A computer-implemented method for simulation and evaluation of a connected vehicle ecosystem using one or more analytical attack graphs, AAGs, each AAG representative of potential lateral movement within the connected vehicle ecosystem, the method being executed by one or more processors and comprising: determining a set of components within the connected vehicle ecosystem, components within the set of components representing at least one layer within the connected vehicle ecosystem, wherein each component comprises software executed within a layer of the connected vehicle ecosystem, the software being binary firmware; for each component in the set of components: providing a set of facts representative of the respective component, wherein providing a set of facts representative of the respective component comprises executing binary code analysis and mapping the binary firmware into a software bill of materials, SBOM, to define the set of facts, and providing a component digital twin using the set of facts; defining a set of digital twins including digital twins of components in the set of components; generating, using the set of digital twins, at least one AAG representative of potential lateral movement between components of the at least one layer within the connected vehicle ecosystem, the at least one AAG representing a contextual digital twin of components operating within the connected vehicle ecosystem; evaluating the connected vehicle ecosystem using the at least one AAG; and based on the evaluating, selectively adjusting one or more remedial measures within the connected vehicle ecosystem in an effort to mitigate risk. determining a set of components within the connected vehicle ecosystem, components within the set of components representing at least one layer within the connected vehicle ecosystem, wherein each component comprises software executed within a layer of the connected vehicle ecosystem, the software being binary firmware; for each component in the set of components: providing a set of facts representative of the respective component, wherein providing a set of facts representative of the respective component comprises executing binary code analysis and mapping the binary firmware into a software bill of materials, SBOM, to define the set of facts, and providing a component digital twin using the set of facts; providing a set of facts representative of the respective component, wherein providing a set of facts representative of the respective component comprises executing binary code analysis and mapping the binary firmware into a software bill of materials, SBOM, to define the set of facts, and providing a component digital twin using the set of facts; defining a set of digital twins including digital twins of components in the set of components; generating, using the set of digital twins, at least one AAG representative of potential lateral movement between components of the at least one layer within the connected vehicle ecosystem, the at least one AAG representing a contextual digital twin of components operating within the connected vehicle ecosystem; evaluating the connected vehicle ecosystem using the at least one AAG; and based on the evaluating, selectively adjusting one or more remedial measures within the connected vehicle ecosystem in an effort to mitigate risk.