An Approach of Scenario-Based Threat Analysis and Risk Assessment Over-the-Air updates for an Autonomous Vehicle

To provide overall safety to the automotive domain both vehicle safety and security need to be considered. Cybersecurity is a key to define the quality of the autonomous vehicle by introducing safe and secure development and risk assessment. The implementation of the Over-The-Air (OTA) updates in the automotive industry brought many facilities to the drier and the Original Equipment Manufacturer (OEM). The amount of cost-saving from OTA for OEMs is assumed over several billion. So, research is essential for safe and secure OTA updates in the autonomous vehicle. However, Highly Automated Driving Functions (HADFs) have already raised the necessity of secure development because a threat can lead to harm in certain scenarios including the functional insufficiencies as mentioned in Safety Of The Intended Functionality (SOTIF) of the system. Scenario-based Hazard Analysis and Risk Assessment (HARA) is extensively used in automated vehicle systems and can support for further development of scenario-based threat analysis for OTA updates. Additionally, the scenario-based analysis represents the alliance of safety and security during product development. Therefore, this paper illustrates the scenario-based analysis and assessment of threats including the OTA feature. Furthermore, demonstrates the processes step-by-step to perform Threat Analysis and Risk Assessment (TARA) against potential vulnerabilities to obtain a set of cybersecurity goals for a HADF.