Attack scenarios based on UNECE automotive cybersecurity regulation (UNR155)

Abstract

As the global automotive market is expected to grow more rapidly, concerns for security attacks or vulnerabilities are increasing as well. In order to prevent these risks, UNECE UNR 155 has been discussed, which is one of the influential automotive cyber security regulations. However, many global OEMs and parts suppliers are having difficulty understanding the concerned automotive attack surfaces and threats or vulnerabilities to satisfy the requirements of UNR 155. hi this paper, we classified major automotive attack surfaces into four categories according to communication range and purpose. Furthermore, we derived the possible attack scenarios with the attack surface, precondition, impact, and feasibility based on UNR 155 Annex 5 - Part A.