Risk Assessment Approach of In-Vehicle Network Information Security

The automotive industry is experiencing a paradigm shift towards automated and connected vehicles. With the increasing usage and complexity of electrical and electronic systems, this study introduces a new security risk assessment. In detail, this study first designs a tailored risk assessment framework, which begins with a threat analysis to identify the assets, and threats to those assets. The following risk assessment process consists of a threat estimation and an impact estimation. We introduce the security level conceptually similar to the Automotive standard safety integrity level (ASIL) in ISO26262. The strong alignment with existing standards and processes should make this framework well-suited for the automotive industry’s needs.