[SUPPLEMENT] Towards Secure and Privacy-Preserving Car Sharing Systems Based on Group Signatures

Security and forensic readiness risk assessment performed as part of the evaluation of a privacy-preserving car-sharing scheme. The assessment considers an abstract car-sharing system and its enhancement with the privacy-preserving scheme. The dataset is a spreadsheet composed of the following sheets: Assets – List of business assets present within the system and their values. Threat Actors – List of relevant threat actors. Threats – List of threats related to the system, divided by STRIDE category. Forensic Readiness Goals – List of forensic readiness goals and their mapping to threats. Vulnerabilities – List of vulnerabilities considered for the system and their severity. Risks – Detailed description of security risks for the system and its evaluation. Controls – List of security controls introduced with the privacy-preserving scheme. Addressed Risks – Detailed description of security risks for the enhanced system and its evaluation. Forensic Readiness Scenarios – Description of forensic readiness scenarios in the enhanced system, their weaknesses and proposed remediation. Potential Evidence – List of potential evidence in the enhanced system.