As more cars connect to the internet and other devices, the automotive market has become a lucrative target for cyberattacks. This has made the industry more vulnerable to security threats. As a result, car manufacturers and governments are working together to reduce risks and prevent cyberattacks in the automotive sector. However, existing attack feasibility models derived from the information technology field may not always provide accurate assessments of the potential risks faced by Vehicle Electronic Control Units in different operating conditions and domains. This paper introduces the PUNCH Softronix and Politecnico di Torino (PSP) framework to address this issue. This framework is designed to provide accurate assessments compatible with the attack feasibility models defined by the automotive product security standards. The PSP framework utilizes social sentiment analysis to evaluate the real threat risk levels.
翻译:随着汽车与互联网及其他设备的连接日益紧密,汽车市场已成为网络攻击的有利目标,这使得该行业更容易受到安全威胁。因此,汽车制造商与政府正携手合作,以降低风险并预防汽车领域的网络攻击。然而,源自信息技术领域的现有攻击可行性模型,在不同运行条件和域下,可能无法准确评估车辆电子控制单元所面临的潜在风险。本文介绍了PUNCH Softronix与都灵理工大学(PSP)框架以解决此问题。该框架旨在提供与汽车产品安全标准所定义的攻击可行性模型兼容的精确评估。PSP框架利用社会情感分析来评估真实威胁的风险等级。