Abstract:Modern-day Connected and Autonomous Vehicles (CAVs) with more than 100 million code lines, running up-to a hundred Electronic Control Units (ECUs) will create and exchange digital information with other vehicles and intelligent transport networks. Consequently, ubiquitous internal and external communication (controls, commands, and data) within all CAV-related nodes is inevitably the gatekeeper for the smooth operation. Therefore, it is a primary vulnerable area for cyber-attacks that entails stringent and efficient measures in the form of "cybersecurity". There is a lack of systematic and comprehensive review of the literature on cyber-attacks on the CAVs, respective mitigation strategies, anticipated readiness, and research directions for the future. This study aims to analyse, synthesise, and interpret critical areas for the roll-out and progression of CAVs in combating cyber-attacks. Specifically, we described in a structured way a holistic view of potentially critical avenues, which lies at the heart of CAV cybersecurity research. We synthesise their scope with a particular focus on ensuring effective CAVs deployment and reducing the probability of cyber-attack failures. We present the CAVs communication framework in an integrated form, i.e., from In-Vehicle (IV) communication to Vehicle-to-Vehicle (V2X) communication with a visual flowchart to provide a transparent picture of all the interfaces for potential cyber-attacks. The vulnerability of CAVs by proximity (or physical) access to cyber-attacks is outlined with future recommendations. There is a detailed description of why the orthodox cybersecurity approaches in Cyber-Physical System (CPS) are not adequate to counter cyber-attacks on the CAVs. Further, we synthesised a table with consolidated details of the cyber-attacks on the CAVs, the respective CAV communication system, its impact, and the corresponding mitigation strategies. It is believed that the literature discussed, and the findings reached in this paper are of great value to CAV researchers, technology developers, and decision-makers in shaping and developing a robust CAV-cybersecurity framework.

Vulnerabilities of Electric Vehicle Battery Packs to Cyberattacks

Vulnerability Assessment of Electrical Cyber-Physical Systems Against Cyber Attacks

Cyber–Physical Security of Powertrain Systems in Modern Electric Vehicles: Vulnerabilities, Challenges, and Future Visions

Electric Vehicles Security and Privacy: Challenges, Solutions, and Future Needs

Cybersecurity challenges in vehicular communications

Towards a Framework for Cyber Attack Impact Analysis of Electric Cyber Physical Systems.

Cybersecurity Risk Analysis of Electric Vehicles Charging Stations

Vulnerability Analysis of Electrical Cyber Physical Systems Using a Simulation Platform.

Electric vehicle attack impact on power grid operation

Emerging Cybersecurity and Privacy Threats to Electric Vehicles and Their Impact on Human and Environmental Sustainability

Investigating the Security of EV Charging Mobile Applications As an Attack Surface

Exploring Adversarial Threat Models in Cyber Physical Battery Systems

Cyber-attacks in the next-generation cars, mitigation techniques, anticipated readiness and future directions

An Overview of Cyber Security and Privacy on the Electric Vehicle Charging Infrastructure

Cybersecurity of Electric Vehicle Smart Charging Management Systems

Analysis and Design of a Smart Controller for Managing Penetration of Renewable Energy Including Cybersecurity Issues

MaDEVIoT: Cyberattacks on EV Charging Can Disrupt Power Grid Operation

Public Plug-in Electric Vehicles + Grid Data: Is a New Cyberattack Vector Viable?

Exploring cybersecurity issues in 5G enabled electric vehicle charging station with deep learning

Cyber Insurance Against Cyberattacks on Electric Vehicle Charging Stations

Secure Integration of Electric Vehicles with the Power Grid