Design Threat Analysis and Risk Assessment of Battery Management System

Woongsub Park, Daehui Jeong, Hyuk Lee

http://doi.org/10.5626/JOK.2022.49.2.176

Climate change due to emission of greenhouse gases and air pollutants is currently the most important international environmental problem. As a result of advances in technology and efforts by automobile manufacturers to address these issues, automobiles are changing from internal combustion engines to electric motors. Electric vehicles have a high proportion of electronic components. Software technologies such as battery management systems, infotainment, and advanced driver assistance systems (ADAS) are integrated. An increase in the proportion of software increases the internal connectivity and complexity of the entire system, leading to expansion of the potential security attack surface. To secure cyber security for automobiles, it is recommended to comply with the ISO/SAE-21434 international standard and perform threat analysis and risk assessment activities. In this paper, high-level threat analysis and risk assessment for the battery management system were performed based on the HEAVENS security model. Threats that can occur in the battery management system were identified through the STRIDE technique. Possible damage and threat scenarios were then derived. Through systematic risk assessment, an impact rating and an attack potential rating for threats were assigned and a security rating was derived. Finally, by analyzing the security level of the threat, it is suggested to apply threat analysis and risk assessment activities to improve the design level security of the battery management system.