Conference
From TARA to CAN firewall rules
| Τίτλος: | From TARA to CAN firewall rules |
|---|---|
| Συγγραφείς: | Navarra, Luca, Cornelio, Anastasia (Dr. rer. nat.), Romano, Simon Pietro (Prof. Dr.-Ing.) |
| Έτος έκδοσης: | 2026 |
| Συλλογή: | Dokumentenrepositorium der RUB / RUB-Repository (Ruhr-Universität Bochum) |
| Θεματικοί όροι: | ddc:004 |
| Περιγραφή: | Translating cybersecurity risk assessments into concrete and enforceable in-vehicle security controls remains a critical challenge in automotive engineering. Although ISO/SAE 21434 defines a structured Threat Analysis and Risk Assessment (TARA) process, the derivation of implementation-level countermeasures, such as CAN-based firewall policies, is largely left unspecified and is typically performed manually, limiting scalability, consistency, and traceability across modern vehicle network architectures. This work presents a risk-driven methodology and an automated tool for deriving CAN firewall rules directly from TARA artifacts. Threat scenarios and mitigated attack paths are correlated with vehicle network descriptions to generate gateway-enforceable policies such as identifier whitelisting, rate limiting, and payload-aware inspection, with explicit traceability to cybersecurity risks. To address the lack of semantic information in network databases, the approach introduces an LLM-assisted, human-in-the-loop workflow for identifying security-critical signals within protected CAN frames using functional specifications and damage scenarios. A multi-agent architecture is adopted to decompose semantic extraction, threat-driven reasoning, and adversarial validation, improving robustness compared to single-agent configurations while preserving engineering oversight. The proposed solution is evaluated on industrial automotive data through an expert-based assessment involving two independent domain specialists. The results show that deterministic automation, complemented by conservative and human-supervised AI assistance, significantly reduces manual engineering effort while maintaining consistency with expert assessments and alignment with ISO/SAE 21434. |
| Τύπος εγγράφου: | conference object |
| Περιγραφή αρχείου: | application/pdf |
| Γλώσσα: | English |
| Διαθεσιμότητα: | https://hss-opus.ub.ruhr-uni-bochum.de/opus4/frontdoor/index/index/docId/14794 https://nbn-resolving.org/urn:nbn:de:hbz:294-147946 https://hss-opus.ub.ruhr-uni-bochum.de/opus4/files/14794/Paper6.pdf |
| Rights: | https://hss-opus.ub.ruhr-uni-bochum.de/opus4/default/license/index/licId/11 ; info:eu-repo/semantics/openAccess |
| Αριθμός Καταχώρησης: | edsbas.9F79BC9A |
| Βάση Δεδομένων: | BASE |
καταχωρήστε σχόλιο πρώτοι!