Vehicle TARA Attack-Path Analysis for Controller Security Goals
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vehicle cybersecurity standards, such as ISO/SAE 21434, require time-consuming and costly threat analysis and risk assessment (TARA) due to the complexity of attack paths and varying damage scenarios across different controllers and assets, lacking an efficient method to derive security goals for each threat scenario.
Innovation Solution
An apparatus and method for TARA that utilizes a pre-stored database to determine optimal attack paths and derive security goals by generating threat scenarios based on user input, extracting demand information, and retrieving threat and mitigation information, thereby optimizing the analysis process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If threat analysis and risk assessment is performed for each controller and asset according to ISO/SAE 21434 standards, then cybersecurity coverage is improved, but analysis time and cost increase significantly
Solution Approach 1:
The patent segments the vehicle system into multiple controllers, each with specific assets and functions. The database is organized by controller IDs, asset types, and function groups, allowing targeted analysis of specific segments rather than exhaustive analysis of the entire vehicle system. This segmentation enables efficient retrieval of relevant threat scenarios for each controller-asset combination.
Solution Approach 2:
The patent pre-stores comprehensive threat scenario databases, attack path information, and security goal templates in advance. When performing TARA, the system retrieves and adapts pre-defined threat scenarios rather than creating them from scratch. This preliminary preparation significantly reduces the time required for each analysis while maintaining comprehensive cybersecurity coverage.
2Reliability
If comprehensive threat scenarios are analyzed for all controllers, then security goal completeness is improved, but resource consumption increases
Solution Approach 1:
The patent applies local quality by customizing the threat analysis depth and scope according to each controller's specific characteristics, asset types, and function groups. Different controllers receive tailored threat scenarios and security goals based on their local requirements rather than applying a uniform comprehensive analysis to all controllers. This approach ensures security goal completeness for each controller while optimizing resource consumption by avoiding unnecessary analysis of irrelevant threat scenarios.
3Loss of information
If detailed attack path analysis is performed for each threat scenario, then threat understanding is improved, but complexity of the analysis process increases
Solution Approach 1:
The patent uses pre-defined threat scenario templates and attack path models that can be copied and adapted for different controllers. Instead of creating detailed attack path analyses from scratch for each threat scenario, the system retrieves template attack paths and customizes them based on the specific controller's assets and functions. This copying approach maintains comprehensive threat understanding while significantly reducing analysis process complexity.
Data Source
AI summary
An apparatus for performing threat analysis and risk assessment (TARA) includes an input device configured to receive an input of a user. The apparatus also includes a processor configured to generate a threat scenario based on information about a specific damage scenario, when a specific damage scenario requiring threat analysis is selected through the input device. The processor is also configured to determine information about an attack path depending on the technical services based on a pre-stored database. The processor is additionally configured to derive a security goal based on the information about the attack path.