This invention relates to the technical field of
digital security for intelligent connected vehicles, specifically a method for quantifying the ROI of
digital security investments in intelligent connected vehicles. The method categorizes the digital assets of the target vehicle model into two types: intrinsic assets and extended assets, and performs objective valuation through external traceable data sources. It enumerates all core
attack paths for the vehicle model and establishes an
attack surface profile. It presets
attack progress levels and baseline success probabilities, uses a standard man-day equivalent as a four-dimensional
additive model, and introduces expected cost to calculate the cost of each step, quantifying three scenarios: mid-way interruption, early completion, and complete success. It separately calculates risk reduction coefficients, inputs, and returns to construct a three-level ROI calculation
system. Finally, it solves a constrained multi-objective equilibrium problem, outputting multiple sets of differentiated optimal solutions. This method eliminates subjective scoring dependence in all stages of asset valuation, attack path quantification, and multi-objective decision-making, and ensures reproducibility through a parameter
library, dual-source cross-validation, and double-blind retesting mechanisms.