CySiVuS (cyber security for transport and road operators) is an FFG-funded research project (https://projekte.ffg.at/projekt/2929296 ) of the Austrian security research programme KIRAS.

In the future, our transport system will consist of networked, intelligent and automated vehicles. They will be part of an intelligent system characterised by the seamless interaction of vehicles, infrastructure and cooperative mobility between transport systems. Networking will require a closer integration of traffic management, road users and vehicles. Alongside safety and privacy, cyber security is the third element for a comprehensive, trustworthy transport system.

The KIRAS project CySiVuS examines this overall system of a road transport infrastructure with regard to specific IT security issues relating to automated and networked traffic. Requirements, restrictions and any necessary future enhancements for cyber-secure operation are identified, structured and discussed.

One objective was to develop a reference architecture that maps the critical ITS (Intelligent Transport System) infrastructure system as openly as possible. With the help of a security overlay, neuralgic cyber attack points in the overall system can be identified to reveal potential vulnerabilities or insecure states. This not only makes sense on a technical level, but also from a business, corporate and management perspective.

Another result is the design of a three-part risk management methodology specific to the automotive and transport sector. As complete validation is difficult, the focus is on dealing with individual uncertainties. The aim is to combine functional safety with cyber security in order to achieve genuine so-called S³ security - Safe Secure Systems. In order to realise this goal, three existing generic risk management methods were linked together.

An important aspect of the project was the legal basis for networked automated driving. The stakeholders involved in an Intelligent Transportation System (ist) have interests that they can enforce through laws, regulations and other legal measures. It is necessary to discuss the applicability of the current legal framework to connected automated driving.

Further links:

• Partner: AIT Austrian Institute of Technology GmbH (Koordinator), Asfinag, SWARCO FUTURIT, T-Systems Austria GmbH, TÜV AUSTRIA, Uni Wien, Bundesministerium für Landesverteidigung, TÜV TRUST IT TÜV AUSTRIA GMBH, BMI, Nokia Solutions and Networks Österreich
• Projektlaufzeit: 10//2017-03/2020
• Förderprogramm: KIRAS Sicherheitsforschung – Ausschreibung 2015-16