Autonomous Vehicle Security: A Deep Dive into Threat Modeling

TL;DR

This paper surveys autonomous vehicle cybersecurity, focusing on threat modeling frameworks, attack vectors, real-world incidents, and emerging security technologies to enhance AV safety and resilience.

Contribution

It provides a comprehensive overview of threat modeling methods, attack vectors, case studies, and discusses emerging security solutions for autonomous vehicle cybersecurity.

Findings

Threat modeling frameworks like STRIDE, DREAD, and MITRE ATT&CK are essential for systematic risk identification.

Real-world incidents demonstrate the critical need for robust AV security measures.

Emerging technologies such as blockchain and AI can significantly improve AV cybersecurity.

Abstract

Autonomous vehicles (AVs) are poised to revolutionize modern transportation, offering enhanced safety, efficiency, and convenience. However, the increasing complexity and connectivity of AV systems introduce significant cybersecurity challenges. This paper provides a comprehensive survey of AV security with a focus on threat modeling frameworks, including STRIDE, DREAD, and MITRE ATT\&CK, to systematically identify and mitigate potential risks. The survey examines key components of AV architectures, such as sensors, communication modules, and electronic control units (ECUs), and explores common attack vectors like wireless communication exploits, sensor spoofing, and firmware vulnerabilities. Through case studies of real-world incidents, such as the Jeep Cherokee and Tesla Model S exploits, the paper highlights the critical need for robust security measures. Emerging technologies, including blockchain for secure Vehicle-to-Everything (V2X) communication, AI-driven threat detection, and secure Over-The-Air (OTA) updates, are discussed as potential solutions to mitigate evolving threats. The paper also addresses legal and ethical considerations, emphasizing data privacy, user safety, and regulatory compliance. By combining threat modeling frameworks, multi-layered security strategies, and proactive defenses, this survey offers insights and recommendations for enhancing the cybersecurity of autonomous vehicles.