Cybersecurity in Connected and Autonomous Vehicles: A Systematic Review of Automotive Security
Rafael Abreu, Frederico Branco, Manuel J. C. S. Reis, Carlos Serôdio
Abstract
The rapid evolution of the automotive industry has driven the emergence of Connected and Autonomous Vehicles, raising significant concerns about the cybersecurity vulnerabilities inherent in their complex networks. This systematic review investigates cybersecurity in Connected and Autonomous Vehicles, focusing on internal and external networks and addressing four key research questions: (RQ1) What security controls exist in CAV networks? (RQ2) What methodologies are employed in cybersecurity studies? (RQ3) How effective are these methods, and what limitations do they present? (RQ4) What are the key themes, common approaches, and future research directions? Peer-reviewed studies published between 2019 and 2024 were included, using IEEE Xplore, Elsevier, MDPI, ACM Digital Library, and Springer as data sources. Following PRISMA 2020 guidelines, 111 relevant articles were analysed and grouped into seven themes: Authentication, Blockchain, Intrusion Detection Systems, Vehicle-to-Everything communication, Network Operation Centers, Security Operations Centers, and Systematic Reviews. The thematic synthesis highlighted study objectives, methodologies, and implemented security controls. This review identifies significant gaps in the literature, particularly in integrating Security Information and Event Management systems and the real-world validation of proposed security measures. It underscores the need for adaptive cybersecurity frameworks to address evolving threats and highlights the importance of collaboration between academia and industry. Furthermore, future research should prioritize the development of advanced security protocols, address scalability challenges, and explore the impact of emerging technologies such as Artificial Intelligence and 5G. Providing awareness and training is also essential to mitigate human error. These findings are a foundation for designing more resilient and secure Connected and Autonomous Vehicles systems.