A Novel Scalable Hybrid Threat Analysis and Risk Assessment Engine for an Automotive Subsystem

Modern-day automobiles rely heavily on software capabilities to enhance user experience and comfort. With each passing day, the hardware and software complexity of these systems are rapidly growing. The advancement of driverless technologies and their dependency on software poses a major threat ie., the vulnerability of these systems to external bad agents, who look forward to compromising the system and extracting user-sensitive information or even taking control of these systems. Threat Analysis and Risk Assessment (TARA) systems play an important role in detecting these security loopholes and aid in finding solutions to such vulnerabilities. In this research, we present a novel engine for TARA, which is a lightweight tool, deployable across the automotive supply chain, conforms to AUTOSAR standards, is easy to use, and caters to the needs of modern-day needs of security in the automotive domain. Our experiments with this methodology proved that it could detect security issues of Ethernet, making it relevant to the era of Automotive Ethernet.