Threat Modeling and Simulation for Automotive IT
| Reference number | |
| Coordinator | KUNGLIGA TEKNISKA HÖGSKOLAN - EES |
| Funding from Vinnova | SEK 100 000 |
| Project duration | February 2017 - June 2017 |
| Status | Completed |
| End-of-project report | 2016-05366.pdf(pdf, 817 kB) (In Swedish) |
Important results from the project
The purpose of the preliminary study has been to investigate the prerequisites for a larger Vinnova FFI project, which will provide a threat modeling and simulation language for vehicle IT. The purpose of the preliminary study was to 1) investigate how the larger project is to be designed, 2) what requirements there are for the threat modeling and simulation languages proposed, and 3) which stakeholders that should be included in the larger project.
Expected long term effects
The main result of the preliminary study is our consortium (KTH Royal Institute of Technology, Foreseeti, F-Secure, Scania and Volvo Cars) who have jointly applied for the larger project in June 2017, a detailed plan for this project (application with work packages, budget, and timetable), and the beginning (a draft) of the framework that will form the basis for the threat modeling and simulation language (we call it MAL - Model-based Attack-graph Language).
Approach and implementation
In the preliminary study we have had many discussions about the layout of a larger project that will develop a threat modeling language for vehicle IT. This has resulted in the plan we submitted as part of the project application for THREAT MOVE (our large project). We have also had many presentations and conversations with people in the industry to build a larger consortium for THREAT MOVE. And we have developed a basis / draft for the framework that aims to further develop and use in THREAT MOVE.