A Double Assessment of Privacy Risks Aboard Top-Selling Cars

Abstract The advanced and personalised experience that modern cars offer makes them more data-hungry. For example, the cabin preferences of possible drivers must be recorded associated to some identity, while such data could exploited deduce sensitive information about driver’s health. Therefore, drivers’ privacy taken seriously, requiring a dedicated risk assessment framework, as presented in this paper through double combining asset-oriented ISO approach with threat-oriented STRIDE approach. framework is tailored level specific car brand demonstrated on ten top-selling brands well as, due its innovative character, Tesla. two approaches yield different, but complementary findings, demonstrating additional insights gained their parallel adoption.