Introduction
TARA (Threat Analysis and Risk Assessment) is the most central risk-analysis method in ISO 21434 and the starting point for automotive cybersecurity work. This article walks you through the six-step TARA method in plain language.
1. What Is TARA?
In plain terms, TARA is "running a complete dry run of the attack on the hacker's behalf": first work out how a hacker would attack this vehicle, how much damage it would cause and how easy it would be to carry out, then decide whether and how to defend against it.
2. The Six-Step TARA Method
Step 1: Define the item under assessment.Identify the assets that need protection (ECUs, data, communications, cryptographic keys, and so on).
Step 2: Identify threat scenarios.Use the STRIDE method to think through the types of threat:
- S — Spoofing: impersonating an identity
- T — Tampering: modifying data
- R — Repudiation: denying that an action was performed
- I — Information Disclosure: data being stolen
- D — Denial of Service: the system being taken down
- E — Elevation of Privilege: operating beyond one's authority
Step 3: Impact assessment.Step 3: Impact assessment.
Step 4: Attack feasibility assessment.Consider the time, equipment and specialist knowledge the attack requires.
Step 5: Risk-level determination.Combine "impact" and "feasibility" to assign a risk level (high / medium / low).
Step 6: Risk treatment.Choose to eliminate, reduce, transfer or accept the risk.
Output:security goals and security requirements, carried through into product design.
3. A Plain Analogy: A Burglary Assessment for Your Home
Think of TARA as a burglary assessment: first list the valuables in the house (assets), then think about how a burglar would get in (threats), assess the loss if they did (impact) and how hard it would be (feasibility), combine the two into a risk level, and finally decide whether to fit security bars or buy a safe (treatment).
4. Why Does TARA Emphasize "Shifting Security Left"?
Carrying out risk analysis early in development makes design changes cheap; fixing vulnerabilities later costs several to several dozen times more. TARA makes "shifting security left" possible, building security into the very bones of the product.
Conclusion
Mastering the six-step TARA method is the foundation for building an automotive cybersecurity system. A systematic, traceable TARA report is also core evidence for CSMS certification and export market access.
Need Compliance Support?
Need professional TARA analysis support? QinGuard provides threat modeling, risk classification and security-goal definition services to help your product pass compliance review.