Abstract:Modern-day Connected and Autonomous Vehicles (CAVs) with more than 100 million code lines, running up-to a hundred Electronic Control Units (ECUs) will create and exchange digital information with other vehicles and intelligent transport networks. Consequently, ubiquitous internal and external communication (controls, commands, and data) within all CAV-related nodes is inevitably the gatekeeper for the smooth operation. Therefore, it is a primary vulnerable area for cyber-attacks that entails stringent and efficient measures in the form of "cybersecurity". There is a lack of systematic and comprehensive review of the literature on cyber-attacks on the CAVs, respective mitigation strategies, anticipated readiness, and research directions for the future. This study aims to analyse, synthesise, and interpret critical areas for the roll-out and progression of CAVs in combating cyber-attacks. Specifically, we described in a structured way a holistic view of potentially critical avenues, which lies at the heart of CAV cybersecurity research. We synthesise their scope with a particular focus on ensuring effective CAVs deployment and reducing the probability of cyber-attack failures. We present the CAVs communication framework in an integrated form, i.e., from In-Vehicle (IV) communication to Vehicle-to-Vehicle (V2X) communication with a visual flowchart to provide a transparent picture of all the interfaces for potential cyber-attacks. The vulnerability of CAVs by proximity (or physical) access to cyber-attacks is outlined with future recommendations. There is a detailed description of why the orthodox cybersecurity approaches in Cyber-Physical System (CPS) are not adequate to counter cyber-attacks on the CAVs. Further, we synthesised a table with consolidated details of the cyber-attacks on the CAVs, the respective CAV communication system, its impact, and the corresponding mitigation strategies. It is believed that the literature discussed, and the findings reached in this paper are of great value to CAV researchers, technology developers, and decision-makers in shaping and developing a robust CAV-cybersecurity framework.

Technical Aspects of Cyber Kill Chain

Tecnicas Avanzadas de Ciberseguridad: Integracion y Evolucion de la Kill Chain en Diversos Escenarios

Cyber Kill Chain Analysis Using Artificial Intelligence

Towards a Framework for Cyber Attack Impact Analysis of Electric Cyber Physical Systems.

Identification of Attack Paths Using Kill Chain and Attack Graphs

Modeling Attack, Defense and Threat Trees and the Cyber Kill Chain, ATT&CK and STRIDE Frameworks as Blackboard Architecture Networks

Railway Defender Kill Chain to Predict and Detect Cyber-Attacks

Mapping Tools for Open Source Intelligence with Cyber Kill Chain for Adversarial Aware Security

Use of Graph Neural Networks in Aiding Defensive Cyber Operations

Cyber Kill Chain-Based Hybrid Intrusion Detection System for Smart Grid

Thinking about intrusion kill chains as mechanisms

An Analysis of the Kill Chain for Time-Critical Strike

Artificial Intelligence in Cybersecurity: The Use of AI Along the Cyber Kill Chain

APT-Dt-KC: advanced persistent threat detection based on kill-chain model

Mitigation Techniques for Cyber Attacks: A Systematic Mapping Study

Cyber-attacks in the next-generation cars, mitigation techniques, anticipated readiness and future directions

Investigating co-occurrences of MITRE ATT\&CK Techniques

Emerging Threats in Cyberspace: Implications for National Security Policy and Healthcare Sector

Modeling impact of attacks, recovery, and attackability conditions for situational awareness

Threats, Protection and Attribution of Cyber Attacks on Critical Infrastructures

A Cyber Kill Chain Based Taxonomy of Banking Trojans for Evolutionary Computational Intelligence