VATT&EK: Formalization of Cyber Attacks on Intelligent Transport Systems - a TTP based approach for Automotive and Rail
Ali Recai Yekta, Dominik Spychalski, Erhan Yekta, Cenk Yekta, Stefan Katzenbeisser · 2023
The rapid evolution of Intelligent Transport Systems (ITS) has heightened the cyber vulnerability of modern vehicles, transforming them from isolated mechanical entities to complex interconnected systems. This paper bridges the existing gaps in the formalization of cyber attacks on ITS, extending common frameworks, like MITRE ATT&CK, to encompass the unique challenges of the automotive and rail sectors. We introduce a multi-modal approach grounded in real-world events, exploring the implications of new technologies in ITS and the convergence of IT and OT security in transportation. Our VATT&EK framework, leveraging the Tactics, Techniques, and Procedures (TTP) approach, offers a structured categorization of adversarial tactics and techniques, aiding in systematic threat pinpointing and prioritization. This not only guides the formulation of vehicle specifications but also informs penetration testing procedures and real-time threat detection capabilities. By providing a common language and taxonomy for discussing vehicle-related cyber threats, our work fosters collaboration among researchers, manufacturers, and security professionals, ensuring strengthened security postures in tandem with vehicular technological advancements.