Drivers, the Missed Attack Surface of Connected Vehicles

The purpose of this paper is to analyse the human factors in cyberattacks targeting connected vehicles. To achieve this purpose, we utilised qualitative research methods and analysed multiple attack cases against connected vehicles. These cases demonstrated a number of different attack vectors and vulnerabilities. Our paper demonstrated that the most widely used Risk Assessment standards are flawed in this case; each assumes that certain considerations are either managed by other standards or that they are common knowledge and do not necessitate standardisation. This problem results in unresolved voids in the overall standards structure. The main gap identified was around Human Factors; none of the regulations or standards considered the impact of the owner/user/driver on the connected elements of vehicle safety and cybersecurity.