Structured Specification Framework for the Attacks, Weaknesses, and Vulnerabilities of Vehicle E&E systems

We propose a new structured notation for vulnerability suitable for distributed developments for advanced vehicle electrical and electronics systems. In highly complex attacks, attackers synthesize opportunistically found vulnerabilities and normal behaviors of the elements of the target system to compromise the target. They combine the normal behaviors of elements and attack the vulnerabilities of elements to construct a chain of attack behaviors. We introduced the "attack behavior block" and "normal behavior block" as the basic units for our structured specification to describe such attacks. We demonstrate that a directed graph of both blocks can describe an attack action. In addition, each organization participating in distributed development has a limited target system scope. To provide a consistent view of cyberattacks for each organization, we introduced an "assumed attack behavior block" for information sharing from the upper to a lower process and a "synthetic attack behavior block" for information sharing in the opposite direction. We examined the applicability of our notation by applying this notation to a publicly available cyber-attack case.