Skip to content

Introduction to ITS Cybersecurity Guidance

Welcome. This resource serves as a guide to Intelligent Transportation Systems (ITS) cybersecurity. It outlines the importance of ITS-tailored security mechanisms, the role of cybersecurity standards, and recommendations for selecting optimal cybersecurity standards for ITS implementations.

Start Here: Introduction to ITS Cybersecurity – A Beginner's Guide

Start with this introductory guide to understand why custom ITS security mechanisms, such as IEEE 1609.2, are essential, and why traditional security frameworks like X.509 are often insufficient for ITS and V2X systems.

Key Topics in ITS Cybersecurity

1. ITS Security Architectures

ITS cybersecurity architectures include the systems and processes used to secure devices, vehicles, communications networks, and backend systems. This section describes how these components interact to ensure secure data exchanges, establish trust between entities, and support interoperability across regions and jurisdictions.

2. Security Standards and Their Roles

This section explains key international standards for ITS security, including ISO 21177, IEEE 1609.2, and European standards such as ETSI TS 102 940 and ETSI TS 103 097. It describes the contexts in which these standards apply and provides guidance on selecting the right standard for specific ITS applications.

3. Trust Bridges

Trust bridges are mechanisms that enable the secure sharing of information between two independent domains. They can allow sharing of information between domains that may operate under differing security and operating policies and may also support bridging between domains that use different frameworks, such as X.509 and IEEE 1609.2.

4. System-Specific Security

System-specific security focuses on unique requirements for securing distinct ITS systems. This includes mechanisms for secure messaging, certificate management, and entitlements, as well as other measures to protect specific systems and devices such as Onboard Units (OBUs), Roadside Units (RSUs), and backend infrastructure services.

5. Stakeholder-Specific Guidance

This section provides guidance tailored to different stakeholder perspectives, helping decision-makers, standards developers, and implementers identify optimal policies, standards, and practices for secure and effective ITS deployments:

  • Decision-makers: Focus on policy priorities and investment strategies.
  • Standards developers: Ensure international alignment and interoperability.
  • Implementers: Address practical challenges in deployment.

6. Security Policies and Governance

This section covers creating security policies and governance frameworks for ITS systems, including defining roles, managing certificates, establishing trust frameworks, and aligning with regional and international standards.

7. Specialized Use Cases

This section provides examples of how ITS cybersecurity applies to different scenarios, from securing specific message types, such as TIM and probe messages, to broader applications like vehicle-to-infrastructure communications and interoperability across domains.