Abstract:Modern-day Connected and Autonomous Vehicles (CAVs) with more than 100 million code lines, running up-to a hundred Electronic Control Units (ECUs) will create and exchange digital information with other vehicles and intelligent transport networks. Consequently, ubiquitous internal and external communication (controls, commands, and data) within all CAV-related nodes is inevitably the gatekeeper for the smooth operation. Therefore, it is a primary vulnerable area for cyber-attacks that entails stringent and efficient measures in the form of "cybersecurity". There is a lack of systematic and comprehensive review of the literature on cyber-attacks on the CAVs, respective mitigation strategies, anticipated readiness, and research directions for the future. This study aims to analyse, synthesise, and interpret critical areas for the roll-out and progression of CAVs in combating cyber-attacks. Specifically, we described in a structured way a holistic view of potentially critical avenues, which lies at the heart of CAV cybersecurity research. We synthesise their scope with a particular focus on ensuring effective CAVs deployment and reducing the probability of cyber-attack failures. We present the CAVs communication framework in an integrated form, i.e., from In-Vehicle (IV) communication to Vehicle-to-Vehicle (V2X) communication with a visual flowchart to provide a transparent picture of all the interfaces for potential cyber-attacks. The vulnerability of CAVs by proximity (or physical) access to cyber-attacks is outlined with future recommendations. There is a detailed description of why the orthodox cybersecurity approaches in Cyber-Physical System (CPS) are not adequate to counter cyber-attacks on the CAVs. Further, we synthesised a table with consolidated details of the cyber-attacks on the CAVs, the respective CAV communication system, its impact, and the corresponding mitigation strategies. It is believed that the literature discussed, and the findings reached in this paper are of great value to CAV researchers, technology developers, and decision-makers in shaping and developing a robust CAV-cybersecurity framework.

Cyber security challenges in aviation communication, navigation, and surveillance

Cybersecurity challenges in vehicular communications

Cyber-Security Challenges in Aviation Industry: A Review of Current and Future Trends

Evaluating the Security of Aircraft Systems

Security Threats and Mitigation Techniques in UAV Communications: A Comprehensive Survey

Safety vs. Security: Attacking Avionic Systems with Humans in the Loop

On Perception and Reality in Wireless Air Traffic Communications Security

A Risk Analysis of Communication, Navigation and Sensing Satellite Systems Threats

Countermeasures against Cyber Threats to Aviation Systems

A survey of cyber security threats and solutions for UAV communications and flying ad-hoc networks

Cybersecurity – One of the Greatest Challenges for Civil Aviation in the 21st Century

A systematic literature review on Security of Unmanned Aerial Vehicle Systems

In-Vehicle Communication Cyber Security: Challenges and Solutions

Satellite-based communications security: A survey of threats, solutions, and research challenges

Cybersecurity in unmanned aerial vehicles (UAVs)

Towards a Unified Cybersecurity Testing Lab for Satellite, Aerospace, Avionics, Maritime, Drone (SAAMD) technologies and communications

Cyberattack on Flight Safety: Detection and Mitigation Using LoRa

Cyber security analysis of connected vehicles

Cyber-attacks in the next-generation cars, mitigation techniques, anticipated readiness and future directions

Survey on Security Attacks in Connected and Autonomous Vehicular Systems

A Security Review in the UAVNet Era: Threats, Countermeasures, and Gap Analysis