Automotive threat model as code

What it is

A reusable Threagile threat model of a generic composite (domain plus zonal) battery-electric vehicle, plus 16 automotive-specific custom risk rules and a multi-hop attack-path analyzer. The rules key on a controlled tag vocabulary (bus types, exposure surfaces, security controls) so they apply to any vehicle model that follows the conventions, not just one topology.

The analyzer (Python and networkx) reads the model, builds an attacker-reachability graph, and runs BFS from every internet-exposed asset toward every safety-critical actuator. Each hop carries an Auto-ISAC Automotive Threat Matrix technique ID and a MITRE ATT&CK ICS technique ID, so the path output feeds an ISO 21434 TARA attack-path analysis step without a manual mapping pass.

It adds to existing threat-modeling methods rather than replacing them. Still a work in progress.

Full writeup: Automotive threat model as code on Threagile.