Research Article

A Comparative Study of JASO TP15002-Based Security Risk Assessment Methods for Connected Vehicle System Design

Table 19

: Exploitability for RSS-CVSSv3: Value for Rank of Each Metric is defined in[5].

Metric Rank Criteria Value

Access Vector Network (N) Mobile Communication, GPA 0.85
(AV) Adjacent (A) BT/Wi-Fi/IR, DSRC 0.62
Local (L) OBD-II, Radar/Sensor 0.55
Physical (P) SD/USB 0.20

Access Complexity Low (L) 1 0.77
(AC) High (H) 2 or more 0.44

Privilege Required None (N) 0 0.85
(PR) Low (L) 1 0.62 (if Scope=U)
0.68 (if Scope=C)
High (H) 2 or more 0.27 (if Scope=U)
0.50 (if Scope=C)

User Interaction None (N) 0.85
(UI) Required (R) 0.62