Security Threat Analysis Tool "Attack Tree"

An Attack Tree is a threat analysis tool that assists in measures to protect autonomous vehicles from threats such as hacking.

With the growing interest in autonomous driving, the complexity of onboard systems is expected to increase, necessitating not only safety requirements but also security assessments. In Europe, security evaluations are already being conducted in parallel with safety assessments, and one method for conducting security evaluations is the attack tree. The Attack Tree security threat analysis tool provided by Isograph (UK) is designed to assist in evaluating security vulnerabilities in software. For example, it allows for the following expressions: - A visual representation of how an attack can succeed - A probability distribution showing which attacks have the highest likelihood of success Furthermore, it can also represent indicators such as: - The method that is the lowest cost and has the highest probability of success for the attacker - The difficulty of executing the attack and whether special equipment is required Security assessments are directly related to the safety of vehicles. By referencing the probabilities of threats identified using the Attack Tree within the functional safety Fault Tree, it becomes possible to conduct evaluations that consider both safety and threats.

others