Abstract:The Internet of Vehicles (IoV) equips vehicles with connectivity to the Internet and the Internet of Things (IoT) to support modern applications such as autonomous driving. However, the consolidation of complex computing domains of vehicles, the Internet, and the IoT limits the applicability of tailored security solutions. In this paper, we propose a new methodology to quantitatively verify the security of single or system-level assets of the IoV infrastructure. In detail, our methodology decomposes assets of the IoV infrastructure with the help of reference sub-architectures and the 4+1 view model analysis to map identified assets into data, software, networking, and hardware categories. This analysis includes a custom threat modeling concept to perform parameterization of Common Vulnerability Scoring System (CVSS) scores per view model domain. As a result, our methodology is able to allocate assets from attack paths to view model domains. This equips assets of attack paths with our IoV-driven CVSS scores. Our CVSS scores assess the attack likelihood which we use for Markov Chain transition probabilities. This way, we quantitatively verify system-level security among a set of IoV assets. Our results show that our methodology applies to arbitrary IoV attack paths. Based on our parameterization of CVSS scores and our selection of use cases, remote attacks are less likely to compromise location data compared to attacks from close proximity for authorized and unauthorized attackers respectively.

Towards Quantifying the (in)security of Networked Systems.

A Stochastic Model for Quantitative Security Analyses of Networked Systems.

A New Approach to Modeling and Analyzing Security of Networked Systems

Quantifiable Network Security Measurement - A Study Based on an Index System.

Model-Based Quantitative Network Security Metrics: A Survey

RESEARCH ON QUANTITATIVE EVALUATION OF NETWORK SECURITY BASED ON ZACHMAN FRAMEWORK

Petri net based security quantitative analysis model for cyber-physical system

Power Information Systems Security: Modeling and Quantitative Evaluation

Research and Application of a Network Security Quantitative Evaluation System

Multiple behavior information fusion based quantitative threat evaluation

A Quantitative Method for Evaluating Network Security Based on Attack Graph.

Modelling and Analysis of Network Security - an Algebraic Approach

Security Quantitative Evaluation Method and System Design for WLAN

Study on Evaluation for Security Situation of Networked Systems

A Stochastic Modeling of Coordinated Internal and External Attacks

Quantitative System-Level Security Verification of the IoV Infrastructure

Analytical Model and Topology Evaluation of Quantum Secure Communication Network.

Game-Theoretic Analysis for Security of Various Software-Defined Networking (SDN) Architectures

A Study of the Quantitative Evaluation Model for Network Security

Modelling and Analysis Network Security -- a PVCCS approach

Technical Research on Computer Network Security Automatic Evaluation