MS, University of Cincinnati, 2024, Education, Criminal Justice, and Human Services: Information Technology
We are witnessing a profound transformation within the automotive industry, propelled by the mass adoption of Electric Vehicles (EVs). As this transition unfolds at a rapid pace, it unveils security gaps within the emerging infrastructure, necessitating urgent attention and solutions. This thesis investigates the resilience to cybersecurity threats of a new standalone branch of EV charging application, which we propose terming "Fleet Charging Infrastructure" (FCI). We conducted a case study on one of the emerging leaders in EV fleet charging in the US market, Electrada.
To start the study, we analyzed Electrada's operation, the structure of their charging infrastructure, and the importance of internal processes that guarantee a 99% uptime commitment to their customers. Our research questions focused on characterizing FCI, identifying cybersecurity threats specific to it, and devising strategies for enhancing its resilience against cyberattacks. The study utilized STRIDE and DREAD frameworks for threat modeling and prioritization, along with well-established industry frameworks like NIST IR8473 and CIS CSC for threat mitigation planning.
As a result, we succeeded in outlining the key processes within FCI, enumerating major components and dataflows, and establishing distinctive features that later allowed us to identify 27 unique threats, propose mitigation actions for each threat, and develop a 3-step mitigation strategy plan for FCI operators based on their resource availability. Our findings highlight the distinctiveness of FCI as a standalone branch of EV charging applications, due to the uniqueness of internal processes, components, motivations, and goals compared to other iterations of EV Charging.
Committee: Isaac Kofi Nti Ph.D. (Committee Member); M. Murat Ozer Ph.D. (Committee Chair)
Subjects: Information Technology