## 3 Methodology
### Attack Vector Analysis from Expert Surveys
Availability and integrity are the most frequently affected security properties, while confidentiality is highly affected by eavesdropping, timing, replay, relay, Sybil, impersonation, falsified information, and cloaking attacks. The average CVSS scores indicate that most of these attacks range from medium to high severity, with eavesdropping, Sybil, replay, black hole, falsified information and cloaking attacks having the highest average scores, and the standard deviations (Std. Dev) for the CVSS scores range from 1.1 to 1.9, indicating a moderate spread of severity ratings within each attack type, specifically, eavesdropping attack (7.19, Std. Dev: 1.3), Sybil attack (6.76, Std. Dev: 1.6), replay attack (6.35, Std. Dev: 1.7), black hole attack (6.0, Std. Dev: 1.8), falsified information attack (6.22, Std. Dev: 1.8), and cloaking attack (6.66, Std. Dev: 1.5). Physical attack vectors, including blinding, disruptive, blind spot exploitation, and sensor interference attacks, often involve low complexity, as seen in blinding, disruptive, blind \begin{table}
\begin{tabular}{c c c c c c c c c c} \hline \hline
**Attack** & **Type** & **AV** & **AC** & **AT** & **PR** & **UI** & **C** & **I** & **A** & **Avg. CVSS Score (Std. Dev)** \\ \hline \multirow{3}{*}{Eavesdropping Attack} & P(0\%) & & & & & & & & & \\  & N(60\%) & L(90\%) & N(60\%) & N(50\%) & N(80\%) & N(90\%) & N(40\%) & N(60\%) & \\  & N(60\%) & L(90\%) & P(40\%) & L(20\%) & R(20\%) & L(20\%) & L(10\%) & L(0\%) & 7.19 (1.3) \\  & L(30\%) & & & & & H(20\%) & H(80\%) & H(50\%) & H(40\%) & \\ \hline \multirow{3}{*}{Sybil Attack} & P(0\%) & & & & & & & & \\  & N(70\%) & L(10\%) & N(10\%) & N(60\%) & N(60\%) & N(20\%) & N(0\%) & N(10\%) & \\  & A(30\%) & H(90\%) & P(90\%) & L(90\%) & R(40\%) & R(40\%) & H(60\%) & H(80\%) & H(70\%) & \\ \hline \multirow{3}{*}{Bind Spot Exploation} & P(50\%) & & & & & & & & & \\  & N(10\%) & L(70\%) & N(60\%) & N(70\%) & N(80\%) & N(80\%) & N(50\%) & N(10\%) & \\  & A(40\%) & H(30\%) & P(40\%) & H(20\%) & R(20\%) & L(10\%) & L(20\%) & L(40\%) & 4.4 (1.1) & \\  & L(0\%) & & & & & H(10\%) & H(30\%) & H(50\%) & \\ \hline \multirow{3}{*}{Acoustic Attack} & P(20\%) & & & & & & & & \\  & N(10\%) & L(80\%) & N(70\%) & N(90\%) & N(90\%) & N(70\%) & N(20\%) & N(20\%) & \\  & A(70\%) & H(20\%) & P(30\%) & L(10\%) & R(10\%) & L(30\%) & L(60\%) & L(30\%) & 5.03 (1.5) & \\  & L(0\%) & & & & H(0\%) & H(0\%) & H(0\%) & H(20\%) & H(50\%) & \\ \hline \multirow{3}{*}{Sensor Interference Attack} & P(0\%) & & & & & & & & & \\  & N(0\%) & L(20\%) & N(60\%) & N(60\%) & N(60\%) & N(80\%) & N(50\%) & N(10\%) & N(30\%) & \\  & A(20\%) & H(80\%) & P(40\%) & H(20\%) & R(20\%) & H(20\%) & H(60\%) & H(40\%) & \\ \hline \multirow{3}{*}{Impersonation Attack} & P(10\%) & & & & & & & & & \\  & N(40\%) & H(20\%) & N(10\%) & N(60\%) & N(60\%) & N(20\%) & N(10\%) & N(30\%) & \\  & A(30\%) & H(80\%) & P(90\%) & L(10\%) & R(40\%) & H(50\%) & L(30\%) & L(30\%) & L(30\%) & 5.41 (1.4) & \\  & L(0\%) & & & & H(30\%) & H(60\%) & H(60\%) & H(40\%) & \\ \hline \multirow{3}{*}{Falsified Information Attack} & P(10\%) & & & & & & & & & \\  & N(50\%) & L(20\%) & N(30\%) & N(40\%) & N(60\%) & N(50\%) & N(10\%) & N(20\%) & \\  & A(40\%) & H(80\%) & P(70\%) & L(10\%) & R(40\%) & L(10\%) & L(10\%) & L(30\%) & 6.22 (1.8) & \\ \cline{1-1}  & L(0\%) & & & & & & & & & \\ \hline \multirow{3}{*}{Closking Attack} & P(10\%) & & & & & & & & & \\ \cline{1-1}  & N(30\%) & L(10\%) & N(10\%) & N(20\%) & N(80\%) & N(30\%) & N(50\%) & N(20\%) & \\ \cline{1-1}  & A(20\%) & H(90\%) & P(90\%) & H(50\%) & R(20\%) & H(70\%) & H(90\%) & H(50\%) & \\ \hline \end{tabular}
\end{table} 
Table 2: _Cont._spot exploitation, and sensor interference attacks. These attacks frequently require no preconditions and no user interaction, making them particularly challenging to defend against. The Privileges Required for these attacks are typically none or low, increasing the potential attacker base. In terms of impact, these attacks primarily affect availability and integrity.