Research Article
A Comparative Study of JASO TP15002-Based Security Risk Assessment Methods for Connected Vehicle System Design
Table 19
: Exploitability for RSS-CVSSv3: Value for Rank of Each Metric is defined in[
5].
| Metric | Rank | Criteria | Value |
| Access Vector | Network (N) | Mobile Communication, GPA | 0.85 | (AV) | Adjacent (A) | BT/Wi-Fi/IR, DSRC | 0.62 | | Local (L) | OBD-II, Radar/Sensor | 0.55 | | Physical (P) | SD/USB | 0.20 |
| Access Complexity | Low (L) | 1 | 0.77 | (AC) | High (H) | 2 or more | 0.44 |
| Privilege Required | None (N) | 0 | 0.85 | (PR) | Low (L) | 1 | 0.62 (if Scope=U) | | | | 0.68 (if Scope=C) | | High (H) | 2 or more | 0.27 (if Scope=U) | | | | 0.50 (if Scope=C) |
| User Interaction | None (N) | | 0.85 | (UI) | Required (R) | | 0.62 |
|
|