Education in Cyber Physical Systems Security: The Case of Connected Autonomous Vehicles

The automotive industry is a dynamic industry that is constantly evolving and changing with the advancements of technology. As cars become more technology dependent, the threat landscape and likelihood of a cyber-attack becomes greater and inherently larger as issues arise. With the introduction to automation and increased use of embedded systems and infotainment systems, modern cars have become a pillar piece of the Internet of Things network. This research details an in-depth study into the vulnerabilities and risks surrounding the current and future state of the automotive industry, highlights the most safety-critical components of the modern car, providing a holistic threat landscape to improve security awareness and posture regarding automotive security. It also demonstrates the utilisation of this analysis with the integration of an education package built on top of a hardware module based on a Raspberry Pi, that emulates its own CAN Bus network that individuals can interact with as if it was a vehicle to provide education on CAN hacking. This device has the potential to be attached to education ranges and labs which can help educate individuals on different security skills to help improve security awareness and knowledge.