A Test-Driven Approach for Security Designs of Automated Vehicles

The testing of cyber-physical systems such as automated vehicles (AV) is difficult as engineers face challenges from both cybersecurity and safety domains that start to converge. For cybersecurity, conducting vulnerability testing even before mitigation designs are fixed requires the predication and modeling of adversaries' malicious behaviors. For safety, complete testing at system-level is time-consuming and also infeasible due to the large combination of operational domains. To help engineers design cost-effective mitigation solutions, this paper presents a framework for constructing testing scenarios driven by cyber threats that can be evaluated early in the design process. The testing results can inform the design of mitigation strategies and help engineers in constructing security requirements such that the large solution space will converge more quickly on effective designs. We also illustrate how to build visualization tools to support this process.