Design of Intelligent Self-Defense Using Deception to Combat Privilege-Based Exploitation in Advanced Road Vehicle Attacks

Cybersecurity in the automotive industry is crucial, especially with enforced compliance regulations. These processes safeguard against manipulation and ensure product integrity. Automotive cybersecurity management prioritizes implementing security controls based on hardware features, managing software resource constraints, applying vulnerability patches, and addressing chip-tuning devices. Reproducing attack scenarios with minimal information about system behavior and forensic data logs to validate security goals within time constraints is challenging. Introducing a deception network within vehicles can disrupt attackers’ strategies and facilitate forensic data. This paper contributes a novel solution for automotive security designers to systematically define, assess, and implement deception techniques within vehicle networks. This research adopts a theoretical approach to secure vehicle connectivity and assets. While the theoretical foundation of the proposed solution can be strengthened, this research promotes its development with design hints for deriving security controls for centralized automotive software networks.