Security threats identification and definition in early design phases of automotive IT services

Abstract

As part of security and privacy threats modelling process, the systematic identification, definition and analysis of threats is important to accurately highlight the resources that would ultimately play a critical role in achieving the organization's business objectives. We show how we proceeded to identify and formalize the security threats based on the automotive emergency service use-case scenario. Furthermore, we propose a technique to scale for scenarios with many stakeholders. Even though the related information system was in its concept phase (i.e. only coarse risk assessment was possible), we focused on the rigorous dichotomy of the business assets and critical resources and the mapping in-between via the security goals set definition, a technique that facilitates the definition of the attacks' goals, as well as a more precise evaluation of the impacts on organization business assets.