Abstract:Modern-day Connected and Autonomous Vehicles (CAVs) with more than 100 million code lines, running up-to a hundred Electronic Control Units (ECUs) will create and exchange digital information with other vehicles and intelligent transport networks. Consequently, ubiquitous internal and external communication (controls, commands, and data) within all CAV-related nodes is inevitably the gatekeeper for the smooth operation. Therefore, it is a primary vulnerable area for cyber-attacks that entails stringent and efficient measures in the form of "cybersecurity". There is a lack of systematic and comprehensive review of the literature on cyber-attacks on the CAVs, respective mitigation strategies, anticipated readiness, and research directions for the future. This study aims to analyse, synthesise, and interpret critical areas for the roll-out and progression of CAVs in combating cyber-attacks. Specifically, we described in a structured way a holistic view of potentially critical avenues, which lies at the heart of CAV cybersecurity research. We synthesise their scope with a particular focus on ensuring effective CAVs deployment and reducing the probability of cyber-attack failures. We present the CAVs communication framework in an integrated form, i.e., from In-Vehicle (IV) communication to Vehicle-to-Vehicle (V2X) communication with a visual flowchart to provide a transparent picture of all the interfaces for potential cyber-attacks. The vulnerability of CAVs by proximity (or physical) access to cyber-attacks is outlined with future recommendations. There is a detailed description of why the orthodox cybersecurity approaches in Cyber-Physical System (CPS) are not adequate to counter cyber-attacks on the CAVs. Further, we synthesised a table with consolidated details of the cyber-attacks on the CAVs, the respective CAV communication system, its impact, and the corresponding mitigation strategies. It is believed that the literature discussed, and the findings reached in this paper are of great value to CAV researchers, technology developers, and decision-makers in shaping and developing a robust CAV-cybersecurity framework.

Security Algorithm for Intelligent Transport System in Cyber-Physical Systems Perceptive: Attacks, Vulnerabilities, and Countermeasures

Privacy and Security of Cyberphysical Systems

Cybersecurity challenges in vehicular communications

Resilient Cyberphysical Systems and their Application Drivers: A Technology Roadmap

Security and Privacy Issues in Intelligent Transportation Systems: Classification and Challenges

Security of Connected and Automated Vehicles

Cyber-attacks in the next-generation cars, mitigation techniques, anticipated readiness and future directions

Vehicle Security: Risk Assessment in Transportation

An intelligent dynamic cyber physical system threat detection system for ensuring secured communication in 6G autonomous vehicle networks

Security-Aware Data-Driven Intelligent Transportation Systems

Game-Theoretic Foundations for Cyber Resilience Against Deceptive Information Attacks in Intelligent Transportation Systems

Resilience-by-design in Adaptive Multi-Agent Traffic Control Systems

Security Analysis of Intelligent Transportation Systems Based on Simulation Data

Using Artificial Intelligence in the Security of Cyber Physical Systems

Security Control of Cyber–Physical Systems under Cyber Attacks: A Survey

Security strategy for autonomous vehicle cyber-physical systems using transfer learning

A Systematic Analysis of Enhancing Cyber Security Using Deep Learning for Cyber Physical Systems

An Overview of Attacks and Defences on Intelligent Connected Vehicles

Modeling and control of Cyber-Physical Systems subject to cyber attacks: A survey of recent advances and challenges

A Tutorial on Detecting Security Attacks on Cyber-Physical Systems

Intelligent Physical Layer Security Approach for V2X Communication