Threat Analysis is an important part of Automotive Cybersecurity Process to determine risk and develop security measures.
A key activity in the Threat Analysis is to assess the attack surface to determine various attack paths that could lead to the various damage scenarios for different system assets.
Attack Surface assessment is part of the Threat Analysis and Risk assessment model as suggested by ISO/SAE 21434 standard.
This presentation describes in detail with example use cases and reference vehicle architecture, how to perform the attack surface assessment.
The presentation provides a library of attacks possible for the reference architecture and their feasibility rating based on the method suggested in the ISO/SAE 21434 standard.
A great deal of work has been done on this topic and credits to those work whose data has been used as an input for the preparation of this presentation.