Abstract:The rapid development of intelligent connected vehicles has increased the attack surface of vehicles and made the complexity of vehicle systems unprecedented. Original equipment manufacturers (OEMs) need to accurately represent and identify threats and match corresponding security requirements. Meanwhile, the fast iteration cycle of modern vehicles requires development engineers to quickly obtain cybersecurity requirements for new features in their developed systems in order to develop system code that meets cybersecurity requirements. However, existing threat identification and cybersecurity requirement methods in the automotive domain cannot accurately describe and identify threats for a new feature while also quickly matching appropriate cybersecurity requirements. This article proposes a cybersecurity requirements management system (CRMS) framework to assist OEM security experts in conducting comprehensive automated threat analysis and risk assessment and to help development engineers identify security requirements prior to software development. The proposed CRMS framework enables development engineers to quickly model their systems using the UML-based (i.e., capable of describing systems using UML) Eclipse Modeling Framework and security experts to integrate their security experience into a threat library and security requirement library expressed in Alloy formal language. In order to ensure accurate matching between the two, a middleware communication framework called the component channel messaging and interface (CCMI) framework, specifically designed for the automotive domain, is proposed. The CCMI communication framework enables the fast model of development engineers to match with the formal model of security experts for threat and security requirement matching, achieving accurate and automated threat and risk identification and security requirement matching. To validate our work, we conducted experiments on the proposed framework and compared the results with the HEAVENS approach. The results showed that the proposed framework is superior in terms of threat detection rates and coverage rates of security requirements. Moreover, it also saves analysis time for large and complex systems, and the cost-saving effect becomes more pronounced with increasing system complexity.

Cross-Layer Design of Automotive Systems

A novel cross-layer framework for early-stage power delivery and architecture co-exploration.

From Layout to System: Early Stage Power Delivery and Architecture Co-Exploration

A Cross-Layer Approach for Early-Stage Power Grid Design and Optimization.

CAD/CAE Integration Framework with Layered Software Architecture

Hardware Software Co-design for Automotive CPS using Architecture Analysis and Design Language

iCPS-Car: An Intelligent Cyber-physical System for Smart Automobiles

Research on electrical/electronic architecture for connected vehicles

A Hybrid Approach for the Automation of Functional Decomposition in Conceptual Design

The Ergonomics Simulation and Evaluation Architecture for the Automobile

Design of Distributed Cyber–Physical Systems for Connected and Automated Vehicles with Implementing Methodologies

The Universal Architecture and Application of Cross-Platform Real-Time Simulation System for Intelligent Connected Vehicles

A Cross-Layer Framework for Early-Stage Full Chip Oxide Breakdown Reliability Analysis

Architecture design of a vehicle–road-cloud collaborative automated driving system

A Framework for Cybersecurity Requirements Management in the Automotive Domain

The Digital Foundation Platform -- A Multi-layered SOA Architecture for Intelligent Connected Vehicle Operating System

Research on Overall Design Framework of Networked Multi-vheicle Cooperative Control and Decision-making System

Challenges in Developing Software for Cyber-Physical Systems

ODFa${}^{2}$: Overall Defense Framework Against Cyber-Attacks on Intelligent Connected Vehicles

A Theoretical Framework for Interaction Measure and Sensitivity Analysis in Cross-Layer Design

A Design Method for Future Automobiles