Abstract:Connected and Automated Vehicles (CAVs) cybersecurity is an inherently complex, multi-dimensional issue that goes beyond isolated hardware or software vulnerabilities, extending to human threats, network vulnerabilities, and broader system-level risks. Currently, no formal, comprehensive tool exists that integrates these diverse dimensions into a unified framework for CAV cybersecurity assessment. This study addresses this challenge by developing a System Dynamics (SD) model for strategic cybersecurity assessment that considers technological challenges, human threats, and public cybersecurity awareness during the CAV rollout. Specifically, the model incorporates a novel SD-based Stock-and-Flow Model (SFM) that maps six key parameters influencing cyberattacks at the system level. These parameters include CAV communication safety, user adoption rates, log file management, hacker capabilities, understanding of hacker motivations (criminology theory maturity), and public awareness of CAV cybersecurity.The SFM's structure and behaviour were rigorously tested and then used to analyse five plausible scenarios: i) Baseline (Technological Focus Only), ii) Understanding Hacker Motivations, iii) CAV User and OEM Education, iv) CAV Penetration Rate Increase, and v) CAV Penetration Rate Increase with Human Behavior Analysis. Four metrics are used to benchmark CAV cybersecurity: communication safety, probability of hacking attempts, probability of successful defence, and number of CAV adopters. The results indicate that while baseline technological advancements strengthen communication framework robustness, they may also create new vulnerabilities that hackers could exploit. Conversely, a deeper understanding of hacker motivations (Criminology Theory Maturity) effectively reduces hacking attempts. It fosters a more secure environment for early CAV adopters. Additionally, educating CAV users and OEM increases the probability of defending against cyberattacks. While CAV penetration increases the likelihood of hack defence due to a corresponding rise in attempts, there is a noticeable decrease in hacking attempts with CAV penetration when analysing human behaviour. These findings, when translated into policy instruments, can pave the way for a more optimised and resilient cyber-safe ITS.

A Systems Thinking for Cybersecurity Modeling

How Effective Are the Prevailing Attack-Defense Models for Cybersecurity Anyway?

Towards a Framework for Cyber Attack Impact Analysis of Electric Cyber Physical Systems.

Introducing Systems Thinking as a Framework for Teaching and Assessing Threat Modeling Competency

An asymmetric interdependent networks model for cyber-physical systems

Fundamental Challenges of Cyber-Physical Systems Security Modeling

Cybersecurity Dynamics: A Foundation for the Science of Cybersecurity

A Transdisciplinary Approach to Cybersecurity: A Framework for Encouraging Transdisciplinary Thinking

Cyber Defense as a Complex Adaptive System: A model-based approach to strategic policy design

Improving the Cybersecurity of Critical National Infrastructure using Modelling and Simulation

Cybersecurity Framework for Connected and Automated Vehicles: A Modeling Perspective

Science of Cyber Security as a System of Models and Problems

A Multi-level Reference Model and a Dedicated Method for Cyber-Security by Design

Formal Mental Models for Human-Centered Cybersecurity

Multi‐aspects AI‐based modeling and adversarial learning for cybersecurity intelligence and robustness: A comprehensive overview

SoK: Game-Theoretic Cybersecurity: Assumptions, Models, Gaps, and Bridges

An Investigation on Cyber Security Threats and Security Models

Cyber-Physical Systems Security -- A Survey

Threat Modeling of Cyber-Physical Systems in Practice

Security Modelling for Cyber-Physical Systems: A Systematic Literature Review

Model-based Cybersecurity Analysis: Past Work and Future Directions