Complying with ISO 26262 and ISO/SAE 21434: A Safety and Security Co-Analysis Method for Intelligent Connected Vehicle
A cyber-physical system (CPS) integrates communication and automation technologies into the operational processes of physical systems. Nowadays, as a complex CPS, an intelligent connected vehicle (ICV) may be exposed to accidental functional failures and malicious attacks. Therefore, ensuring the IC...
| Main Authors: | , , , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
MDPI AG
2024-03-01
|
| Series: | Sensors |
| Subjects: | |
| Online Access: | https://www.mdpi.com/1424-8220/24/6/1848 |
| _version_ | 1797239389230727168 |
|---|---|
| author | Yufeng Li Wenqi Liu Qi Liu Xiangyu Zheng Ke Sun Chengjian Huang |
| author_facet | Yufeng Li Wenqi Liu Qi Liu Xiangyu Zheng Ke Sun Chengjian Huang |
| author_sort | Yufeng Li |
| collection | DOAJ |
| description | A cyber-physical system (CPS) integrates communication and automation technologies into the operational processes of physical systems. Nowadays, as a complex CPS, an intelligent connected vehicle (ICV) may be exposed to accidental functional failures and malicious attacks. Therefore, ensuring the ICV’s safety and security is crucial. Traditional safety/security analysis methods, such as failure mode and effect analysis and attack tree analysis, cannot provide a comprehensive analysis for the interactions between the system components of the ICV. In this work, we merge system-theoretic process analysis (STPA) with the concept phase of ISO 26262 and ISO/SAE 21434. We focus on the interactions between components while analyzing the safety and security of ICVs to reduce redundant efforts and inconsistencies in determining safety and security requirements. To conquer STPA’s abstraction in describing causal scenarios, we improved the physical component diagram of STPA-SafeSec by adding interface elements. In addition, we proposed the loss scenario tree to describe specific scenarios that lead to unsafe/unsecure control actions. After hazard/threat analysis, a unified risk assessment process is proposed to ensure consistency in assessment criteria and to streamline the process. A case study is implemented on the autonomous emergency braking system to demonstrate the validation of the proposed method. |
| first_indexed | 2024-04-24T17:50:45Z |
| format | Article |
| id | doaj.art-96896df587124c10b40574a8cc385f77 |
| institution | Directory Open Access Journal |
| issn | 1424-8220 |
| language | English |
| last_indexed | 2024-04-24T17:50:45Z |
| publishDate | 2024-03-01 |
| publisher | MDPI AG |
| record_format | Article |
| series | Sensors |
| spelling | doaj.art-96896df587124c10b40574a8cc385f772024-03-27T14:03:57ZengMDPI AGSensors1424-82202024-03-01246184810.3390/s24061848Complying with ISO 26262 and ISO/SAE 21434: A Safety and Security Co-Analysis Method for Intelligent Connected VehicleYufeng Li0Wenqi Liu1Qi Liu2Xiangyu Zheng3Ke Sun4Chengjian Huang5School of Computer Engineering and Science, Shanghai University, Shanghai 200444, ChinaSchool of Computer Engineering and Science, Shanghai University, Shanghai 200444, ChinaSchool of Computer Engineering and Science, Shanghai University, Shanghai 200444, ChinaSchool of Computer Engineering and Science, Shanghai University, Shanghai 200444, ChinaSchool of Computer Engineering and Science, Shanghai University, Shanghai 200444, ChinaSchool of Computer Engineering and Science, Shanghai University, Shanghai 200444, ChinaA cyber-physical system (CPS) integrates communication and automation technologies into the operational processes of physical systems. Nowadays, as a complex CPS, an intelligent connected vehicle (ICV) may be exposed to accidental functional failures and malicious attacks. Therefore, ensuring the ICV’s safety and security is crucial. Traditional safety/security analysis methods, such as failure mode and effect analysis and attack tree analysis, cannot provide a comprehensive analysis for the interactions between the system components of the ICV. In this work, we merge system-theoretic process analysis (STPA) with the concept phase of ISO 26262 and ISO/SAE 21434. We focus on the interactions between components while analyzing the safety and security of ICVs to reduce redundant efforts and inconsistencies in determining safety and security requirements. To conquer STPA’s abstraction in describing causal scenarios, we improved the physical component diagram of STPA-SafeSec by adding interface elements. In addition, we proposed the loss scenario tree to describe specific scenarios that lead to unsafe/unsecure control actions. After hazard/threat analysis, a unified risk assessment process is proposed to ensure consistency in assessment criteria and to streamline the process. A case study is implemented on the autonomous emergency braking system to demonstrate the validation of the proposed method.https://www.mdpi.com/1424-8220/24/6/1848intelligent connected vehiclesystem-theoretic process analysisISO 26262ISO/SAE 21434loss scenario tree |
| spellingShingle | Yufeng Li Wenqi Liu Qi Liu Xiangyu Zheng Ke Sun Chengjian Huang Complying with ISO 26262 and ISO/SAE 21434: A Safety and Security Co-Analysis Method for Intelligent Connected Vehicle Sensors intelligent connected vehicle system-theoretic process analysis ISO 26262 ISO/SAE 21434 loss scenario tree |
| title | Complying with ISO 26262 and ISO/SAE 21434: A Safety and Security Co-Analysis Method for Intelligent Connected Vehicle |
| title_full | Complying with ISO 26262 and ISO/SAE 21434: A Safety and Security Co-Analysis Method for Intelligent Connected Vehicle |
| title_fullStr | Complying with ISO 26262 and ISO/SAE 21434: A Safety and Security Co-Analysis Method for Intelligent Connected Vehicle |
| title_full_unstemmed | Complying with ISO 26262 and ISO/SAE 21434: A Safety and Security Co-Analysis Method for Intelligent Connected Vehicle |
| title_short | Complying with ISO 26262 and ISO/SAE 21434: A Safety and Security Co-Analysis Method for Intelligent Connected Vehicle |
| title_sort | complying with iso 26262 and iso sae 21434 a safety and security co analysis method for intelligent connected vehicle |
| topic | intelligent connected vehicle system-theoretic process analysis ISO 26262 ISO/SAE 21434 loss scenario tree |
| url | https://www.mdpi.com/1424-8220/24/6/1848 |
| work_keys_str_mv | AT yufengli complyingwithiso26262andisosae21434asafetyandsecuritycoanalysismethodforintelligentconnectedvehicle AT wenqiliu complyingwithiso26262andisosae21434asafetyandsecuritycoanalysismethodforintelligentconnectedvehicle AT qiliu complyingwithiso26262andisosae21434asafetyandsecuritycoanalysismethodforintelligentconnectedvehicle AT xiangyuzheng complyingwithiso26262andisosae21434asafetyandsecuritycoanalysismethodforintelligentconnectedvehicle AT kesun complyingwithiso26262andisosae21434asafetyandsecuritycoanalysismethodforintelligentconnectedvehicle AT chengjianhuang complyingwithiso26262andisosae21434asafetyandsecuritycoanalysismethodforintelligentconnectedvehicle |