COMPONENT MALFUNCTION IMPACT ASSESSMENT
Methods and systems for assessing, detecting, and responding to malfunctions involving components of autonomous vehicles and/or smart homes are described herein. A risk of malfunction and/or cyber-attack may be determined by collecting operating data from a plurality of autonomous vehicles and/or smart homes. The operating data may be analyzed to identify occurrences of a component malfunctioning. For each component, a risk associated with malfunctioning and/or cyber-attack may be determined based upon the identified occurrences. Based on the risks, at least one result associated with the malfunction and/or cyber-attack may be determined. A component profile may be generated based upon the determined risk and/or the impact of the determined results.
1 . A computer-implemented method for assessing a component for a risk of cyber-attack, comprising:
collecting, by one or more processors, operating information from a plurality of autonomous vehicles or a plurality of smart homes, each having a plurality of components, wherein each vehicle of the plurality of autonomous vehicles or each smart home of the plurality of smart homes includes at least one instance of the component to be assessed;
identifying, by the one or more processors, occurrences of the component malfunctioning in the operating information;
determining, by the one or more processors, a risk of one or more cyber-attacks associated with the component based upon the identified occurrences of the component malfunctioning;
determining, by the one or more processors, at least one predicted result of each of the one or more cyber-attacks, each predicted result indicating an impact of each of the one or more cyber-attacks on at least one of the following: a risk of a predicted loss-event or severity of a predicted loss-event;
generating, by the one or more processors, a component profile for the component indicating one or more combinations of risk and impact associated with the one or more cyber-attacks based upon one or more functions that would be controlled by the one or more cyber-attacks, wherein the one or more combinations of risk and impact associated with the one or more cyber-attacks comprise a risk based upon interactions between the component and other components of the plurality of components; and
adjusting, by the one or more processors, the component by causing the component to be repaired, replaced, updated, or upgraded based upon the component profile for the component.
2 . The computer-implemented method of claim 1 , wherein the component is a version of a software program.
3 . The computer-implemented method of claim 1 , wherein the component is a type of sensor configured to provide sensor data for use in controlling autonomous vehicles or smart homes.
4 . The computer-implemented method of claim 1 , wherein the severity of the predicted event indicates at least one of damage associated with the predicted loss-event, injuries associated with the predicted loss-event, or costs associated with the predicted loss-event.
5 . (canceled)
6 . (canceled)
7 . The computer-implemented method of claim 1 , wherein the component profile indicates a plurality of combinations, each further associated with adjustable settings for at least one autonomous operation feature associated with the component.
8 . The computer-implemented method of claim 1 , wherein the component profile indicates a plurality of combinations, each further associated with usage conditions of the plurality of autonomous vehicles or the plurality of smart homes.
9 . The computer-implemented method of claim 1 , wherein the component profile further indicates an expected usable lifetime of the component, the expected usable lifetime being an estimate of time or distance before malfunction of the component.
10 . The computer-implemented method of claim 1 , wherein the impact is further based upon one or more mitigating actions of an autonomous operating system taken in response to occurrences of the component malfunctioning.
11 . The computer-implemented method of claim 10 , wherein the one or more mitigating actions are associated with software versions of the autonomous operating system.
12 . The computer-implemented method of claim 10 , wherein the one or more mitigating actions include using data from a redundant component of a same type as the component when the component malfunctions.
13 . The computer-implemented method of claim 1 , further comprising:
receiving information regarding a plurality of components of an autonomous vehicle or a smart home; and
generating, by one or more processors, a risk profile for the autonomous vehicle or the smart home based upon one or more component profile entries corresponding to the plurality of components.
14 . The computer-implemented method of claim 13 , wherein adjusting the component by causing the component to be repaired, replaced, updated, or upgraded further comprises:
generating, by one or more processors, a message recommending at least one component of the plurality of components be adjusted; and
communicating the message to at least one of an owner, an occupant, or an operator of the autonomous vehicle or smart home.
15 . The computer-implemented method of claim 14 , wherein the message includes an indication of a reduction in risk or a reduction in a cost associated with an insurance policy associated with the recommended adjustment to the component.
16 . The computer-implemented method of claim 1 , wherein the operating information includes operating data associated with the plurality of autonomous vehicles or the plurality of smart homes.
17 . A computer system configured for use in autonomous vehicles or smart homes, comprising:
one or more processors;
a communication module adapted to communicate with autonomous vehicles or smart homes; and
a non-transitory program memory coupled to the one or more processors and storing executable instructions that, when executed by the one or more processors, cause the computer system to:
collect operating information from a plurality of autonomous vehicles or a plurality of smart homes, each having a plurality of components via the communication module, wherein each vehicle of the plurality of autonomous vehicles or smart homes of the plurality of smart homes includes at least one instance of the component to be assessed;
identify occurrences of the component malfunctioning in the operating information;
determine a risk of one or more cyber-attacks associated with the component based upon the identified occurrences of the component malfunctioning;
determine at least one predicted result of each of the one or more cyber-attacks, each predicted result indicating an impact of each of the one or more cyber-attacks on at least one of the following: a risk of a predicted loss-event or severity of a predicted loss-event;
generate a component profile for the component indicating one or more combinations of risk and impact associated with the one or more cyber-attacks based upon one or more functions that would be controlled by the one or more cyber-attacks, wherein the one or more combinations of risk and impact associated with the one or more cyber-attacks comprise a risk based upon interactions between the component and other components of the plurality of components; and
adjust the component by causing the component to be repaired, replaced, updated, or upgraded based upon the component profile for the component.
18 . The computer system of claim 17 , wherein the instructions, when executed by the one or more processors, further cause the computer system to:
receive information regarding a plurality of components of an autonomous vehicle or a smart home; and
generate a risk profile for the autonomous vehicle or the smart home based upon one or more component profile entries corresponding to the plurality of components.
19 . The computer system of claim 17 , wherein the instructions, when executed by the one or more processors, further cause the computer system to adjust the component by causing the component to be repaired, replaced, updated, or upgraded by:
generating a message recommending at least one component of the plurality of components be adjusted; and
communicating the message to at least one of an owner, an occupant or an operator of the autonomous vehicle or the smart home.
20 . A non-transitory computer-readable storage medium storing processor-executable instructions, that when executed cause one or more processors to:
collect operating information from a plurality of autonomous vehicles or a plurality of smart homes, each having a plurality of components via the communication module, wherein each vehicle of the plurality of autonomous vehicles or smart homes of the plurality of smart homes includes at least one instance of the component to be assessed;
identify occurrences of the component malfunctioning in the operating information;
determine a risk of one or more cyber-attacks associated with the component based upon the identified occurrences of the component malfunctioning;
determine at least one predicted result of each of the one or more cyber-attacks, each predicted result indicating an impact of each of the one or more cyber-attacks on at least one of the following: a risk of a predicted loss-event or severity of a predicted loss-event;
generate a component profile for the component indicating one or more combinations of risk and impact associated with the one or more cyber-attacks based upon one or more functions that would be controlled by the one or more cyber-attacks;
adjust the component by causing the component to be repaired, replaced, updated, or upgraded based upon the component profile for the component; and
provide an indication of a reduction in the risk of the one or more cyber-attacks based upon the adjustment of the component.
21 . The computer-implemented method of claim 1 , wherein the software vulnerabilities of the component are associated with functions of the component that can be controlled during the one or more cyber-attacks.
22 . The computer-implemented method of claim 1 , wherein the component profile includes one or more scores that each indicate an expected value of the impact of the one or more cyber-attacks on the component, wherein the one or more scores indicate a risk level associated with software vulnerabilities of the component that correspond to an ability of a cyber-attack of the one or more cyber-attacks to control a function of the component used to operate the plurality of autonomous vehicles or the plurality of smart homes.