A Comparative Study of JASO TP15002-Based Security Risk Assessment Methods for Connected Vehicle System Design

Table 17

: Prioritized Threat List.

#

Where

Who

When

Why

What

(At,

Asset)

AV

AC

Au

AE

EF-C

EF-I

EF-A

EF

Risk Value

117

Mobile (Telematics)

Outsider

In regular use

Maliciously

steal information

Telematics

Authentication information

N

L

S

8.0

C

C

N

9.2

8.47

118

Mobile (Telematics)

Outsider

In regular use

Maliciously

steal information

Telematics

Personal information

N

L

S

8.0

C

C

N

9.2

8.47

72

Mobile (Telematics)

Outsider

In regular use

Maliciously

cause malfunction

CGW

Control function

N

M

S

6.8

N

C

C

9.2

7.95

6

CWC (TPMS)

Outsider

regular use

Maliciously

cause malfunction

Power-train

Control function

A

L

S

5.1

N

C

C

9.2

7.15

7

CWC (TPMS)

Outsider

regular use

Maliciously

interfere with access

Power-train

Authentication function

A

L

S

5.1

N

C

C

9.2

7.15

8

CWC (TPMS)

Outsider

regular use

Maliciously

steal information

Power-train

Authentication information

A

L

S

5.1

C

C

N

9.2

7.15

87

DSRC (ITS)

Outsider

In regular use

Maliciously

steal information

ITS

Authentication information

A

L

S

5.1

C

C

N

9.2

7.15

141

BT/Wi-Fi/IR (Infotainment)

Outsider

In regular use

Maliciously

interfere with access to

Infotainment

Authentication function

A

L

S

5.1

N

C

C

9.2

7.15

142

BT/Wi-Fi/IR (Infotainment)

Outsider

In regular use

Maliciously

steal information

Infotainment

Authentication information

A

L

C

5.1

C

C

N

9.2

7.15

68

CWC (TPMS)

Outsider

in regular use

Maliciously

cause malfunction

CGW

Control function

A

M

S

4.4

N

C

C

9.2

6.81

70

DSRC (ITS)

Outsider

In regular use

Maliciously

cause malfunction

CGW

Control function

A

M

S

4.4

N

C

C

9.2

6.81

74

BT/Wi-Fi/IR (Infotainment)

Outsider

In regular use

Maliciously

cause malfunction

CGW

Control function

A

M

S

4.4

N

C

C

9.2

6.81

63

Radar/Sensor

Outsider

In regular use

Maliciously

cause malfunction

ADAS

Control function

L

L

N

3.9

N

C

C

9.2

6.59

64

OBD-II

Outsider

In regular use

Maliciously

cause malfunction

CGW

Control function

L

L

N

3.9

N

C

C

9.2

6.59

65

OBD-II

Owner/User

In regular use

Maliciously

cause malfunction

CGW

Control function

L

L

N

3.9

N

C

C

9.2

6.59

66

OBD-II

Maintenance staff

In maintenance

Accidentally

cause malfunction

CGW

Control function

L

L

N

3.9

N

C

C

9.2

6.59