Cybersecurity Threat Assessment for 5G-Connected Remote Vehicle Control Systems

This dataset provides a quantitative Threat Analysis and Risk Assessment (TARA) for Infrastructure-Based Tele-Operated Driving (IB-ToD) within a Cooperative Intelligent Transport Systems (C-ITS) environment. It evaluates 14 threat scenarios (TS1–TS14) across three distinct system architecture variants, resulting in 42 threat–architecture combinations. The considered architectures are defined as follows. Variant A represents a fully centralized teleoperation model in which all driving decisions are generated by a central control system, while roadside units (RSUs) operate as passive sensing and forwarding entities and the 5G network provides the sole control communication channel. Variant B introduces RSU-assisted control, where the central system remains responsible for primary command generation but RSUs actively participate in local enforcement and safety-related intervention, thereby introducing distributed control authority. Variant C implements a hybrid redundant control architecture combining a primary 5G-based teleoperation channel with an independent V2X safety channel, supported by a vehicle-level arbitration mechanism capable of resolving conflicts and executing emergency interventions. Risk is computed using an enhanced ISO/SAE 21434-aligned multiplicative model defined as:R = Impact × Feasibility × Detectability × Scalability. Each aggregate score is fully decomposed into its constituent sub-components, including safety, financial, operational, and privacy impact dimensions; multiple attack feasibility factors; detectability; and scalability factors capturing connectivity exposure, architectural layer criticality, and fleet-wide propagation effects. The results highlight that cybersecurity risk is not uniformly reduced by introducing redundancy but is instead redistributed across system components and communication domains. Variant B exhibits the highest aggregate risk across all evaluated threat scenarios due to the increased attack surface introduced by RSU-based functional extension. In Variant C, the introduction of a redundant V2X safety channel significantly alters the risk landscape, with V2X spoofing shifting from a low-risk condition in the centralized architecture to a high-risk condition, demonstrating that resilience mechanisms can simultaneously introduce new critical attack surfaces. Files:TARA-CITS.csv contains the complete dataset with 42 rows covering all threat–architecture combinations, including decomposed sub-scores, aggregated risk values, risk classifications, qualitative justifications, and corresponding mitigation mappings.