COMPONENT

Communication buses

PaperForthcoming. Table 3 and the detection priorities.

A control path. An attacker who can influence the bus may not need to take each subsystem separately.

High in the table: Spoofing, Replay, Tampering.

Lightweight onboard checks. Abnormal bus activity may need to be seen before it affects operation.

MalwareMedium
No observable given for this pair.
SpoofingHigh
No observable given for this pair.
ReplayHigh
Repeated message, abnormal sequence, or a timing inconsistency.
TamperingHigh
Unexpected configuration, or a message or firmware integrity change.
Denial of service / jammingMedium
No observable given for this pair.
Firmware compromiseMedium
No observable given for this pair.
Supply-chain attackMedium
No observable given for this pair.
Insider threatMedium
No observable given for this pair.