Risk Assessment of FutureVec Inc(Mock Company)

CS 573: FUNDAMENTALS OF CYBERSECURITY

Risk Assessment of FutureVec Inc

Debshikhar Das 5 April 2021

Objective To identify and acknowledge the valued assets of automotive company FutureVec Inc, analyse and asses risks associated through a threat-asset matrix.

Overview The advanced fth-generation (5G) infrastructure will not only be a sheer evolution of the current network generations but, more signi cantly, a revolution in the information and communication technology (ICT) eld. The 5G technology will ef ciently enable new secure, dependable, ultra reliable, and delay-critical services to everyone and everything, such as cognitive objects, IoT supported devices and connected vehicular systems.The number of connected vehicles and IoT enabled systems is rapidly growing and will continue to do so over the coming years. Communication of vehicles and roadside sensors with a roadside unit is intended to increase the safety, ef ciency, and convenience of the transportation system, by the exchange of critical safety and operational data. The communication can also be used to provide value added services, such as car nder, parking location and to support entertainment services (e.g. video distribution) through a cloud based Radio Access Network(RAN). LTE can signi cantly accelerate the deployment of connected vehicle communications. LTE cells can provide “beyond the line of sight” visibility i.e. beyond the range of direct communication between vehicles of 300 – 500m. It can also satisfy the tight latency requirement of connected vehicle communications, below 100ms in some use cases. Messages could be distributed in real time over LTE, eliminating the need to build a countrywide Digital Short-Range Communications (DSRC) network. Cars can leverage their increasingly inbuilt LTE connectivity; in deployments where DSRC exists, LTE would be able complement it.Because of the nature of some of the devices being connected, a real time capability is required and a grouping of sensors and devices is needed for ef cient service.

FutureVec is an upcoming car manufacturing company whose sole mission is to accelerate the globe’s transition to sustainable forms of energy and thus promoting a greener and cleaner future. They manufacture smart vehicles which promotes minimal human intervention by incorporating AI and IoT based approaches and thus work towards a technology and innovation driven future.

Drawbacks

fi

fi

fi

fi

fi

fi

fi

fi

As the number of connected vehicles and IoT enabled devices increases and use cases evolve, the volume of data will continue to increase along with the need to minimise latency.

Whilst data stored and processed centrally may be adequate for some use cases, it can be unreliable and slow for others.On the other side, vehicles themselves are now controlled by

hundreds of Electrical Control Units (ECUs) that form an internal network of devices within the vehicle.

While increasing autonomy and connectivity in vehicles and IoT devices bring many improvements in terms of functionality and convenience, it also brings a new cyber threat plane into life where such connected systems become a new target for attackers/ hackers.With advancement in technology and communication systems, hackers are coming up with innovative methods and vectors to penetrate into the network architectures of connected vehicles and IoT devices to steal, destroy or mutate data.

The three fundamental principles of security governance on whose basis we construct and de ne the threat-asset matrix is popularly known as The CIA Triad namely Con dentiality, Integrity and Availability.

Con dentiality Primary goal is to keep data secure.

At its core, the tenet of con dentiality is about keeping what needs to be private, private.

Government regulation, industry compliance requirements, expectations from your business partners and your company’s own business priorities all play a role in de ning what data needs to be kept con dential.

In practice, con dentiality is about controlling access to data so that only authorised users can access or modify it. No matter what industry a business is in, it’s that business’s responsibility to keep their data and their clients’/customers’ data out of the hands of those who would misuse it. This is perhaps then the most obvious of the three CIA components.

Con dentiality can be violated both intentionally and unintentionally, through direct attacks meant to gain access through vulnerable parts of a network or through carelessness and human error. Having strong controls and good training for employees goes a long way in maintaining a business’s con dentiality.

Integrity

fi

fi

fi

fi

fi

fi

fl

fi

fi

fi

fi

Primary goal is to keep data clean.

Integrity focuses on keeping data clean and untainted, both when it’s uploaded and when it’s stored. This means making sure only those who are allowed to modify it, modify it.

While data being leaked is a problem, having data be maliciously or accidentally altered can also create a world of problems and weeks of headaches for businesses. When this happens, trust ies out the window.

Businesses, their partners and their customers need to be able to rely on accurate, reliable, up-to-date information at all times. If this cannot be the case, there’s a problem.

This requirement isn’t just applicable to data that must be kept con dential. Content on a company’s website needs to be accurate, too. Pricing, descriptions and even store hours

Availability Primary goal is to keep data accessible.

Availability essentially means that when an authorised user needs to access data or information, they can. It can sometimes be confused with or even seem to contradict con dentiality.

While con dentiality is about making sure that only the people who need to access the data can get to it, availability is about making sure that it’s easy to access that data should an authorised person need to. This can include making sure networks and applications are running as they should, that security protocols are not hindering productivity or that a resource is on-hand for when an issue arises and needs xing.

When availability comes under attack or gets left by the wayside, business can come to a halt. Whether it’s a block on payroll or email or con dential data required to operate a business, if employees can’t get to what they need to work, well, they can’t work. Finding the balance between accessing data and making sure that your business can still operate is a key part of the CIA triad.

fi

fi

fi

Overall architecture of FutureVec secure vehicle

fi

need to all be accurate. This sort of publicly visible data must have its integrity protected as well.

Summary of Blocks SL.NO 1

BLOCK NAME

DESCRIPTION

Car Manufacturer’s Cloud The car manufacturer uses cloud technologies to host all the software deliverables and ensure 24x7 availability of resources from anywhere anytime using internet facility. Major resources would be – a. b. c. d. e. f. g.

fi

fi

2

3rd Party Suppliers

Hardened OS OS patch les Firewall software and updates Anti-Malware software and updates Threat Intelligence database Car Equipment drivers and APIs Car Sensor update

Every car manufacturer uses 3rd party equipment in their cars. The role of 3rd party vendors are becoming more important than ever due to increase in compliance and compatibility requirements at the software domain.

To ensure end-to-end security and safety of the smart car, both the OEM and 3rd party must ensure that all the hardware and software must work in tandem. The development, testing and delivery of the hardware and software happens jointly to avoid gaps at the endproduct. This is where 3rd parties need to access OEM’s cloud to test and deliver their software which is eventually delivered to the car. No 3rd party can upload their software directly to the car without getting it tested/veri ed by the OEM and it is OEM’s responsibility to certify the software and upload the same to the car.

BLOCK NAME

DESCRIPTION

3

Insurers / Auditors

For smart car platform, the role of the Insurer is to collect speci c data points from the car on their personal clouds to perform following functions – • Set the insurance premium based on driver’s driving skills • Assess / Audit the damage remotely • Settle the claim • Remotely check the car documents and alert the owner about renewals etc.

4

Car Owner

The car owner has fewer control over the car except changing the OS, Drivers, So\ware, and basic Firewall con guration. This also ensures that even the owner doesn’t have rights to miscon gure the car to the extent that it becomes unsafe to drive (knowingly or unknowingly). However the owner has the privilege to set his/her preferred music channel or operate the AC or setting ambient mood etc.

5

Car OS

The car Operating System is the key brain behind running the operations of the car. It controls practically all aspects of the car e.g. engine, gear, brakes, AC, audio, security system etc. Being a smart car, the OS of the car is capable of interacting with all the other components and perform necessary checks and balances to ensure car’s operability, safety and security.

The Car OS has certain level of intelligence to take few decisions on its own on case-to-case basis. Below are the basic functions which the car does by default• Collect data from all the sensors in real time • Correlate input parameters with normal/standard operating procedures • Interact with the driver • Manage the overall OS patches

6

Car Service Center

Car service centre has access to individual car database on their proprietary cloud which has detail about the services done since the car has been manufactured. It collects fault/warning/error database from each car and determines its service requirement accordingly informs the owner.

fi

fi

fi

SL.NO

List of Major Assets 1.

2.

3.

Car Manufacturers Cloud(FutureVec production software) Third-Party Suppliers (Parts and accessories, softwares) Insurers/Auditors cloud(Insurance premium docs, claim settle docs, damage assessment details) Car OS(FutureVec proprietary OS based on Automotive GL) Service Centre’s cloud(fault/warning/error servicing database) Pipedrive (CRM, FutureVec customer data) Hostwinds website( FutureVec manifesto, product marketing documents, pdfs) Brake Systems Air-Conditioning System Engine Systems Gear Systems Electrical Systems Tyre Systems Shocker Systems A/V Systems

4.

5.

6.

7.

8.

9.

10.

11.

12.

13.

14.

15.

fl

fi

fi

We would be using a scale of 1-3 for calculating probability(P) of threat & Consequence (C) of threat and derive Risk(R) for de ning the threat-asset matrix for FutureVec Inc.

Logical Architecture of network traf c ow of FutureVec vehicle

Assets

Con dential Integrity ity

Availability

Theft/ Fraud

Car Manufacturer’s Cloud

P=3 C=3 R=9

P=3 C=3 R=9

P=3 C=3 R=9

P=3 C=3 R=9

36 Highest Risk

Third-party Suppliers

P=2 C=2 R=4

P=2 C=3 R=6

P=1 C=3 R=3

P=2 C=1 R=2

15

Insurers/Auditors cloud

P=2 C=2 R=4

P=2 C=3 R=6

P=2 C=2 R=4

P=3 C=2 R=4

18 4th Highest risk

Car OS

P=3 C=3 R=9

P=3 C=3 R=9

P=2 C=2 R=4

P=1 C=2 R=2

24 3rd Highest Risk

Service centre’s cloud

P=2 C=2 R=4

P=2 C=2 R=4

P=2 C=2 R=4

P=3 C=1 R=3

15

Pipedrive (CRM)

P=2 C=3 R=6

P=2 C=3 R=6

P=1 C=1 R=1

P=2 C=2 R=4

17

Hostwinds website

P=1 C=1 R=1

P=2 C=3 R=6

P=1 C=3 R=3

P=1 C=1 R=1

11

Brake System

P=2 C=2 R=4

P=3 C=3 R=9

P=1 C=2 R=2

P=1 C=1 R=1

16

Air-Conditioning System

P=2 C=2 R=4

P=2 C=3 R=6

P=2 C=2 R=4

P=1 C=1 R=1

15

Engine System

P=3 C=2 R=6

P=3 C=3 R=9

P=1 C=2 R=2

P=1 C=1 R=1

18 4th Highest Risk

Gear System

P=2 C=2 R=4

P=2 C=3 R=6

P=1 C=2 R=2

P=1 C=1 R=1

13

Electrical System

P=2 C=3 R=6

P=3 C=3 R=9

P=3 C=2 R=6

P=2 C=2 R=4

25 2nd Highest Risk

Tyre System

P=1 C=3 R=3

P=2 C=2 R=4

P=1 C=1 R=1

P=1 C=1 R=1

9

Shocker system

P=2 C=2 R=4

P=2 C=2 R=4

P=1 C=1 R=1

P=1 C=1 R=1

10

A/V System

P=1 C=1 R=1

P=2 C=2 R=4

P=3 C=2 R=6

P=1 C=1 R=1

12

fi

fi

2.

Car Manufacturer’s cloud has a risk rating of 9 for all the parameters because it contains FutureVec’s production software and libraries hence high risk estimated, Total Risk = 36 therefore highest risk asset.

Third Party Suppliers has a data con dentiality risk rating = 4 since it rolls out speci c software for part/accessories extended or upgraded, has a data integrity risk= 6 since tampering with accessory data has consequences, data availability and theft/fraud risk

fi

1.

Total Risk

fi

fi

fi

fi

fi

fl

fi

fi

fi

fi

fi

fi

fi

is 3 and 2 respectively because its availability is somewhat important for diagnosis but theft/fraud doesn’t have much consequence, Total Risk = 15 3. Insurers/Auditors has a data con dentiality risk rating = 4 because insurance details are moderately important and contain personal information of customers, data integrity risk = 6 since tampering with insurance data has considerable consequences, data availability risk =4 as availability of insurers data is dependent on their proprietary cloud databases and data theft/fraud risk = 4 as forgery of insurance data is quite probable these days. Total Risk = 18 4. Car OS has a con dentiality risk rating = 9 because its proprietary software of FutureVec subject to patents & laws, has a integrity risk = 9 since tampering with Operating System les would have futile consequences, has a availability risk = 4 since it has root copies stored in manufacturer’s cloud, data theft/fraud risk = 2 since it isn’t of much consequence as its vehicle model restricted. Total Risk = 24 5. Service centre’s cloud has a threat risk rating = 4 for con dentiality, integrity and availability since its has less consequences with respect to the company as they have their original data sets for the speci c models and any faults and errors can be rediagnosed, has a theft/fraud rating=3 since its speci c to the particular model of the vehicle hence is of little consequence. Total Risk = 15 6. Pipedrive has a con dentiality and integrity risk = 6 since these are well managed SaaS services with sensitive customer data information, has a availability risk = 1 since its availability at user end is of negligible importance, theft/fraud risk = 4 since it has moderate consequence. Total Risk = 16 7. Hostwinds website is reasonably well administered but nothing all that sensitive is stored in the marketing oriented site hence has a con dentiality risk = 1, has an integrity risk = 6 since tampering with it directly in uences the company reputation, has a availability risk = 3 since the unavailability of of website details can be easily administered, data stored on FutureVec’s marketing website is of negligible consequence hence has a theft/fraud risk = 1. Total Risk = 11 8. Brake System (ECU controlled) has a con dentiality risk = 4 since stealing data related to Brake System is of moderate consequence as its vehicle model speci c, has a integrity risk = 9 since tampering with Brake System assets can have abnormal consequences leading to malfunctioning of vehicle braking systems, availability risk = 2 theft/fraud risk = 1 ,since its of very negligible importance to the user or consumer.

Total Risk = 16 9. Air-Conditioning System (ECU controlled) has a con dentiality risk = 4 since stealing data related to AC is of low importance, has an integrity risk =6 since hackers can tamper with it to drain batteries, availability risk =4 since its of moderately low consequence to the vehicle management system, theft/fraud risk = 1 since stealing AC System data is of negligible consequence. Total Risk = 15 10. Engine System (ECU controlled) has a con dentiality risk = 6 as stealing Engine logs gives out moderately important system functioning details and integrity risk = 9 since

11.

12.

13.

14.

15.

tampering with it could lead to a malfunctioning smart vehicle system which could be detrimental to FutureVec’s business, availability risk = 2 and theft/fraud risk =1 since it has no pertinent consequence towards FutureVec’s business domain.Total Risk = 18 Gear System(ECU controlled) has a con dentiality risk = 4 since related data is less consequential and integrity risk = 6 since its moderately consequential towards proper vehicle functioning and partly-autonomous changing of gears based on road traf c circumstances. Has an availability risk = 2 and theft/fraud risk = 1 since they are of negligible importance. Total Risk = 13 Electrical System (CAN-BUS driven) has a con dentiality risk = 6 since it deals with the functioning of Electronic control units (ECU) and the power consumption of the vehicle which is subject to company patents, has a integrity risk = 9 since tampering with the Electrical System can have futile consequences, availability risk = 6 and theft/fraud risk =4 as its of moderately low importance from a company’s perspective.Total Risk = 25 Tyre system (ECU controlled) has a con dentiality risk = 3 and integrity risk = 4 as the data associated with it is generally related to servicing issues and thus of moderately low importance, availability and theft/fraud risk = 1 since its of negligible consequence.

Total Risk = 9 Shocker system (ECU Controlled) has con dentiality & integrity risk = 4 since the data associated with it is also related to servicing issues and thus of moderately low importance, availability and theft/fraud risk = 1 since its of negligible consequence.

Total Risk = 10 A/V System (ECU controlled) has con dentiality risk = 1 since its of negligible importance, integrity risk = 4 since tampering with it might cause issues in terms of entertainment privileges on the customer end thus leaving a negative impact on company ratings, availability risk = 6 since its presence is important and kind of les supported by it it is bene cial from a customer’s perspective, theft/fraud rating = 1 since its of negligible consequence.

Conclusion

fi

fi

fi

fi

fi

fi

fi

fi

FutureVec’s vehicular cloud (manufacturer’s cloud) has the highest risk rating and therefore subject to maximum cyber attacks hence the company should mostly enforce its resources towards protecting and securing the vehicular cloud followed by the Electrical Systems and vehicles’ Operating System.