{"id":"https://openalex.org/W4390189293","doi":"https://doi.org/10.1109/dasc/picom/cbdcom/cy59711.2023.10361381","title":"User-Centric Security and Privacy Threats in Connected Vehicles: A Threat Modeling Analysis Using STRIDE and LINDDUN","display_name":"User-Centric Security and Privacy Threats in Connected Vehicles: A Threat Modeling Analysis Using STRIDE and LINDDUN","publication_year":2023,"publication_date":"2023-11-14","ids":{"openalex":"https://openalex.org/W4390189293","doi":"https://doi.org/10.1109/dasc/picom/cbdcom/cy59711.2023.10361381"},"language":"en","primary_location":{"id":"doi:10.1109/dasc/picom/cbdcom/cy59711.2023.10361381","is_oa":false,"landing_page_url":"https://doi.org/10.1109/dasc/picom/cbdcom/cy59711.2023.10361381","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Intl Conf on Dependable, Autonomic and Secure Computing, Intl Conf on Pervasive Intelligence and Computing, Intl Conf on Cloud and Big Data Computing, Intl Conf on Cyber Science and Technology Congress (DASC/PiCom/CBDCom/CyberSciTech)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5093577355","display_name":"Be\u00e1ta Stingelov\u00e1","orcid":null},"institutions":[{"id":"https://openalex.org/I102248843","display_name":"Vienna University of Economics and Business","ror":"https://ror.org/03yn8s215","country_code":"AT","type":"education","lineage":["https://openalex.org/I102248843"]}],"countries":["AT"],"is_corresponding":true,"raw_author_name":"Be\u00e1ta Stingelov\u00e1","raw_affiliation_strings":["Vienna University of Economics and Business,Information Systems and Operations Management,Vienna,Austria","Information Systems and Operations Management, Vienna University of Economics and Business, Vienna, Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Vienna University of Economics and Business,Information Systems and Operations Management,Vienna,Austria","institution_ids":["https://openalex.org/I102248843"]},{"raw_affiliation_string":"Information Systems and Operations Management, Vienna University of Economics and Business, Vienna, Austria","institution_ids":["https://openalex.org/I102248843"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5093577356","display_name":"Clemens Thadd\u00e4us Thrakl","orcid":null},"institutions":[{"id":"https://openalex.org/I102248843","display_name":"Vienna University of Economics and Business","ror":"https://ror.org/03yn8s215","country_code":"AT","type":"education","lineage":["https://openalex.org/I102248843"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Clemens Thadd\u00e4us Thrakl","raw_affiliation_strings":["Vienna University of Economics and Business,Information Systems and Operations Management,Vienna,Austria","Information Systems and Operations Management, Vienna University of Economics and Business, Vienna, Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Vienna University of Economics and Business,Information Systems and Operations Management,Vienna,Austria","institution_ids":["https://openalex.org/I102248843"]},{"raw_affiliation_string":"Information Systems and Operations Management, Vienna University of Economics and Business, Vienna, Austria","institution_ids":["https://openalex.org/I102248843"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5093577357","display_name":"Laura Wro\u0144ska","orcid":null},"institutions":[{"id":"https://openalex.org/I102248843","display_name":"Vienna University of Economics and Business","ror":"https://ror.org/03yn8s215","country_code":"AT","type":"education","lineage":["https://openalex.org/I102248843"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Laura Wro\u0144ska","raw_affiliation_strings":["Vienna University of Economics and Business,Information Systems and Operations Management,Vienna,Austria","Information Systems and Operations Management, Vienna University of Economics and Business, Vienna, Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Vienna University of Economics and Business,Information Systems and Operations Management,Vienna,Austria","institution_ids":["https://openalex.org/I102248843"]},{"raw_affiliation_string":"Information Systems and Operations Management, Vienna University of Economics and Business, Vienna, Austria","institution_ids":["https://openalex.org/I102248843"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5093577358","display_name":"Sandra Jedrej-Szymankiewicz","orcid":null},"institutions":[{"id":"https://openalex.org/I102248843","display_name":"Vienna University of Economics and Business","ror":"https://ror.org/03yn8s215","country_code":"AT","type":"education","lineage":["https://openalex.org/I102248843"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Sandra Jedrej-Szymankiewicz","raw_affiliation_strings":["Vienna University of Economics and Business,Information Systems and Operations Management,Vienna,Austria","Information Systems and Operations Management, Vienna University of Economics and Business, Vienna, Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Vienna University of Economics and Business,Information Systems and Operations Management,Vienna,Austria","institution_ids":["https://openalex.org/I102248843"]},{"raw_affiliation_string":"Information Systems and Operations Management, Vienna University of Economics and Business, Vienna, Austria","institution_ids":["https://openalex.org/I102248843"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084521751","display_name":"Sajjad Khan","orcid":"https://orcid.org/0000-0002-6608-5065"},"institutions":[{"id":"https://openalex.org/I102248843","display_name":"Vienna University of Economics and Business","ror":"https://ror.org/03yn8s215","country_code":"AT","type":"education","lineage":["https://openalex.org/I102248843"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Sajjad Khan","raw_affiliation_strings":["Vienna University of Economics and Business,Information Systems and Operations Management,Vienna,Austria","Information Systems and Operations Management, Vienna University of Economics and Business, Vienna, Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Vienna University of Economics and Business,Information Systems and Operations Management,Vienna,Austria","institution_ids":["https://openalex.org/I102248843"]},{"raw_affiliation_string":"Information Systems and Operations Management, Vienna University of Economics and Business, Vienna, Austria","institution_ids":["https://openalex.org/I102248843"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5049821727","display_name":"Davor Svetinovi\u0107","orcid":"https://orcid.org/0000-0002-3020-9556"},"institutions":[{"id":"https://openalex.org/I176601375","display_name":"Khalifa University of Science and Technology","ror":"https://ror.org/05hffr360","country_code":"AE","type":"education","lineage":["https://openalex.org/I176601375"]},{"id":"https://openalex.org/I102248843","display_name":"Vienna University of Economics and Business","ror":"https://ror.org/03yn8s215","country_code":"AT","type":"education","lineage":["https://openalex.org/I102248843"]}],"countries":["AE","AT"],"is_corresponding":false,"raw_author_name":"Davor Svetinovic","raw_affiliation_strings":["Vienna University of Economics and Business,Information Systems and Operations Management,Vienna,Austria","Information Systems and Operations Management, Vienna University of Economics and Business, Vienna, Austria","Center for Cyber-Physical Systems, Electrical Engineering and Computer Science, Khalifa University, Abu Dhabi, UAE"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Vienna University of Economics and Business,Information Systems and Operations Management,Vienna,Austria","institution_ids":["https://openalex.org/I102248843"]},{"raw_affiliation_string":"Information Systems and Operations Management, Vienna University of Economics and Business, Vienna, Austria","institution_ids":["https://openalex.org/I102248843"]},{"raw_affiliation_string":"Center for Cyber-Physical Systems, Electrical Engineering and Computer Science, Khalifa University, Abu Dhabi, UAE","institution_ids":["https://openalex.org/I176601375"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5093577355"],"corresponding_institution_ids":["https://openalex.org/I102248843"],"apc_list":null,"apc_paid":null,"fwci":0.8851,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.74578386,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"0690","last_page":"0697"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10761","display_name":"Vehicular Ad Hoc Networks (VANETs)","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10761","display_name":"Vehicular Ad Hoc Networks (VANETs)","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9761000275611877,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9736999869346619,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7702879905700684},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6168057918548584},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.5489252209663391},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.5379638671875},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.4665766656398773},{"id":"https://openalex.org/keywords/stride","display_name":"STRIDE","score":0.455483615398407},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.4272739589214325},{"id":"https://openalex.org/keywords/safeguard","display_name":"Safeguard","score":0.42552947998046875},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.13297629356384277},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.12545877695083618}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7702879905700684},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6168057918548584},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5489252209663391},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.5379638671875},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.4665766656398773},{"id":"https://openalex.org/C18007350","wikidata":"https://www.wikidata.org/wiki/Q7394815","display_name":"STRIDE","level":2,"score":0.455483615398407},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.4272739589214325},{"id":"https://openalex.org/C2780771206","wikidata":"https://www.wikidata.org/wiki/Q3271761","display_name":"Safeguard","level":2,"score":0.42552947998046875},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.13297629356384277},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.12545877695083618},{"id":"https://openalex.org/C155202549","wikidata":"https://www.wikidata.org/wiki/Q178803","display_name":"International trade","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/dasc/picom/cbdcom/cy59711.2023.10361381","is_oa":false,"landing_page_url":"https://doi.org/10.1109/dasc/picom/cbdcom/cy59711.2023.10361381","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Intl Conf on Dependable, Autonomic and Secure Computing, Intl Conf on Pervasive Intelligence and Computing, Intl Conf on Cloud and Big Data Computing, Intl Conf on Cyber Science and Technology Congress (DASC/PiCom/CBDCom/CyberSciTech)","raw_type":"proceedings-article"},{"id":"pmh:oai:research.wu.ac.at:openaire_cris_publications/7acdae21-122b-43fa-8bdf-d7a70b6c05b7","is_oa":false,"landing_page_url":"https://research.wu.ac.at/de/publications/7acdae21-122b-43fa-8bdf-d7a70b6c05b7","pdf_url":null,"source":{"id":"https://openalex.org/S7407055123","display_name":"WU Research","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Stingelova, B, Thaddaus Thrakl, C, Wronska, L, Jedrej-Szymankiewicz, S, Khan, S & Svetinovic, D 2023, User-Centric Security and Privacy Threats in Connected Vehicles: A Threat Modeling Analysis Using STRIDE and LINDDUN. in 2023 IEEE Intl Conf on Dependable, Autonomic and Secure Computing, Intl Conf on Pervasive Intelligence and Computing, Intl Conf on Cloud and Big Data Computing, Intl Conf on Cyber Science and Technology Congress (DASC/PiCom/CBDCom/CyberSciTech) : Abu Dhabi, United Arab Emirates : 14-17 Nov. 2023. IEEE, New York, pp. 0690-0697. https://doi.org/10.1109/DASC/PiCom/CBDCom/Cy59711.2023.10361381","raw_type":"info:eu-repo/semantics/conferenceObject"},{"id":"pmh:oai:research.wu.ac.at:publications/7acdae21-122b-43fa-8bdf-d7a70b6c05b7","is_oa":false,"landing_page_url":"https://ieeexplore.ieee.org/document/10361381","pdf_url":null,"source":{"id":"https://openalex.org/S7407055123","display_name":"WU Research","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Stingelova, B, Thaddaus Thrakl, C, Wronska, L, Jedrej-Szymankiewicz, S, Khan, S & Svetinovic, D 2023, User-Centric Security and Privacy Threats in Connected Vehicles: A Threat Modeling Analysis Using STRIDE and LINDDUN. in 2023 IEEE Intl Conf on Dependable, Autonomic and Secure Computing, Intl Conf on Pervasive Intelligence and Computing, Intl Conf on Cloud and Big Data Computing, Intl Conf on Cyber Science and Technology Congress (DASC/PiCom/CBDCom/CyberSciTech) : Abu Dhabi, United Arab Emirates : 14-17 Nov. 2023. IEEE, New York, pp. 0690-0697. https://doi.org/10.1109/DASC/PiCom/CBDCom/Cy59711.2023.10361381","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":34,"referenced_works":["https://openalex.org/W1563548484","https://openalex.org/W1968060304","https://openalex.org/W1968181708","https://openalex.org/W2118991740","https://openalex.org/W2521755897","https://openalex.org/W2530179903","https://openalex.org/W2569087064","https://openalex.org/W2591550902","https://openalex.org/W2740083711","https://openalex.org/W2762158083","https://openalex.org/W2804321582","https://openalex.org/W2890212356","https://openalex.org/W2908584258","https://openalex.org/W2909630727","https://openalex.org/W2912418746","https://openalex.org/W2913975235","https://openalex.org/W2919650678","https://openalex.org/W2922789912","https://openalex.org/W2982431216","https://openalex.org/W3010960270","https://openalex.org/W3095459720","https://openalex.org/W3114627546","https://openalex.org/W3126330054","https://openalex.org/W3136050648","https://openalex.org/W3194231412","https://openalex.org/W3199433898","https://openalex.org/W4206529651","https://openalex.org/W4256337614","https://openalex.org/W4312336047","https://openalex.org/W4319878793","https://openalex.org/W4323338839","https://openalex.org/W4367360175","https://openalex.org/W6727184509","https://openalex.org/W6744299354"],"related_works":["https://openalex.org/W3121667336","https://openalex.org/W2492640494","https://openalex.org/W2102922206","https://openalex.org/W3165053742","https://openalex.org/W3146566150","https://openalex.org/W2380973494","https://openalex.org/W2694044524","https://openalex.org/W3091873281","https://openalex.org/W2380445096","https://openalex.org/W4400285325"],"abstract_inverted_index":{"The":[0,57],"increasing":[1,58],"equipment":[2],"of":[3,20,27,60,94,133,138,147,154,168,209],"cars":[4,24,61,77,109],"with":[5,11,34,176],"smart":[6],"systems":[7],"and":[8,40,55,96,103,113,121,181],"their":[9],"networking":[10],"other":[12,35,114,177],"devices":[13,30],"is":[14],"leading":[15],"to":[16,66,110,172,185,203],"a":[17,79,85,92,130,134,206],"growing":[18],"network":[19],"connected":[21,76,136,155],"vehicles.":[22],"Connected":[23],"are":[25],"Internet":[26],"Things":[28],"(IoT)":[29],"that":[31,105,144],"communicate":[32],"bidirectionally":[33],"systems,":[36],"enabling":[37],"internet":[38,112],"access":[39],"data":[41,170],"exchange.":[42],"Artificial":[43],"Intelligence":[44],"(AI)":[45],"offers":[46],"benefits":[47],"such":[48,163],"as":[49,164],"autonomous":[50],"driving,":[51],"driver":[52],"assistance":[53],"programs,":[54],"monitoring.":[56],"connectivity":[59],"also":[62,189],"brings":[63],"new":[64],"risks":[65],"users'":[67],"privacy.":[68],"Our":[69,82,141],"study":[70,83,127,142],"focuses":[71],"on":[72,91,129],"privacy":[73,153],"threats":[74,102,148],"in":[75],"from":[78,107],"user":[80],"perspective.":[81],"provides":[84],"comprehensive":[86,200],"threat":[87,201],"model":[88,132],"analysis":[89],"based":[90,128],"combination":[93],"STRIDE":[95],"LINDDUN.":[97],"We":[98,124],"analyze":[99],"the":[100,111,152,160,165,173,182,191],"various":[101],"vulnerabilities":[104],"arise":[106],"connecting":[108],"devices,":[115,178],"including":[116,179],"Vehicle-to-Vehicle":[117],"(V2V),":[118],"Vehicle-to-Vloud":[119],"(V2C),":[120],"Vehicle-to-Device":[122],"(V2D).":[123],"conduct":[125],"our":[126,199],"theoretical":[131],"modern-day":[135],"vehicle":[137],"another":[139],"study.":[140],"shows":[143],"several":[145],"types":[146],"can":[149],"negatively":[150],"impact":[151],"car":[156],"users.":[157],"This":[158],"encapsulates":[159],"potential":[161],"risks,":[162],"inadvertent":[166],"disclosure":[167],"personal":[169],"due":[171],"vehicle's":[174],"interconnectedness":[175],"smartphones,":[180],"subsequent":[183],"susceptibility":[184],"unauthorized":[186],"access,":[187],"while":[188],"highlighting":[190],"need":[192],"for":[193],"robust":[194],"security":[195],"measures":[196],"indicated":[197],"by":[198],"modeling,":[202],"safeguard":[204],"against":[205],"wide":[207],"array":[208],"identified":[210],"cybersecurity":[211],"threats.":[212]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":2}],"updated_date":"2026-05-07T13:39:58.223016","created_date":"2025-10-10T00:00:00"}