Attacks on the Information System of Unmanned Vehicles in the Etiology of Road Accidents

Abstract

Highly automated vehicles (HAVs) integrate numerous technologies that provide safe and efficient transportation without a driver. Connecting mechanisms ensure communication between vehicles and their infrastructure, and the exchange of data, such as the positioning of the vehicle, its speed, etc. The purpose of each of these functions is to support further automation, which turns a driver from a road user into an observer-controller by transferring to technologies those functions that were earlier performed by people. The automation of control is achieved through a constant analysis of the environment by sensors and the use of previously obtained information, such as maps or data on the road covering, for planning the performance of the vehicle. HAVs use multi-functional hardware and software units that include sensors: lidars, radars, cameras, GPS, odometers, hyrosystems, etc.; systems of data exchange with the road infrastructure using GPRS, 5G, Wi-Fi and other standards; software that controls transport systems, including the systems of machine vision, and neural networks for controlling the road situation. The authors present a classification of threats to HAVs’ security and analyze risks connected with the threats of compromising sensors, control and connection mechanisms, as well as the vulnerabilities of the used technologies. They suggest the wording of a number of new articles in Chapter 27 of the Criminal Code of the Russian Federation devoted to HAVs, which incorporate the following: persons who participated in the development of the corresponding software and guidelines for using the vehicle, operators; actions that could inflict damage, a complex of publically dangerous consequences. A detailed description of four groups of subjects (violators) of infringements on the information system of HAVs is presented: persons using the vulnerability of an information system; malware creators; creators of information systems; operators of information systems. These groups should be taken into account when developing the corresponding norms within Chapter 27 of the Criminal Code of the Russian Federation, the features of aggravating circumstances and the individualization of punishment.