Automating Vehicle SOA Threat Analysis using a Model-Based Methodology

Yuri Gil Dantas, Vivek Nigam, Ulrich Schöpp, Simon Barner und Pei Ke

Proceedings of the 9th International Conference on Information Systems Security and Privacy (ICISSP), pp. 180-191

Februar 2023 · DOI: 10.5220/0011786400003405


This article proposes automated methods for threat analysis using a model-based engineering methodology that provides precise guarantees with respect to safety goals. This is accomplished by proposing an intruder model for automotive SOA which together with the system architecture and the loss scenarios identified by safety analysis are used as input for computing assets, impact rating, damage/threat scenarios, and attack paths. To validate the proposed methodology, we developed a faithful model of the autonomous driving functions of the Apollo framework, a widely used open source autonomous driving stack. The proposed machinery automatically enumerates several attack paths on Apollo, including attack paths not reported in the literature.

Stichworte: automotive, threat analysis, service-oriented architectures, Apollo, automation, safe and secure-by-design, MbSE, Model-based Systems Engineering, AutoFOCUS3, AF3