Improving the identification of damage and threat scenarios in ISO/SAE 21434 threat analysis and risk assessment
- Threat analysis and risk analysis (TARA) is the beating heart of vehicle cybersecurity management, providing a repository for all that is known about the possible cybersecurity vulnerabilities and capabilities of the vehicle. Thus, potential difficulties in developing TARAs are a significant concern because of the importance of TARAs for vehicle cybersecurity management. However, the construction of ISO/SAE 21434, which is written to address multiple product levels and phases of development, implies approaches to the development of TARAs that are not always fully appropriate to specific applications. This paper considers the particular problems of identifying the threat and damage scenarios required by ISO/SAE 21434, which are key to developing an effective TARA, and proposes approaches that promote a clearer distinction between them as well as helping to ensure the completeness and consistency of their definitions.
| Author: | Alastair RuddleORCiDGND, Lokesh DevarajORCiDGND, Anthony MartinGND |
|---|---|
| URN: | urn:nbn:de:hbz:294-103923 |
| DOI: | https://doi.org/10.13154/294-10392 |
| Parent Title (English): | 21th escar Europe : The World's Leading Automotive Cyber Security Conference (Hamburg, 15. - 16.11.2023) |
| Document Type: | Part of a Book |
| Language: | English |
| Date of Publication (online): | 2023/10/25 |
| Date of first Publication: | 2023/10/25 |
| Publishing Institution: | Ruhr-Universität Bochum, Universitätsbibliothek |
| Tag: | ISO/SAE 21434; UNECE Regulation 155; damage scenario; road vehicle; threat analysis and risk assessment (TARA); threat scenario |
| Pagenumber: | 14 |
| Dewey Decimal Classification: | Allgemeines, Informatik, Informationswissenschaft / Informatik |
| open_access (DINI-Set): | open_access |
| Konferenz-/Sammelbände: | 21th escar Europe : The World's Leading Automotive Cyber Security Conference |
| Licence (German): |  Keine Creative Commons Lizenz - es gelten die Rechteeinräumung und das deutsche Urheberrecht |
