Abstract:The rapid development of intelligent connected vehicles has increased the attack surface of vehicles and made the complexity of vehicle systems unprecedented. Original equipment manufacturers (OEMs) need to accurately represent and identify threats and match corresponding security requirements. Meanwhile, the fast iteration cycle of modern vehicles requires development engineers to quickly obtain cybersecurity requirements for new features in their developed systems in order to develop system code that meets cybersecurity requirements. However, existing threat identification and cybersecurity requirement methods in the automotive domain cannot accurately describe and identify threats for a new feature while also quickly matching appropriate cybersecurity requirements. This article proposes a cybersecurity requirements management system (CRMS) framework to assist OEM security experts in conducting comprehensive automated threat analysis and risk assessment and to help development engineers identify security requirements prior to software development. The proposed CRMS framework enables development engineers to quickly model their systems using the UML-based (i.e., capable of describing systems using UML) Eclipse Modeling Framework and security experts to integrate their security experience into a threat library and security requirement library expressed in Alloy formal language. In order to ensure accurate matching between the two, a middleware communication framework called the component channel messaging and interface (CCMI) framework, specifically designed for the automotive domain, is proposed. The CCMI communication framework enables the fast model of development engineers to match with the formal model of security experts for threat and security requirement matching, achieving accurate and automated threat and risk identification and security requirement matching. To validate our work, we conducted experiments on the proposed framework and compared the results with the HEAVENS approach. The results showed that the proposed framework is superior in terms of threat detection rates and coverage rates of security requirements. Moreover, it also saves analysis time for large and complex systems, and the cost-saving effect becomes more pronounced with increasing system complexity.

Building a Cybersecurity Risk Metamodel for Improved Method and Tool Integration

A Multi-level Reference Model and a Dedicated Method for Cyber-Security by Design

A Model-Driven Methodology for Automotive Cybersecurity Test Case Generation

An ontological metamodel for cyber-physical system safety, security, and resilience coengineering

Cyber security threat modeling based on the MITRE Enterprise ATT&CK Matrix

Model-Based Safety and Security Engineering

Run-time threat models for systematic and continuous risk assessment

CYBER-AIDD: A novel approach to implementing improved cyber security resilience for large Australian healthcare providers using a Unified Modelling Language ontology

Threat Modeling of Cyber-Physical Systems in Practice

Building Security Awareness of Interdependent Services, Business Processes, and Systems in Cyberspace

RESOLUTION OF SAFETY RELEVANT SECURITY THREATS IN THE SYSTEM ARCHITECTURE DESIGN PHASE ON THE EXAMPLE OF AUTOMOTIVE INDUSTRY

Risk-based safety scoping of adversary-centric security testing on Operational Technology

Modeling Cybersecurity Risk: The Integration of Decision Theory and Pivot Pairwise Relative Criteria Importance Assessment with Scale for Cybersecurity Threat Evaluation

Managing Cyber Risk, a Science in the Making

Fundamental Challenges of Cyber-Physical Systems Security Modeling

Requirements and Recommendations for IoT/IIoT Models to automate Security Assurance through Threat Modelling, Security Analysis and Penetration Testing

A Methodology to Support Automatic Cyber Risk Assessment Review

Assessing MITRE ATT&CK Risk Using a Cyber-Security Culture Framework

Combining Cyber Security Intelligence to Refine Automotive Cyber Threats

A Framework for Cybersecurity Requirements Management in the Automotive Domain

A model-driven approach for vulnerability evaluation of modern physical protection systems