Abstract:Connected and Automated Vehicles (CAVs) cybersecurity is an inherently complex, multi-dimensional issue that goes beyond isolated hardware or software vulnerabilities, extending to human threats, network vulnerabilities, and broader system-level risks. Currently, no formal, comprehensive tool exists that integrates these diverse dimensions into a unified framework for CAV cybersecurity assessment. This study addresses this challenge by developing a System Dynamics (SD) model for strategic cybersecurity assessment that considers technological challenges, human threats, and public cybersecurity awareness during the CAV rollout. Specifically, the model incorporates a novel SD-based Stock-and-Flow Model (SFM) that maps six key parameters influencing cyberattacks at the system level. These parameters include CAV communication safety, user adoption rates, log file management, hacker capabilities, understanding of hacker motivations (criminology theory maturity), and public awareness of CAV cybersecurity.The SFM's structure and behaviour were rigorously tested and then used to analyse five plausible scenarios: i) Baseline (Technological Focus Only), ii) Understanding Hacker Motivations, iii) CAV User and OEM Education, iv) CAV Penetration Rate Increase, and v) CAV Penetration Rate Increase with Human Behavior Analysis. Four metrics are used to benchmark CAV cybersecurity: communication safety, probability of hacking attempts, probability of successful defence, and number of CAV adopters. The results indicate that while baseline technological advancements strengthen communication framework robustness, they may also create new vulnerabilities that hackers could exploit. Conversely, a deeper understanding of hacker motivations (Criminology Theory Maturity) effectively reduces hacking attempts. It fosters a more secure environment for early CAV adopters. Additionally, educating CAV users and OEM increases the probability of defending against cyberattacks. While CAV penetration increases the likelihood of hack defence due to a corresponding rise in attempts, there is a noticeable decrease in hacking attempts with CAV penetration when analysing human behaviour. These findings, when translated into policy instruments, can pave the way for a more optimised and resilient cyber-safe ITS.

Towards Comprehensive Threat Modeling for Intelligent Vehicle Cyber Security

Cybersecurity challenges in vehicular communications

Security Modeling and Analysis on Intra Vehicular Network.

An Overview of Vehicular Cybersecurity for Intelligent Connected Vehicles

An Overview of Attacks and Defences on Intelligent Connected Vehicles

Proactive security defense: cyber threat intelligence modeling for connected autonomous vehicles

Analysis of Cybersecurity Threats on Connected Vehicles with CACC Based on an Improved Car-Following Model

Identification and Verification of Attack-Tree Threat Models in Connected Vehicles

Attacks and Defences on Intelligent Connected Vehicles: a Survey

ACTISM: Threat-informed Dynamic Security Modelling for Automotive Systems

A Security Evaluation Framework for Intelligent Connected Vehicles Based on Attack Chains

Cyberattacks on Adaptive Cruise Control Vehicles: An Analytical Characterization

Security Analysis of Intelligent Transportation Systems Based on Simulation Data

Beyond the Dolev-Yao Model: Realistic Application-Specific Attacker Models for Applications Using Vehicular Communication

A Survey on Cyber-Security of Connected and Autonomous Vehicles (CAVs)

Vehicle Security: Risk Assessment in Transportation

Strategic Safety-Critical Attacks Against an Advanced Driver Assistance System

Cybersecurity Framework for Connected and Automated Vehicles: A Modeling Perspective

Threat Assessment Techniques in Intelligent Vehicles: A Comparative Survey

Autonomous Driving Security: State of the Art and Challenges

A Formal Model to Facilitate Security Testing in Modern Automotive Systems