As modern vehicles are capable to connect to an external infrastructure and Vehicle-to-Everything (V2X) communication technologies mature, the necessity to secure communications becomes apparent. There is a very real risk that today's vehicles are subjected to cyber-attacks that target vehicular communications. This paper proposes a three-layer framework (sensing, communication and control) through which automotive security threats can be better understood. The sensing layer is made up of vehicle dynamics and environmental sensors, which are vulnerable to eavesdropping, jamming, and spoofing attacks. The communication layer is comprised of both in-vehicle and V2X communications and is susceptible to eavesdropping, spoofing, man-in-the-middle, and sybil attacks. At the top of the hierarchy is the control layer, which enables autonomous vehicular functionality, including the automation of a vehicle's speed, braking, and steering. Attacks targeting the sensing and communication layers can propagate upward and affect the functionality and can compromise the security of the control layer. This paper provides the state-of-the-art review on attacks and threats relevant to the communication layer and presents countermeasures.

随着现代车辆能够连接到外部基础设施，并且车辆到所有（V2X）通信技术已经成熟，确保通信安全的必要性变得显而易见。当今的汽车确实面临着针对车辆通信的网络攻击的真正风险。本文提出了一个三层框架（传感，通信和控制），通过该框架可以更好地理解汽车安全威胁。传感层由车辆动力学和环境传感器组成，它们很容易受到窃听，干扰和欺骗攻击。通信层既包含车载通信，又包含V2X通信，并且容易受到窃听，欺骗，中间人攻击和sybil攻击。层次结构的最顶层是控制层，它实现了自主的车辆功能，包括车辆速度，制动和转向的自动化。针对传感和通信层的攻击可能会向上传播并影响功能，并可能损害控制层的安全性。本文提供了与通信层相关的攻击和威胁的最新技术综述，并提出了对策。