## 4 Empirical Results
In addition, encryption keys, passwords, etc., are used to block illegal access to vehicle controllers. Therefore, secure encryption-key management is important because hackers can target related keys. As a result of the priority analysis of the detailed areas in terms of the physical security-level check, physical access control for autonomous vehicles was 66.7%, followed by physical access control for backend servers at 33.3%. In other words, the reason why the physical access control sector for vehicles was relatively important is because physical access control for the vehicle itself, which moves with the driver, was judged to be more important than the backend server infrastructure that assists in driving the vehicle. Lastly, when looking at the final priorities through the relative weights of the upper and lower areas, the establishment and implementation of a cybersecurity management system in the administrative security-level check sector was ranked first with 26.3%, encryption in the technical security-level check sector was ranked second with 23.2%, and risk assessment in the administrative security-level check sector was ranked third with 9.7%. Table 3 shows the superiority of this study through comparison with previous studies. Previous studies have focused on technical security trends and have been fragmentary, making it difficult to comprehensively examine the level of autonomous vehicle security. In this study, we comprehensively analyzed compliance with UNR no. 155, ISO/SAE 21434, etc., and combined them into administrative security/technical security/physical security items. Through this, we can effectively respond to autonomous vehicle security threats, and especially, by utilizing relative priorities, we can identify the level of autonomous vehicle security of an organization early. In other words, there are many cases where there is a lack of time and resources for checking the security level of autonomous vehicles. Therefore, if the items with the highest relative importance derived by applying AHP are checked first, the security level can be identified more quickly compared to checking all items, and the check time and cost can be reduced. In the area of autonomous vehicle security, there are difficulties due to the many tier companies to be inspected and the limited resources, such as time and manpower, for inspection. Therefore, we applied the top major items of relative importance priority, which are the results of this study, by utilizing them more. In other words, due to the characteristics of the automobile industry, which has more than 20,000 parts, there are countless tier companies to be inspected, and inspections absolutely require a lot of time and money. In addition, many tier companies must be inspected every year for automobile security, but due to the limitations of inspection personnel, usually only about half of them are inspected on-site. Therefore, we proposed and demonstrated QCs that can be used to inspect effectively. QC utilizes the relative importance priority of AHP for the overall inspection--that is, it inspects the first and second items in each administrative/technical/physical security sector. Through this, even if the Total Check (TC) is not performed, the security management level status of tier companies can be quickly identified, and the invested resources can be reduced. Therefore, if TC and QC are used effectively, efficiency and security can be secured. Looking at the QC calculation formula, the QC sum abbreviated by applying AHP among the autonomous vehicle security-check items was calculated by multiplying the obtained score of each QC item by the value of the importance weight considering the selection of security experts, relevance of hacking cases, etc., and then adding them. The weight values were three, two, and one. Then, the score was divided by the total QC score to finally obtain the percentage score of QC (PQC), as shown in Equation (3). \[