Vehicle Cybersecurity Verification Apparatus TARA Re-execution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current vehicle cybersecurity systems face challenges in efficiently verifying security goals during re-execution of Threat Analysis Risk Assessment (TARA), particularly in applying assumption information to each threat scenario, which increases verification time.
Innovation Solution
An apparatus and method for verifying a security goal in vehicle cybersecurity that allows assumption information to be applied to each threat for each attack path based on a threat scenario during the re-execution of TARA, enabling the addition of the security goal to assumption information and re-calculating the attack feasibility rating.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If assumption information is individually input for each threat scenario during TARA re-execution, then verification completeness is improved, but verification time increases
Solution Approach 1:
The patent applies preliminary action by storing assumption information in a database during the initial TARA execution. When TARA is re-executed to verify security goals, the system automatically retrieves pre-stored assumption information rather than requiring manual re-input, thus maintaining verification completeness while significantly reducing verification time.
2Productivity
If assumption information is automatically applied from database during TARA re-execution, then verification efficiency is improved, but information accuracy may deteriorate
Solution Approach 1:
The patent implements feedback by allowing users to review and modify assumption information retrieved from the database before it is applied during TARA re-execution. This feedback mechanism ensures that automatically applied information remains accurate and up-to-date while maintaining high verification efficiency.
3Reliability
If security goal is added to assumption information during item definition, then resource ensuring is improved, but system complexity increases
Solution Approach 1:
The patent applies merging by integrating the security goal directly into the assumption information structure during item definition. This combination allows the system to ensure resources for security goal verification without requiring separate complex management systems, thus improving resource ensuring while minimizing system complexity.
Data Source
AI summary
An apparatus for verifying a security goal for vehicle cybersecurity includes an input device configured to receive a user input. The apparatus also includes a processor configured to derive a security goal linked to threat mitigation information by performing Threat Analysis Risk Assessment (TARA). The processor may also be configured to re-calculate an Attack Feasibility Rating based on assumption information corresponding to the security goal linked to the threat mitigation information, when entering into a mode TARA (ReCAL of re-executing the Threat Analysis Risk Assessment to verify completeness of the security goal.