A Comparative Study of JASO TP15002-Based Security Risk Assessment Methods for Connected Vehicle System Design

Table 13

: Threat List.

#	Where	At	Asset	Who	When	Why	What
1	OBD-II	Power-train	Control function	Maintenance staff	In maintenance	Accidentally	cause malfunction
6	CWC (TPMS)	Power-train	Control function	Outsider	In regular use	Maliciously	cause malfunction
10	DSRC (ITS)	Power-train	Control function	Outsider	In regular use	Maliciously	cause malfunction
31	Mobile (Telematics)	Chassis	Control function	Outsider	In regular use	Maliciously	cause malfunction
32	BT/Wi-Fi/IR (Infotainment)	Chassis	Control function	Outsider	In regular use	Maliciously	cause malfunction
34	SD/USB (Infotainment)	Chassis	Control function	Owner/User	In regular use	Accidentally	infect with malware
52	CWC (TPMS)	ADAS	Control function	Outsider	In regular use	Maliciously	cause malfunction
55	DSRC (ITS)	ADAS	Location information	Outsider	In regular use	Maliciously	write wrong data
56	Mobile (Telematics)	ADAS	Control function	Outsider	In regular use	Maliciously	cause malfunction
64	OBD-II	CGW	Control function	Outsider	In regular use	Maliciously	cause malfunction
69	CWC (TPMS)	CGW	Flow/Storage data	Outsider	In regular use	Maliciously	write wrong data
70	DSRC (ITS)	CGW	Control function	Outsider	In regular use	Maliciously	cause malfunction
72	Mobile (Telematics)	CGW	Control function	Outsider	In regular use	Maliciously	cause malfunction
75	BT/Wi-Fi/IR (Infotainment)	CGW	Flow/Storage data	Outsider	In regular use	Maliciously	write wrong data
77	SD/USB (Infotainment)	CGW	Control function	Owner/User	In regular use	Accidentally	infect with malware