Symbiotic Analysis of Security Assessment and Penetration Tests Guiding Real L4 Automated City Shuttles

Article Article scientifique Article Symbiotic Analysis of Security Assessment and Penetration Tests Guiding Real L4 Automated City Shuttles eng 2023-03-20 2023-03-20 author Benyahya Meriem 0000-0003-1124-4214 944425 Recherche et enseignement GSEM (RESEM) author Bergerat Pierre 0009-0009-7737-9315 899612 author Collen Anastasija 0000-0002-3214-8515 814362 Centre universitaire d'informatique (CUINF) author Nijdam Niels Alexander 0000-0002-0172-6319 672915 Recherche et enseignement GSEM (RESEM) 198-218 10.3390/telecom4010012 2673-4001 https://www.mdpi.com/2673-4001/4/1/12 <p>The Connected Automated Vehicle (CAV)’s deployment is proof of the wide evolution of autonomous driving technologies enabling vehicles to gradually dispose of their drivers. Within the scope of smart cities, such innovation has given rise to a new type of CAV: the Automated City Shuttle (ACS). Foreseen as the new paradigm aiming to shape the public transport model, the ACS elicits a plurality of new applications, such as the on-demand service in which a driverless shuttle offers the desired ride without human intervention. However, such a model raises cybersecurity concerns through the numerous attack surfaces and vehicle hyperconnection. This phenomenon was highlighted in several studies on CAVs, but very few research works tackled the specific case of ACSs, whose challenges and risks far exceed those of personal vehicles. The present work offers a comprehensive investigation of cybersecurity attacks, demonstrates a performed risk assessment based on the ISO/SAE 21434 standard, and showcases a penetration test over a real ACS of automation level four (L4) according to the Society of Automotive Engineering (SAE)’s ranking. Based on our experiments, we leverage fundamental cybersecurity recommendations with a focus on the ACS’s physical security.</p> Automated city shuttles Connected automated vehicles Cybersecurity ISO/SAE 21434 Penetration testing Risk analysis Dewey 330/650 Dewey 025.063 European Commission SHared automation Operating models for Worldwide adoption 875530 SHOW EU H2020 European Commission ULTIMO - Advancing Sustainable User-centric Mobility with Automated Vehicles 101077587 ULTIMO EU HE 9 Faculté d'économie et de management S 13 Centre universitaire d'informatique 0D3 false Telecom 4 1 df17f45c-0bb4-436d-81ed-53b612d7b513 Article (Published version) Public Article-scientifique-from-unpaywall.pdf 3966425 application/pdf CC BY 63affa6ad449b34f0f80700d0a71794a82b90391a9edf783a1d275767b3ab59c openAccess Faculté d'économie et de management Centres et instituts / Centre universitaire d'informatique

Title	Published in	Access level	OA Policy	Year	Views	Downloads

Symbiotic Analysis of Security Assessment and Penetration Tests Guiding Real L4 Automated City Shuttles	Telecom			2023	85	100

Archive ouverte UNIGE

Bergerat, Pierre