Can social media shape the security of next-generation connected vehicles?

Nicola Scarano,Luca Mannella,Alessandro Savino,Stefano Di Carlo

2024-07-10

Abstract:The increasing adoption of connectivity and electronic components in vehicles makes these systems valuable targets for attackers. While automotive vendors prioritize safety, there remains a critical need for comprehensive assessment and analysis of cyber risks. In this context, this paper proposes a Social Media Automotive Threat Intelligence (SOCMATI) framework, specifically designed for the emerging field of automotive cybersecurity. The framework leverages advanced intelligence techniques and machine learning models to extract valuable insights from social media. Four use cases illustrate the framework's potential by demonstrating how it can significantly enhance threat assessment procedures within the automotive industry.

Social and Information Networks

What problem does this paper attempt to address?

### Problems the Paper Aims to Solve

The paper aims to address the security issues faced by Next-Generation Connected Vehicles in the face of increasing cyber threats. As vehicle connectivity and electronic components become more widespread, these systems become valuable targets for attackers. Although automakers prioritize safety, there is still a need for comprehensive assessment and analysis of cyber risks.

Specifically, the paper proposes a framework called "Social Media Automotive Threat Intelligence" (SOC-MATI), which is specifically designed for the emerging field of automotive cybersecurity. This framework leverages advanced intelligent technologies and machine learning models to extract valuable information from social media. Through four use cases, the paper demonstrates how this framework can significantly enhance threat assessment procedures in the automotive industry.

### Main Issues

1. **Increase in Cyber Threats**: As the complexity of vehicle systems increases, new cyber threats continuously emerge, threatening the safety of the systems and the drivers.
2. **Lack of Comprehensive Threat Assessment**: Although automakers value safety, there are still deficiencies in the comprehensive assessment and analysis of cyber risks.
3. **Data Scarcity**: Existing threat-sharing platforms and public OSCTI reports rarely record and register automotive attacks, leading to a scarcity of information.
4. **Utilizing Social Media Data**: Social media platforms such as YouTube, Reddit, and Telegram can serve as rich sources of threat-related data, but there is currently little research in the field of automotive cybersecurity.

### Solutions

The SOC-MATI framework proposed in the paper addresses the above issues in the following ways:

1. **Data Collection and Cleaning**: Collecting large amounts of data from social media platforms and preprocessing it to ensure data cleanliness and standardization.
2. **Natural Language Processing (NLP)**: Utilizing NLP techniques to process and extract key information from text data, such as keywords and topics.
3. **Time Series Analysis**: Using time series analysis methods to predict threat trends and attack patterns.
4. **Interactive Analysis**: Employing network analysis techniques to reveal connections between concepts, entities, or documents in social media data, identifying cybercriminal groups and threat topics.
5. **Risk Assessment**: Combining existing risk models with the extracted data to perform data-driven risk assessments, enhancing the ability to identify and mitigate threats.

Through these methods, the SOC-MATI framework can help automakers and security experts better anticipate, identify, and respond to emerging threats, thereby improving the overall cybersecurity level of the industry.