5.3 Communications channels permit overwrite of vehicle held data/code 5.4 Communications channels permit erasure of vehicle held data/code 5.5 Communications channels permit introduction of data/code to the vehicle (write data code) 6 Communication channels permit untrusted/unreliable messages to be accepted or are vulnerable to session hijacking/replay attacks 6.1 Accepting information from an unreliable or untrusted source 6.2 Man in the middle attack/ session hijacking 6.3 Replay attack, for example an attack against a communication gateway allows the attacker to downgrade software of an ECU or firmware of the gateway 7 Information can be readily disclosed. For example through eavesdropping on communications or through allowing unauthorized access to sensitive files or folders 7.1 Interception of information / interfering radiations / monitoring communications 7.2 Gaining unauthorised access to files or data 8 Denial of service attacks via communication channels to disrupt vehicle functions 8.1 Sending a large number of garbage data to vehicle information system, so that it is unable to provide services in the normal manner 8.2 Black hole attack, in order to disrupt communication between vehicles the attacker is able to block messages between the vehicles 9 An unprivileged user is able to gain privileged access to vehicle systems 9.1 An unprivileged user is able to gain privileged access, for example root access 10 Viruses embedded in communication media are able to infect vehicle systems 10.1 Virus embedded in communication media infects vehicle systems 11 Messages received by the vehicle (for example X2V or diagnostic messages), or transmitted within it, contain malicious content 11.1 Malicious internal (e.g. CAN) messages 11.2 Malicious V2X messages, e.g. infrastructure to vehicle or vehicle-vehicle messages (e.g. CAM, DENM) 11.3 Malicious diagnostic messages 11.4 Malicious proprietary messages (e.g. those normally sent from OEM or component/system/function supplier) 4.3.3. Threats to vehicles regarding their update 12 Misuse or compromise of update procedures 12.1 Compromise of over the air software update procedures, This includes fabricating system update program or firmware
Examples of mitigation for “Unintended human actions ” Examples of mitigation to the threats which are related to “Unintended human actions” are listed in Table B4. Table B4 Examples of mitigation to the threats which are related to “Unintended human actions” Table 1 reference Threats relating to “Unintended human actions” Ref Mitigation 14.1 Misconfiguration of equipment by maintenance community or owner during installation/repair/use causing unintended consequences M17 Measures shall be implemented for defining and controlling maintenance procedures 14.2 Erroneous use or administration of devices and systems (inc. OTA updates) 15.1 Innocent victim (e.g. owner, operator or maintenance engineer) is tricked into taking an action to unintentionally load malware or enable an attack M18 Measures shall be implemented for defining and controlling user roles and access privileges, based on the principle of least access privilege 15.2 Defined security procedures are not followed M19 Organizations shall ensure security procedures are defined and followed Examples of mitigation for “External connectivity and connections ” Examples of mitigation to the threats which are related to “external connectivity and connections ” are listed in Table B5. Table B5 Examples of mitigation to the threats which are related to “external connectivity and connections” Table 1 reference Threats to “External connectivity” Ref Mitigation 16.1 Manipulation of functions designed to remotely operate vehicle systems, such as remote key, immobiliser, and charging pile M20 Security controls shall be applied to systems that have remote access 16.2 Manipulation of vehicle telematics (e.g. manipulate temperature measurement of sensitive goods, remotely unlock cargo doors)