| Title | National Institute of Standards and Technology (NIST) cybersecurity risk management framework applied to modern vehicles |
|---|---|
| Record ID | 52888 |
| Personal Name Creator |
McCarthy, Charlie; Harnett, Kevin |
| Source | 27p. in various pagings |
| Corporate Creator | John A. Volpe National Transportation Systems Center (U.S.) |
| Corporate Contributor |
United States. Department of Transportation. National Highway Traffic Safety Administration |
| Publisher | United States. Department of Transportation. National Highway Traffic Safety Administration |
| Publication Date | 20141000 |
| Language | English |
| Abstract | The primary objective of the work described in this report is to review the National Institute of Science and Technology (NIST) guidelines and foundational publications from an automotive cybersecurity risk management stand-point. The NIST approach is often used as a baseline to develop a more targeted risk management approach for the specific use cases and issues in specific industries and sectors. This report can be considered as a primer that establishes a baseline conceptual understanding of the NIST approach for the readers and a common vocabulary for discussing risk management for the automotive sector. Additional work would be needed to more effectively apply this framework to the automotive sector. This publication is part of a series of reports that describe our initial work under the goal of facilitating cybersecurity best practices in the automotive industry (Goals 1 and 2). The information presented herein increase the collective knowledge base in automotive cybersecurity; help identify potential knowledge gaps; help describe the risk and threat environments; and help support follow-on tasks that could be used to establish security guidelines. |
| Rosap ID | dot:12120 |
| Rosap URL | https://rosap.ntl.bts.gov/view/dot/12120 |
| TRT Terms | Threats; Automobiles; Motor vehicles; Best practices; Guidelines; Vehicle electronics; Automotive computers; Vehicle components; Safety; Security; Risk management |
| General Subjects | Cybersecurity; Guidelines; Risk management; Baseline; Use cases; Best Practices |
| Classification | AGR - SAFETY AND SECURITY - SAFETY AND SECURITY; NTL - SAFETY AND SECURITY - Vehicle Design; NTL - SAFETY AND SECURITY - SAFETY AND SECURITY; NTL - SAFETY AND SECURITY - Highway Safety |
| Geographical Coverage |
United States |
| TRIS Online Accession No |
1543172 |
| Contract Number | DTNH22-12-V-00085; HW4VA100 |
| Report Number | DOT HS 812 073 |
| Availability | Volpe National Transportation Systems Center, Technical Reference Center |
| Resource type | Tech Report |
| URL | https://ntlrepository.blob.core.windows.net/lib/52000/52800/52888/812073_NatlInstitStandardsTechCyber.pdf |
| Format | |
| Database | NTL Digital Repository |