A Survey of Security and Privacy Issues in V2X Communication Systems

Vehicle-to-Everything (V2X) communication is receiving growing attention from industry and academia as multiple pilot projects explore its capabilities and feasibility. With about 50% of global road vehicle exports coming from the European Union (EU), and within the context of EU legislation around security and data protection, V2X initiatives must consider security and privacy aspects across the system stack, in addition to road safety. Contrary to this principle, our survey of relevant standards, research outputs, and EU pilot projects indicates otherwise; we identify multiple security and privacy related shortcomings and inconsistencies across the standards.We conduct a root cause analysis of the reasons and diiculties associated with these gaps, and categorize the identiied security and privacy issues relative to these root causes. As a result, our comprehensive analysis sheds lights on a number of areas that require improvements in the standards, which are not explicitly identiied in related work. Our analysis ills gaps left by other related surveys, which are focused on speciic technical areas but not necessarily point out underlying root issues in standard speciications. We bring forward recommendations to address these gaps for the overall improvement of security and safety in vehicular communication. ; sponsorship: CyberSecurity Research Flanders|VR20192203, Research Council KU Leuven C1 on Security and Privacy for Cyber-Physical Systems and the Internet of Things|C16/15/058, Flemish Government the imec Netsec project, the EIT Health RAMSES project, the Smart Highways SErVo project,, European Commission Horizon 2020|H2020-SC1-FA-DTS-2018-1-826284 ProTego and MSCA-ITN- 814035 5GhOSTS ; status: Published online