Cybersecurity Profile
This profile can be used to specify how VSS signals can be extended to include cybersecurity attibutes.
Mapping Syntax
The syntax for definition of a signal with cybersecurty attributes (in an overlay) is specified below.
<VSS Signal name>:
type: <VSS type>
datatype: <VSS datatype>
cybersecurity:
[authentication: {true|false}]
[encryption: {true|false}]
[integrity_check: {true|false}]
[impact_profiles: {[{motion|privacy|regulation|safety|operational}]}]
- Set
authentication
attribute to true if you need to ensure serialized data is being exchanged between trusted entities or prevent unauthorized access to serialized data during transmission. Sample implementation mechanisms are public-key infrastructure, token based authentication etc. - Set
encryption
attribute to true to protect the confidentiality of serialized data or to ensure that even if serialized data is intercepted, it cannot be easily understood or misused. Sample implementation mechanisms are symmetric (e.g AES), asymetric (e.g RSA) or end-to-end encryption. - Set
integrity_check
attribute to detect and prevent unauthorized alterations to serialized data or to maintain the accuracy and reliability of data as it is transmitted or stored. Sample implementation mechanisms are checksums, counters, hash based, message authentication codes etc impact_profiles
attribute indicate set of impact profiles that assess potential consequences of security issues. Possible values include:motion
: Impact on vehicle movement or control systems.privacy
: Impact on the privacy of individuals and data protection.regulation
: Impact related to regulatory compliance and legal issues.safety
: Impact on personal safety and potential physical harm.operational
: Impact on system functionality and service availability.
Example
Vehicle.Body.Mirrors.DriverSide.Tilt:
datatype: int8
type: actuator
cybersecurity:
authentication: false
encryption: false
integrity: true
impact_profiles: [operational]