Intelligent Transportation Systems (ITS) Information Security Analysis

1997PDFTech Reporthttps://www.fhwa.dot.gov/publications/research/operations/its/jpo98009/itssecanalysis.pdfFHWA-JPO-98-009DTFH61-95-C-00040Intelligent transportation systemsSecurityAnalysisUnited StatesUnited States. Joint Program Office for Intelligent Transportation SystemsBiesecker, KeithForeman, ElizabethJones, KevinStaples, Barbara L.Mitretek SystemsUnited States. Joint Program Office for Intelligent Transportation SystemsJones, William S.Federal Highway AdministrationThe Intelligent Transportation Systems (ITS) program is the application of information technologies (computing, sensing, and communications) to surface transportation. Because of a reliance on these technologies, ITS will become increasingly dependent on information security. By understanding how to achieve and maintain secure systems, the ITS community can develop comprehensive information security practices and appropriate security policies for ITS programs. Subsequently, they can put these into practice. This document presents the results from an information security analysis that was based on the National ITS Architecture. The ITS information security analysis comprised three assessments to identify and characterize the various threats to (1) the ITS subsystems, (2) their exchange of information, and (3) their supporting communications infrastructure. The assessments also provide recommended solutions (i.e., security services) that can be used to reduce or eliminate identified threats and to better protect ITS. While focusing on the threats and their impacts to ITS security, this report also provides necessary background information and a general understanding of information security. It addresses common information and general security issues as well as those that pertain specifically to ITS. The conclusions and recommendations from this report address increasing information security awareness within the ITS community, the development of secure ITS operations, and the issue of future security activities within the ITS domain.78