## 3 Methodology
### Attack Vector Analysis from Expert Surveys  
A survey of various attack vectors reveals several common patterns and distinctions in how these attacks are carried out, and their potential impact. This analysis examines the attack vector, complexity, requirements, privileges, user interaction, impact on security properties, and CVSS scores for fifteen different attack types. Overall, network-based attacks are the most common, but physical and adjacent attacks also pose significant threats. Most attacks require no user interaction, highlighting the challenge of relying on user awareness for mitigation. Integrity and availability are the security properties most often affected, while confidentiality is less frequently impacted. Table 2 provides a consolidated view of the attack types, highlighting their key characteristics. \begin{table}
\begin{tabular}{c c c c c c c c c c} \hline \hline
**Attack** & **AV** & **AC** & **AT** & **PR** & **UI** & **C** & **I** & **A** & **Avg. CVSS Score (Std. Dev)** \\ \hline \multirow{3}{*}{Binding Attack} & P(50\%) & & & & & & & & & \\  & N(20\%) & L(70\%) & N(80\%) & N(80\%) & L(10\%) & N(70\%) & N(50\%) & N(20\%) & N(10\%) & \\  & A(20\%) & H(30\%) & P(20\%) & H(10\%) & R(30\%) & L(40\%) & L(60\%) & L(30\%) & 5.09 (1.5) & \\  & L(10\%) & & & & & & & & & \\ \hline \multirow{3}{*}{Jamming Attack} & P(30\%) & & & & & & & & & \\  & N(20\%) & L(70\%) & N(70\%) & L(30\%) & N(90\%) & N(90\%) & N(30\%) & N(0\%) & \\  & A(50\%) & H(30\%) & P(30\%) & H(10\%) & R(10\%) & L(10\%) & L(50\%) & L(40\%) & 5.06 (1.2) & \\  & L(10\%) & & & & & & & & & \\ \hline \multirow{3}{*}{Black Hole Attack} & P(0\%) & & & & & & & & & \\  & N(90\%) & L(80\%) & N(70\%) & N(20\%) & N(60\%) & N(30\%) & N(30\%) & N(0\%) & \\  & A(10\%) & H(20\%) & P(30\%) & H(30\%) & R(40\%) & H(20\%) & H(50\%) & H(60\%) & \\  & L(0\%) & & & & & & & & & \\ \hline \multirow{3}{*}{Taming Attack} & P(10\%) & & & & & & & & & \\  & N(60\%) & H(80\%) & P(70\%) & N(10\%) & N(70\%) & N(10\%) & N(10\%) & N(10\%) & \\  & A(10\%) & L(20\%) & N(30\%) & H(60\%) & R(30\%) & L(40\%) & L(40\%) & L(50\%) & 5.72(1.6) & \\  & L(20\%) & & & & & & & & & \\ \hline \multirow{3}{*}{Disruptive Attack} & P(70\%) & & & & & & & & & \\  & N(10\%) & L(60\%) & N(60\%) & N(40\%) & N(60\%) & N(50\%) & N(30\%) & N(0\%) & \\  & A(10\%) & H(40\%) & P(40\%) & L(30\%) & R(40\%) & L(20\%) & L(10\%) & L(10\%) & \\  & L(10\%) & & & & & & & & & \\ \hline \multirow{3}{*}{Replay Attack} & P(0\%) & & & & & & & & & \\  & N(70\%) & L(20\%) & N(80\%) & N(20\%) & N(30\%) & N(10\%) & N(0\%) & N(30\%) & \\  & A(30\%) & H(80\%) & P(20\%) & L(10\%) & R(70\%) & L(10\%) & L(10\%) & L(10\%) & \\  & L(0\%) & & & & H(70\%) & H(80\%) & H(90\%) & H(70\%) & \\ \hline \multirow{3}{*}{Replay Attack} & P(0\%) & & & & & & & & & \\  & N(30\%) & L(30\%) & N(20\%) & N(20\%) & L(30\%) & N(60\%) & L(40\%) & L(20\%) & L(20\%) & \\ \cline{1-1}  & A(60\%) & H(70\%) & P(80\%) & H(50\%) & R(40\%) & H(60\%) & H(60\%) & H(60\%) & H(20\%) & \\ \hline \end{tabular}
\end{table} 
Table 2: Survey results. Most attacks are rated as high complexity, requiring advanced techniques, though blinding, jamming, disruptive, eavesdropping, blind spot exploitation, acoustic, and sensor interference attacks also present a significant proportion of low-complexity attacks. A large proportion of attacks require preconditions, indicating that attackers often need specific vulnerabilities or setups, but blinding, jamming, disruptive, eavesdropping, blind spot exploitation, acoustic and sensor interference can often be executed without specific preconditions. Most attacks require low or no privileges, making them accessible to a wide range of attackers, whereas replay, Sybil, impersonation and falsified information attacks often require high privileges. A majority of attacks require no user interaction, making them difficult to defend against with user awareness training.