Please enable JavaScript.

Coggle requires JavaScript to display documents.

TARA - Coggle Diagram

- - - - item boundary can include interfaces with other items internal to the vehicle and/or with E/E systems external to the vehicle.
    - - the intended behaviour of the item during the lifecycle phases
        
        includes the vehicle functionality that realized by the item
- - - - Description
      - Physical
        
        Network
        
        Protocol
        
        Application
        
        data handling withing executables
        
        Customer data transport
        
        system-mediated transport
        
        hardware interface
  - - - State
        
        Asset
        
        Executables
        
        Configuration Data
        
        Databases
        
        Unstructed Data
        
        2 more items...
        
        at rest
        
        at rest
        
        at rest
      - binary data which may
        be run on the system
        
        ..
        
        ...
        
        ...
        
        ...
        
        ...
        
        1 more item...
  - - - Description
      - Confidentiality
        
        Integrity
        
        Availablity
        
        no-repudiation
        
        Authenticity
        
        Accountability
        
        1 more item...
        
        ...
        
        Denial of action taken or failure to acknowledge request
        
        ...
        
        ...
        
        ...
  - - - Asset Type
        
        Relevant Property
        
        Operational Situation
        
        Damage Scenario
        SFOP
      - Button Panel Passenger
        
        Physical
        
        Authority, Integrity
        
        Cabin Controller
        
        Logs,packets,memory, executables
        
        Integrity, AAA
- - - - Mobile applications to Machine:
        to maliciously exploit the intended remote vehicle controls with unintended behavior
    - - M2M communication btw charing station and EV
  - - - yes
        
        Does the candidate contribute to
        the safe operation of the vehicle?
        
        no
        
        Does the candidate impl functions which require
        collection or processing of user-related data?
        
        no
        
        Does the candidate impl vehicle functions based on
        networked components?
        
        2 more items...
        
        yes
        
        yes
      - no
        
        not cybersecurity relevant
- - - - local
        
        CAN
        
        LAN
        
        Auto Ethernet
        
        MOST
        
        USB
      - Remote
        
        RF, GPS
        
        Bluetooth
        
        WiFi
        
        Cellular
        
        V2X
        
        Sensor
        
        Mobile App
  - - - Id assets
        
        Create Arch overview (data flow)
        
        Id threats, vulnerabilities ..
    - - Attack Objective part
        
        Severity
      - Attack Path
        
        Feasibility
        
        Risk determine
- - - - Base
        
        Exploitability
        
        Attack vector
        
        Attack Complexity
        
        Privileges Required
        
        User Interaction
        
        Impact
        
        Confidentiality Impact
        
        Integrity impact
        
        Availability impact
      - Temporal
      - Environmental
        
        CIA requiremetn
  - - - Vehicle Sensors, ECUs
        
        Integrity
    - - ECU software
        
        Integrity
    - - de/encryption keys
        
        integrity
    - - data/log/PII
        
        confidentiality
    - - in-vehicle network
        
        availablity
    - - features..
        
        confidentiality / Integrity
- - - - [RQ-15-01] Damage scenarios
        shall be identified
        
        relation btw item and consequence
        
        harm to the road user
        
        harm to relevant assets
      - [RQ-15-02] Assets with ..
        compromise leads
        to a damage scenario
        
        Analyzing the item definition
        
        performing an impact rating
        
        deriving assets from threat scenario
        
        using predefined catalogues