PSP Framework: A novel risk assessment method in compliance with ISO/SAE-21434

TL;DR

This paper introduces the PSP framework, a new risk assessment method tailored for automotive cybersecurity, integrating social sentiment analysis to improve accuracy in evaluating threats to vehicle electronic systems.

Contribution

The PSP framework is a novel approach that aligns with ISO/SAE-21434 standards and enhances risk assessment accuracy using social sentiment analysis.

Findings

Provides a more accurate risk assessment model for automotive cybersecurity

Aligns with ISO/SAE-21434 standards for industry compliance

Utilizes social sentiment analysis to evaluate threat levels

Abstract

As more cars connect to the internet and other devices, the automotive market has become a lucrative target for cyberattacks. This has made the industry more vulnerable to security threats. As a result, car manufacturers and governments are working together to reduce risks and prevent cyberattacks in the automotive sector. However, existing attack feasibility models derived from the information technology field may not always provide accurate assessments of the potential risks faced by Vehicle Electronic Control Units in different operating conditions and domains. This paper introduces the PUNCH Softronix and Politecnico di Torino (PSP) framework to address this issue. This framework is designed to provide accurate assessments compatible with the attack feasibility models defined by the automotive product security standards. The PSP framework utilizes social sentiment analysis to evaluate the real threat risk levels.