Search

The increased automation and connectivity of vehicles and road infrastructure can make future transportation systems more efficient and smarter and enable new transportation business models. Connected and automated vehicles (CAVs) may form a group of autonomous fleets to transform today’s shared mobility services and also play the role of mobile sensors, which share real-time traffic and road information for transportation management. However, these technological advancements also lead to new cyber and physical threats that cause safety hazards or other undesired consequences. Although there have been a large number of papers about identifying and mitigating each type of threat, the lack of design support still challenges security engineering for developing CAVs. This limits the engineering capabilities of original equipment manufacturers to prioritize among multiple system properties, including safety, security, and privacy, and dealing with ever-changing attack surfaces and the power of attackers. This paper surveys security vulnerabilities and defense mechanisms for CAVs from an engineering design perspective. We illustrate how to identify and mitigate physical threats that compromise the safety of individual vehicles and cyber threats that disrupt newly CAV-enabled transportation services in a systematic way. An integrated security engineering process and a multi-layer design framework are presented for providing traceability and guidance in threat identification and mitigation. [ABSTRACT FROM AUTHOR]

As automotive data increase in scale and value, it is important to understand who owns and has the ability to access information generated by connected vehicles. The plummeting costs of sensing, connectivity, and storage mean that original equipment manufacturers (OEMs), their suppliers, and end users have access to more realtime data than ever [1]. Data collection is complicated by the public?s perception that data are kept locally to the vehicle, as opposed to being sent to the connected car service. We have seen in other industries how confusion about terms of service can lead to large and potentially harmful misunderstanding. This article explores the complexi ties of automotive data ownership, privacy, accessibility, and stewardship by comparing and contrasting automotive terms of service ("Terms"), agreements critical to an emerging US$11.6-$92.6 billion market, from multiple stakeholders? perspectives [2]. In the comparison, we aim to highlight the strengths, weaknesses, and opportunities that may prevent connected-vehicle services from suffering the same pitfalls as related industries. Our discussion is highlighted in a matrix comparing and contrasting information ownership, access, and control Terms for customers, OEMs, their subsidiaries, partners, affiliates in the U.S. market, and regulatory agencies. The results are useful for service designers, end users, and regulators to evaluate Terms for differing and often competing interests and constraints. [ABSTRACT FROM AUTHOR]