous Vehicles

互联自动驾驶汽车（CAV）已经在各个领域快速开发和部署。它带来了提高道路安全和拯救生命的潜力，然而，由于自动驾驶的性质和往往是高度互连，CAV有自己的安全威胁。这些威胁可能包括利用CAV不断增加的连接水平进行的网络攻击，以及在不受控制的环境中运行时的意外结果。人工智能技术在CAV中的广泛使用进一步加剧了网络攻击的风险。正在进行的研究正在调查人工智能的局限性和脆弱性，以及这些技术如何增加对手对CAV实施攻击的机会。目前，许多CAV技术的发展忽视了CAV的可信度、责任和安全性，这可能导致CAV的公众接受度较低，从而影响社会对自动驾驶汽车的广泛采用。为了能够安全地采用和信任AI和CAV中使用的其他技术，它们需要在社会和法律的背景下进行开发和测试。应积极采取指导、标准和政策等措施，规范CAV的设计和部署。解决CAV面临的这些新的网络威胁现在是政策制定者、监管机构和行业官员的首要任务。NHTSA网络安全指南为此提供了一个良好的初始框架。然而，公众、政策制定者和制造商通常很难对CAV的网络安全做出判断和决策。这个博士生项目旨在i）从“技术和社会”中产生证据，以帮助公众了解CAV的机会和网络威胁，并为CAV决定最佳的网络安全政策，ii）评估网络安全政策在减轻CAV网络威胁方面的有效性，以及它们对驾驶员，制造商和利益相关者的社会影响。

Connected Autonomous Vehicles (CAV) are already being developed and deployed across various sectors at a rapid pace. It brings potential to enhance road safety and save lives, however, due to the autonomous nature and often being highly interconnected, CAV have safety threats of their own. These threats could range from cyber-attacks leveraging the increasing levels of connectivity of CAV, to unexpected results when operating in an uncontrolled environment. The wide use of AI technology in CAV further heightens the risk of cyber-attacks. Ongoing research is investigating the limitations and vulnerabilities of AI and how these technologies could increase the opportunities for the adversary to implement attacks against CAV. Currently, many developments of CAV technologies overlook the trustworthiness, responsibility and security of CAV, which could lead to low public acceptability of CAV and thus compromise widespread adoption of autonomous vehicles in society.To be able to safely adopt and trust AI and other technologies used in CAV, they need to be developed and tested within a social and legal context. Proactive measures should be implemented such as guidance, standards and policies, to regulate the design and deployment of CAV. Addressing these new cyber threats posed to CAV is now a top priority for policy-makers, regulators, and industry officials. The NHTSA cybersecurity guidelines provide a good initial framework for this purpose. Nevertheless, it is in general difficult for the public, policy-makers and manufacturers to make judgement and decisions about the cybersecurity of CAV. This PhD studentship aims to i) generate evidence derived from both "technology and society" to help the public to understand the opportunities and cyber threats of CAV, and decide the optimal cybersecurity policies for CAV, and ii) evaluate the effectiveness of cybersecurity policies at mitigating cyber threats posed to CAV, as well as their social impacts on drivers, manufacturers and stakeholders.