标题： 展示用于连接和自动驾驶车辆的网络安全、安全和隐私问题的标准和方法 显示英文标题

标题： Showcasing standards and approaches for cybersecurity, safety, and privacy issues in connected and autonomous vehicles

摘要： 在汽车工业中，需要处理广泛的品质缺陷，例如性能、可维护性、网络安全、安全性和隐私性等。 其目的是防止这些问题影响最终用户，即道路使用者，甚至无意中影响行人，以期减少事故，并在动态攻击面中实现安全操作，从而造福众多利益相关者。 本文旨在将网络安全、安全性和隐私性问题与风险评估（RA）和威胁建模（TM）相结合。 从业者知道这一主题的大量文献，鉴于推荐意见、标准、最佳实践和现有方法的数量庞大，有时会妨碍项目并促进有价值且可操作的威胁分析。 在本文中，我们通过突出显示RA和TM研究中的最新标准和方法，汇总了关键成果，以应对汽车环境所提出的复杂攻击面。 我们的目标是为社区提供一个方法列表，在决定在汽车解决方案中何时以及在哪里专注于威胁相关分析时，使期望与利益相关者保持一致。 显示英文摘要

摘要： In the automotive industry there is a need to handle broad quality deficiencies, eg, performance, maintainability, cybersecurity, safety, and privacy, to mention a few. The idea is to prevent these issues from reaching end-users, ie, road users and inadvertently, pedestrians, aiming to potentially reduce accidents, and allow safe operation in dynamic attack surfaces, for the benefit of a host of stakeholders. This paper aims to bridge cybersecurity, safety, and privacy concerns in Connected and Autonomous Vehicles (CAV) with respect to Risk Assessment (RA) and Threat Modelling (TM) altogether. Practitioners know the vast literature on this topic given the sheer number of recommendations, standards, best practices, and existing approaches, at times impairing projects and fostering valuable and actionable threat analysis. In this paper we collate key outcomes by highlighting latest standards and approaches in RA and TM research to tackle complex attack surfaces as the ones posed by automotive settings. We aim to provide the community with a list of approaches to align expectations with stakeholders when deciding where and when to focus threat related analysis in automotive solutions.