{"id":"https://openalex.org/W7202008465","doi":null,"title":"OTARQ: Adaptive and Automated Risk Quantification Method for OTA Updates in SDVs","display_name":"OTARQ: Adaptive and Automated Risk Quantification Method for OTA Updates in SDVs","publication_year":2026,"publication_date":"2026-08-03","ids":{"openalex":"https://openalex.org/W7202008465"},"language":"en","primary_location":{"id":"pmh:oai:HAL:hal-05709703v1","doi":null,"is_oa":true,"landing_page_url":"https://hal.science/hal-05709703v1","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I4405252976","host_organization_name":"Centre pour la Communication Scientifique Directe","host_organization_lineage":["https://openalex.org/I4405252976"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"2026","raw_type":"info:eu-repo/semantics/preprint"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://hal.science/hal-05709703v1","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5120077558","display_name":"khaoula Sghaier","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4210108314","display_name":"VeDeCoM Institute","ror":"https://ror.org/01ssrp339","country_code":"FR","type":"facility","lineage":["https://openalex.org/I4210108314"]},{"id":"https://openalex.org/I4210138808","display_name":"\u00c9cole Pour l'Informatique et les Techniques Avanc\u00e9es","ror":"https://ror.org/04r5ddq29","country_code":"FR","type":"education","lineage":["https://openalex.org/I4210138808"]},{"id":"https://openalex.org/I4387153010","display_name":"T\u00e9l\u00e9com SudParis","ror":"https://ror.org/05xvk4r52","country_code":"FR","type":"education","lineage":["https://openalex.org/I205703379","https://openalex.org/I4210145102","https://openalex.org/I4387153010"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Sghaier, Khaoula","raw_affiliation_strings":["LRE - Laboratoire de Recherche de l'EPITA (14-16, RUE VOLTAIRE94270 LE KREMLIN-BIC\u00caTREFRANCE - France)","TSP - T\u00e9l\u00e9com SudParis (9 rue Charles Fourier -91011 Evry Cedex - France)","VeDeCom - VEhicule  DEcarbon\u00e9 et  COmmuniquant et sa  Mobilit\u00e9 (77 rue des Chantiers78000 Versailles - France)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"LRE - Laboratoire de Recherche de l'EPITA (14-16, RUE VOLTAIRE94270 LE KREMLIN-BIC\u00caTREFRANCE - France)","institution_ids":["https://openalex.org/I4210138808"]},{"raw_affiliation_string":"TSP - T\u00e9l\u00e9com SudParis (9 rue Charles Fourier -91011 Evry Cedex - France)","institution_ids":["https://openalex.org/I4387153010"]},{"raw_affiliation_string":"VeDeCom - VEhicule  DEcarbon\u00e9 et  COmmuniquant et sa  Mobilit\u00e9 (77 rue des Chantiers78000 Versailles - France)","institution_ids":["https://openalex.org/I4210108314"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070131137","display_name":"Ghada Gharbi","orcid":"https://orcid.org/0009-0008-0871-0767","observed_orcids":["https://orcid.org/0009-0008-0871-0767"]},"institutions":[{"id":"https://openalex.org/I4210138808","display_name":"\u00c9cole Pour l'Informatique et les Techniques Avanc\u00e9es","ror":"https://ror.org/04r5ddq29","country_code":"FR","type":"education","lineage":["https://openalex.org/I4210138808"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Gharbi, Ghada","raw_affiliation_strings":["LRE - Laboratoire de Recherche de l'EPITA (14-16, RUE VOLTAIRE94270 LE KREMLIN-BIC\u00caTREFRANCE - France)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"LRE - Laboratoire de Recherche de l'EPITA (14-16, RUE VOLTAIRE94270 LE KREMLIN-BIC\u00caTREFRANCE - France)","institution_ids":["https://openalex.org/I4210138808"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043492852","display_name":"Badis Hammi","orcid":"https://orcid.org/0000-0002-4470-6406","observed_orcids":["https://orcid.org/0000-0002-4470-6406"]},"institutions":[{"id":"https://openalex.org/I4210145102","display_name":"Institut Polytechnique de Paris","ror":"https://ror.org/042tfbd02","country_code":"FR","type":"education","lineage":["https://openalex.org/I4210145102"]},{"id":"https://openalex.org/I4387153010","display_name":"T\u00e9l\u00e9com SudParis","ror":"https://ror.org/05xvk4r52","country_code":"FR","type":"education","lineage":["https://openalex.org/I205703379","https://openalex.org/I4210145102","https://openalex.org/I4387153010"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Hammi, Badis","raw_affiliation_strings":["IP Paris - Institut Polytechnique de Paris (Route de Saclay, 91120 Palaiseau Cedex, France - France)","SCN-SAMOVAR - S\u00e9curit\u00e9 et Confiance Num\u00e9rique (T\u00e9l\u00e9com Sudparis, 9 rue Charles Fourier -91011 Evry-Courcouronnes cedex - France)","TSP - T\u00e9l\u00e9com SudParis (9 rue Charles Fourier -91011 Evry Cedex - France)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IP Paris - Institut Polytechnique de Paris (Route de Saclay, 91120 Palaiseau Cedex, France - France)","institution_ids":["https://openalex.org/I4210145102"]},{"raw_affiliation_string":"SCN-SAMOVAR - S\u00e9curit\u00e9 et Confiance Num\u00e9rique (T\u00e9l\u00e9com Sudparis, 9 rue Charles Fourier -91011 Evry-Courcouronnes cedex - France)","institution_ids":["https://openalex.org/I4387153010"]},{"raw_affiliation_string":"TSP - T\u00e9l\u00e9com SudParis (9 rue Charles Fourier -91011 Evry Cedex - France)","institution_ids":["https://openalex.org/I4387153010"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000854990","display_name":"Pierre Merdrignac","orcid":"https://orcid.org/0000-0002-9528-2463","observed_orcids":["https://orcid.org/0000-0002-9528-2463"]},"institutions":[{"id":"https://openalex.org/I4210108314","display_name":"VeDeCoM Institute","ror":"https://ror.org/01ssrp339","country_code":"FR","type":"facility","lineage":["https://openalex.org/I4210108314"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Merdrignac, Pierre","raw_affiliation_strings":["VeDeCom - VEhicule  DEcarbon\u00e9 et  COmmuniquant et sa  Mobilit\u00e9 (77 rue des Chantiers78000 Versailles - France)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"VeDeCom - VEhicule  DEcarbon\u00e9 et  COmmuniquant et sa  Mobilit\u00e9 (77 rue des Chantiers78000 Versailles - France)","institution_ids":["https://openalex.org/I4210108314"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016053641","display_name":"Pierre Parrend","orcid":"https://orcid.org/0000-0002-1680-1182","observed_orcids":["https://orcid.org/0000-0002-1680-1182"]},"institutions":[{"id":"https://openalex.org/I4210100283","display_name":"Laboratoire des Sciences de l'Ing\u00e9nieur, de l'Informatique et de l'Imagerie","ror":"https://ror.org/00k4e5n71","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1326498283","https://openalex.org/I2801509770","https://openalex.org/I4210095849","https://openalex.org/I4210100283","https://openalex.org/I4210159245","https://openalex.org/I68947357"]},{"id":"https://openalex.org/I4210138808","display_name":"\u00c9cole Pour l'Informatique et les Techniques Avanc\u00e9es","ror":"https://ror.org/04r5ddq29","country_code":"FR","type":"education","lineage":["https://openalex.org/I4210138808"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Parrend, Pierre","raw_affiliation_strings":["ICube - Laboratoire des sciences de l'ing\u00e9nieur, de l'informatique et de l'imagerie (300 bd S\u00e9bastien Brant - BP 10413 - F-67412 Illkirch Cedex - France)","LRE - Laboratoire de Recherche de l'EPITA (14-16, RUE VOLTAIRE94270 LE KREMLIN-BIC\u00caTREFRANCE - France)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ICube - Laboratoire des sciences de l'ing\u00e9nieur, de l'informatique et de l'imagerie (300 bd S\u00e9bastien Brant - BP 10413 - F-67412 Illkirch Cedex - France)","institution_ids":["https://openalex.org/I4210100283"]},{"raw_affiliation_string":"LRE - Laboratoire de Recherche de l'EPITA (14-16, RUE VOLTAIRE94270 LE KREMLIN-BIC\u00caTREFRANCE - France)","institution_ids":["https://openalex.org/I4210138808"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5087268816","display_name":"Didier Verna","orcid":"https://orcid.org/0000-0002-6315-052X","observed_orcids":["https://orcid.org/0000-0002-6315-052X"]},"institutions":[{"id":"https://openalex.org/I4210138808","display_name":"\u00c9cole Pour l'Informatique et les Techniques Avanc\u00e9es","ror":"https://ror.org/04r5ddq29","country_code":"FR","type":"education","lineage":["https://openalex.org/I4210138808"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Verna, Didier","raw_affiliation_strings":["LRE - Laboratoire de Recherche de l'EPITA (14-16, RUE VOLTAIRE94270 LE KREMLIN-BIC\u00caTREFRANCE - France)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"LRE - Laboratoire de Recherche de l'EPITA (14-16, RUE VOLTAIRE94270 LE KREMLIN-BIC\u00caTREFRANCE - France)","institution_ids":["https://openalex.org/I4210138808"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.41920000314712524,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.41920000314712524,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10761","display_name":"Vehicular Ad Hoc Networks (VANETs)","score":0.19740000367164612,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13295","display_name":"Safety Systems Engineering in Autonomy","score":0.13089999556541443,"subfield":{"id":"https://openalex.org/subfields/2213","display_name":"Safety, Risk, Reliability and Quality"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/over-the-air-updates","display_name":"over-the-air updates","score":0.9950000047683716},{"id":"https://openalex.org/keywords/software-defined-vehicles","display_name":"software-defined vehicles","score":0.9990000128746033},{"id":"https://openalex.org/keywords/attack-surface","display_name":"attack surface","score":0.6399999856948853}],"concepts":[{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.7806000113487244},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6898000240325928},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.6870999932289124},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.6446999907493591},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.5695000290870667},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.48339998722076416},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.41749998927116394},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.3950999975204468},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.39410001039505005},{"id":"https://openalex.org/C21200559","wikidata":"https://www.wikidata.org/wiki/Q7451068","display_name":"Sensitivity (control systems)","level":2,"score":0.3921999931335449},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3619000017642975},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3476000130176544},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.3434999883174896},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.3165000081062317},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.31189998984336853},{"id":"https://openalex.org/C172776598","wikidata":"https://www.wikidata.org/wiki/Q7943570","display_name":"Vulnerability management","level":4,"score":0.3116999864578247},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.28999999165534973},{"id":"https://openalex.org/C125611927","wikidata":"https://www.wikidata.org/wiki/Q17008131","display_name":"Criticality","level":2,"score":0.2896000146865845},{"id":"https://openalex.org/C200601418","wikidata":"https://www.wikidata.org/wiki/Q2193887","display_name":"Reliability engineering","level":1,"score":0.287200003862381},{"id":"https://openalex.org/C92446256","wikidata":"https://www.wikidata.org/wiki/Q3306762","display_name":"Data validation","level":2,"score":0.265500009059906},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.2526000142097473}],"mesh":[],"locations_count":1,"locations":[{"id":"pmh:oai:HAL:hal-05709703v1","doi":null,"is_oa":true,"landing_page_url":"https://hal.science/hal-05709703v1","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I4405252976","host_organization_name":"Centre pour la Communication Scientifique Directe","host_organization_lineage":["https://openalex.org/I4405252976"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"2026","raw_type":"info:eu-repo/semantics/preprint"}],"best_oa_location":{"id":"pmh:oai:HAL:hal-05709703v1","doi":null,"is_oa":true,"landing_page_url":"https://hal.science/hal-05709703v1","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I4405252976","host_organization_name":"Centre pour la Communication Scientifique Directe","host_organization_lineage":["https://openalex.org/I4405252976"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"2026","raw_type":"info:eu-repo/semantics/preprint"},"sustainable_development_goals":[{"score":0.7207000255584717,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7155591425","https://openalex.org/W7171797643","https://openalex.org/W3150755857","https://openalex.org/W7043845746","https://openalex.org/W4402957942","https://openalex.org/W4225144658","https://openalex.org/W7165067226","https://openalex.org/W7209298662","https://openalex.org/W7161305870","https://openalex.org/W4405355920"],"abstract_inverted_index":{"The":[0,91],"increasing":[1],"frequency":[2],"of":[3,129],"Over-The-Air":[4],"(OTA)":[5],"updates":[6,59],"on":[7,120],"Software-Defined":[8],"Vehicles":[9],"(SDVs),":[10],"combined":[11],"with":[12,26],"heterogeneous":[13],"OTA":[14,58,122,139],"architectures,":[15,50],"introduces":[16],"unpredictable":[17],"attack":[18,42],"entry":[19],"points":[20],"and":[21,69,87,106,116,133],"vulnerabilities":[22,30],"that":[23,83],"may":[24,60],"scale":[25],"fleet":[27,88],"size.":[28],"These":[29],"can":[31],"escalate":[32],"from":[33,99],"external":[34],"infrastructure":[35],"components":[36],"to":[37,113,136],"in-vehicle":[38],"systems,":[39],"expanding":[40],"the":[41,45,127,130],"surface":[43],"across":[44],"update":[46,114],"ecosystem.":[47],"In":[48],"SDV":[49],"realtime":[51],"vulnerability":[52,101,117,141],"risk":[53,80,97,131],"management":[54],"is":[55,104],"challenging,":[56],"as":[57],"be":[61],"deployed":[62],"before":[63],"corresponding":[64],"security":[65],"patches":[66],"are":[67],"released":[68],"validated.":[70],"This":[71],"work":[72],"presents":[73],"OTARQ":[74,103],"(OTA":[75],"Risk":[76],"Quantification),":[77],"an":[78],"automated":[79],"quantification":[81,132],"framework":[82,92],"integrates":[84],"cybersecurity,":[85],"safety,":[86],"impact":[89],"assessment.":[90],"automatically":[93],"computes":[94],"a":[95],"final":[96],"score":[98],"natural-language":[100],"descriptions.":[102],"adaptive":[105],"context-aware,":[107],"dynamically":[108],"adjusting":[109],"its":[110,134],"parameters":[111],"according":[112],"criticality":[115],"location.":[118],"Experiments":[119],"representative":[121],"threat":[123],"scenarios":[124],"validate":[125],"both":[126],"accuracy":[128],"sensitivity":[135],"deployment":[137],"context.SDV,":[138],"updates,":[140],"analysis":[142]},"counts_by_year":[],"updated_date":"2026-10-25T09:29:13.331239","created_date":"2026-08-09T00:00:00"}