ThreatGet: Threat modeling based approach for automated and connected vehicle systems

Abstract:
Connected and automated vehicle systems need to consider a wider range of factors to ensure dependable systems. While Cyber Security is increasingly important for modern automotive systems, performance and safety is equally important. Recent events demonstrate weaknesses in current systems. Quality of life and our society depends to an high degree on trust and dependable mobility and transportation. Upcoming regulations and standards will therefore require a ongoing management of Cyber Security, Functional Safety and Safety of the Intended Functionality risks in the vehicle lifecycle. Risk management depends on identification of all risks. Due to the complexity of modern automotive systems traditional manual approaches of risk identification are challenging. We present here a model-based approach for automated risk identification by ThreatGet, a Enterprise Architect plugin developed by AIT. ThreatGet contains a formal description of potential weaknesses which can be applied to different automotive systems to identify applicable threats. In this way knowledge can be reused along multiple engineering projects.