登陆
注册
Attack Analysis example in ISO SAE 21434
来源：公众号“汽车安全前瞻研究”
2020-06-02
1018
[Author]
Samuel WENG, system safety and security geek in automotive field
First: ATA
Example derived from article 'https://mp.weixin.qq.com/s?__biz=Mzg5NTIwMTEzOA==&mid=2247484079&idx=1&sn=574fc62947db417242a325391e5594cf&chksm=c012b8b2f76531a49d599f51d81a66bd88e1739f84c6d7422b33f4eaa4dc1e1e27f3823c2ac3&token=1760969391&lang=zh_CN#rd'
we will use the attack tree analysis to describe the house burglar:
above the house burglaror theft attack tree analysis:
| Threat scenario | AV | AC | PR | UI | scope | C | I | A |
| Hammer Break down door | P | L | N | N | U | H | L | N |
| Pick lock and open front door | p | H | H | R | C | H | L | N |
| Steal key and open front door | P | H | H | R | C | H | L | L |
| Break glass and get in via window | P | L | N | N | C | H | L | N |
| Cut glass and get in via window | P | H | N | N | C | H | L | N |
| Steal key and open window | P | H | N | R | U | H | L | N |
| Climbing trees, and downside to roof from trees, then cut hole in roof | P | H | L | N | C | H | L | N |
| (1)break in house: cut in wall hole (2)Enter garage cut hole in wall or roof | p | H | H | R | U | L | L | L |
| (1)break in house: cut in wall hole (2)Enter garage Brute Force on Garage Door | P | H | N | N | U | H | L | L |
| (1)break in house: cut in wall hole (2)Enter garage Eavesdrop opener code | p | H | H | R | U | H | N | N |
| (1)break in house: cut in wall hole (2)Enter garage Steal Opener from car | p | H | H | R | U | H | L | N |
| (1)break in house: Steal key (2)Enter garage cut hole in wall or roof | p | H | H | R | U | H | L | N |
| (1)break in house: Steal key (2)Enter garage Brute Force on Garage Door | p | H | H | R | U | H | L | L |
| (1)break in house: Steal key (2)Enter garage Eavesdrop opener code | p | H | L | N | U | H | N | N |
| (1)break in house: Steal key (2)Enter garage Steal Opener from car | P | H | N | R | U | H | N | N |
| (1)break in house: Pick lock (2)Enter garage cut hole in wall or roof | P | H | N | R | U | H | L | L |
| (1)break in house: Pick lock (2)Enter garage Brute Force on Garage Door | P | H | N | N | U | H | L | N |
| (1)break in house: Pick lock (2)Enter garage Eavesdrop opener code | P | H | N | R | U | H | N | N |
| (1)break in house: Pick lock (2)Enter garage Steal Opener from car | P | H | N | R | U | H | N | N |
| (1)break in house: break down garage door (2)Enter garage cut hole in wall or roof | P | L | N | N | C | H | L | L |
| (1)break in house: break down garage door (2)Enter garage Brute Force on Garage Door | P | L | N | N | C | H | L | L |
| (1)break in house: break down garage door (2)Enter garage Eavesdrop opener code | P | L | N | N | U | H | L | N |
| (1)break in house: break down garage door (2)Enter garage Steal Opener from car | P | H | L | R | C | H | L | N |
| cut hole hole in wall | P | L | N | N | C | H | N | N |
| chimney attack | P | L | N | N | U | H | N | N |
| Tunnel through floor | P | L | N | N | U | L | N | N |
| Social engineering | P | H | H | R | C | H | N | N |
Second: threat scenario feasibility level
| Threat ID | base score |
| T_01 | 5.2 Medium |
| T_02 | 5.4 Medium |
| T_03 | 6.0 Medium |
| T_04 | 6.1 Medium |
| T_05 | 5.7 Medium |
| T_06 | 4.4 Medium |
| T_07 | 5.6 Medium |
| T_08 | 3.5 low |
| T_09 | 5.3 Medium |
| T_10 | 3.8 low |
| T_11 | 4.4 Medium |
| T_12 | 4.4 Medium |
| T_13 | 4.9 Medium |
| T_14 | 4.0 Medium |
| T_15 | 4.0 Medium |
| T_16 | 5.1 Medium |
| T_17 | 4.8 Medium |
| T_18 | 4.0 Medium |
| T_19 | 4.0 Medium |
| T_20 | 6.7 Medium |
| T_21 | 6.7 Medium |
| T_22 | 5.2 Medium |
| T_23 | 5.5 Medium |
| T_24 | 5.3 Medium |
| T_25 | 4.6 Medium |
| T_26 | 2.4 LOW |
| T_27 | 4.6 Medium |
收藏
点赞
- 用户评论
2000
评论