An Evaluation Ontology Applied to Connected Vehicle Security Assurance: Enhancing enterprise capability and business intelligence through modelling of evaluation processes and outcomes

Connected vehicles have great potential to benefit society, yet create huge challenges. Vehicles, infrastructure and enterprise activities combine to form massively complex systems of systems (SoSs) that are vulnerable to cyber-attacks. Security is ill-defined, making it difficult to achieve a consistent, common understanding of security capabilities across the diverse industries that collaborate to develop connected vehicles. Rigorous evaluation is essential for developing strong security assurance cases. The Evaluation Ontology enables integrated evaluation processes in enterprise SoSs, allowing diverse types of evaluation to be captured in a single integrated model. The paper [1] on which this poster is based presents a connected vehicle security story to demonstrate the value of the approach. Benefits include enhanced business intelligence for a quantifiable, reportable level of confidence in security-related processes and technologies. Further work will extend the ontology to develop a customisable suite of enabling patterns for security.
[1] Powley, S, Perry, S, Bryans, J, Holt, J; An Evaluation Ontology Applied to Connected Vehicle Security Assurance; Proceedings of the 29th Annual INCOSE International Symposium; INCOSE