Model-Based Security Evaluation of Vehicular Networking Architectures

In the design and development process of a new vehicle, different automotive networking architectures have to be assessed and compared. At present, these evaluations focus on aspects like performance or costs as a basis for decision. Although the increased connectivity of vehicles leads to an extended security-risk for the vehicle and road users, security aspects are currently not considered systematically in the development process due to a lack of appropriate methodical support. In this paper, we introduce a method for model-based security evaluation of in-vehicle network architectures that allows to systematically evaluate and compare the strengths and weaknesses of different vehicular network architectures at an early stage of the development life cycle. The method is based on a component-wise assessment of the security characteristics of the architecture and the integration of scores in a multi-dimensional architecture score.