A Trade-off Design Approach for Integrating Cybersecurity, Safety, and Other Aspects of Intelligent Connected Vehicles

With the increasing connectivity of the modern automotive, cybersecurity is becoming increasingly essential for an auto. Security by design is a recommended way to protect automotive systems rather than after-sale solutions. However, other than cybersecurity, an auto should also be safe and comfortable to transport people and cargo. How to achieve a trade-off design considering various system requirements is a challenge. In this paper, a trade-off design approach for integrating various aspects, like cybersecurity, safety, and user experience, is proposed. The affecting map and the affecting score are proposed as tools to help the designer to select proper security countermeasures qualitatively or quantitatively. The proposed methods are compatible with the international standard ISO/SAE 21434. A case study of a Diagnostic on Internet Protocol (DoIP) system is demonstrated with details to show how to use the proposed methods, and also verify the feasibility and effectiveness of the approach.