PSP Framework: A novel risk assessment method in compliance with ISO/SAE-21434
Franco Oberti, Ernesto Sánchez, Alessandro Savino, Filippo Parisi, Stefano Di Carlo · 2023
As more cars connect to the internet and other devices, the automotive market has become a lucrative target for cyberattacks. This has made the industry more vulnerable to security threats. As a result, car manufacturers and governments are working together to reduce risks and prevent cyberattacks in the automotive sector. However, existing attack feasibility models derived from the information technology field may not always provide accurate assessments of the potential risks faced by Vehicle Electronic Control Units in different operating conditions and domains. To address this issue, This paper introduces the PUNCH Softronix and Politecnico di Torino (PSP) framework. This framework is designed to provide accurate assessments compatible with the attack feasibility models defined by the automotive product security standards. The PSP framework utilizes social sentiment analysis to evaluate the real threat risk levels.