{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T23:49:10Z","timestamp":1783036150958,"version":"3.54.6"},"reference-count":55,"publisher":"MDPI AG","issue":"1","license":[{"start":{"date-parts":[[2026,1,15]],"date-time":"2026-01-15T00:00:00Z","timestamp":1768435200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"German Federal Ministry of Education and Research (BMBF) in the project ConnRAD","award":["16KISR031"],"award-info":[{"award-number":["16KISR031"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Future Internet"],"abstract":"<jats:p>The complexity and interconnectivity of modern automotive systems are rapidly increasing, particularly with the rise of distributed and cooperative driving functions. These developments increase exposure to a range of disruptions, from technical failures to cyberattacks, and demand a shift towards resilience-by-design. This study addresses the early integration of resilience into the automotive design process by proposing a structured method for identifying gaps and eliciting resilience requirements. Building upon the concept of resilience scenarios, the approach extends traditional hazard and threat analyses as defined in ISO 26262, ISO 21448 and ISO\/SAE 21434. Using a structured, graph-based modeling method, these scenarios enable the anticipation of functional degradation and its impact on driving scenarios. The methodology helps developers to specify resilience requirements at an early stage, enabling the integration of resilience properties throughout the system lifecycle. Its practical applicability is demonstrated through an example in the field of automotive cybersecurity. This study advances the field of resilience engineering by providing a concrete approach for operationalizing resilience within automotive systems engineering.<\/jats:p>","DOI":"10.3390\/fi18010051","type":"journal-article","created":{"date-parts":[[2026,1,15]],"date-time":"2026-01-15T11:13:21Z","timestamp":1768475601000},"page":"51","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Resilience-by-Design: Extracting Resilience Requirements Using the Resilience Graph in the Automotive Concept Phase"],"prefix":"10.3390","volume":"18","author":[{"ORCID":"https:\/\/orcid.org\/0009-0009-4333-5824","authenticated-orcid":false,"given":"Isaac","family":"Mpidi Bita","sequence":"first","affiliation":[{"name":"Department of Advanced Systems Engineering, Fraunhofer Institute for Mechatronic Systems Design, Zukunftsmeile 1, 33102 Paderborn, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-0444-1972","authenticated-orcid":false,"given":"Elif","family":"Ugur","sequence":"additional","affiliation":[{"name":"Department of Advanced Systems Engineering, Fraunhofer Institute for Mechatronic Systems Design, Zukunftsmeile 1, 33102 Paderborn, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0303-6407","authenticated-orcid":false,"given":"Aschot","family":"Hovemann","sequence":"additional","affiliation":[{"name":"Department of Advanced Systems Engineering, Fraunhofer Institute for Mechatronic Systems Design, Zukunftsmeile 1, 33102 Paderborn, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-6877-740X","authenticated-orcid":false,"given":"Roman","family":"Dumitrescu","sequence":"additional","affiliation":[{"name":"Heinz-Nixdorf-Institute, University of Paderborn, F\u00fcrstenallee 11, 33102 Paderborn, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2026,1,15]]},"reference":[{"key":"ref_1","unstructured":"(2021). Taxonomy and Definitions for Terms Related to Driving Automation Systems for On-Road Motor Vehicles (Standard No. SAE J3016_202104)."},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"70","DOI":"10.1109\/MCOMSTD.2017.1700015","article-title":"Vehicle-to-Everything (v2x) Services Supported by LTE-Based Systems and 5G","volume":"1","author":"Chen","year":"2017","journal-title":"IEEE Commun. Stand. Mag."},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"2409","DOI":"10.1109\/JPROC.2013.2271951","article-title":"Opportunities and Challenges of Vehicle-to-Home, Vehicle-to-Vehicle, and Vehicle-to-Grid Technologies","volume":"101","author":"Liu","year":"2013","journal-title":"Proc. IEEE"},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Rakha, H., and Kamalanathsharma, R.K. (2011, January 5\u20137). Eco-driving at signalized intersections using V2I communication. Proceedings of the 2011 14th International IEEE Conference on Intelligent Transportation Systems (ITSC), Washington, DC, USA.","DOI":"10.1109\/ITSC.2011.6083084"},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Wang, Z., Liao, X., Zhao, X., Han, K., Tiwari, P., Barth, M.J., and Wu, G. (2020, January 25\u201328). A Digital Twin Paradigm: Vehicle-to-Cloud Based Advanced Driver Assistance Systems. Proceedings of the 2020 IEEE 91st Vehicular Technology Conference (VTC2020-Spring), Antwerp, Belgium.","DOI":"10.1109\/VTC2020-Spring48590.2020.9128938"},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Certad, N., Del Re, E., Varughese, J., and Olaverri-Monreal, C. (2025, January 22\u201325). V2P Collision Warnings for Distracted Pedestrians: A Comparative Study with Traditional Auditory Alerts. Proceedings of the 2025 IEEE Intelligent Vehicles Symposium (IV), Cluj-Napoca, Romania.","DOI":"10.1109\/IV64158.2025.11097625"},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"399","DOI":"10.1016\/j.dcan.2020.04.007","article-title":"Attacks and defences on intelligent connected vehicles: A survey","volume":"6","author":"Dibaei","year":"2020","journal-title":"Digit. Commun. Netw."},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Baumann, M.V., Beyerer, J., Buck, H.S., Deml, B., Ehrhardt, S., Frese, C., Kleiser, D., Lauer, M., Roschani, M., and Ruf, M. (2023, January 4\u20137). Cooperative Automated Driving for Bottleneck Scenarios in Mixed Traffic. Proceedings of the 2023 IEEE Intelligent Vehicles Symposium (IV), Anchorage, AK, USA.","DOI":"10.1109\/IV55152.2023.10186638"},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"5390","DOI":"10.1109\/TVT.2021.3079272","article-title":"Distributed Cooperative Driving in Multi-Intersection Road Networks","volume":"70","author":"Pei","year":"2021","journal-title":"IEEE Trans. Veh. Technol."},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Schnieder, L., and Hosse, R.S. (2020). Leitfaden Safety of the Intended Functionality, Springer Fachmedien Wiesbaden.","DOI":"10.1007\/978-3-658-30038-8"},{"key":"ref_11","unstructured":"IOActive Research Team (2015). Remote Exploitation of an Unaltered Passenger Vehicle, IOActive. Available online: https:\/\/www.ioactive.com\/wp-content\/uploads\/pdfs\/IOActive_Remote_Car_Hacking.pdf#page=9.23."},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Casimiro, A., Ortmeier, F., Bitsch, F., and Ferreira, P. (2020). Computer Safety, Reliability, and Security, Springer International Publishing.","DOI":"10.1007\/978-3-030-54549-9"},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"2781","DOI":"10.1017\/pds.2025.10292","article-title":"Resilience-By-Design: Standard-based definition of Resilience and identification of action fields for the systems design of mobility system","volume":"5","author":"Hovemann","year":"2025","journal-title":"Proc. Des. Soc."},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"1245","DOI":"10.1016\/j.comnet.2010.03.005","article-title":"Resilience and survivability in communication networks: Strategies, principles, and survey of disciplines","volume":"54","author":"Sterbenz","year":"2010","journal-title":"Comput. Netw."},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"499","DOI":"10.1016\/j.ifacol.2015.09.575","article-title":"Fault-Tolerant Control for Discrete Linear Systems with Consideration of Actuator Saturation and Performance Degradation","volume":"48","author":"Wang","year":"2015","journal-title":"IFAC-PapersOnLine"},{"key":"ref_16","unstructured":"Walden, D.D., Roedler, G.J., Forsberg, K., Hamelin, R.D., and Shortell, T.M. (2015). Systems Engineering Handbook: A Guide for System Life Cycle Processes and Activities, Wiley. [4th ed.]."},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"586","DOI":"10.1016\/j.procir.2022.05.299","article-title":"Security- and Safety-Driven Functional Architecture Development Exemplified by Automotive Systems Engineering","volume":"109","author":"Kharatyan","year":"2022","journal-title":"Procedia CIRP"},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"158","DOI":"10.1109\/TIV.2016.2608003","article-title":"Intelligence Testing for Autonomous Vehicles: A New Approach","volume":"1","author":"Li","year":"2016","journal-title":"IEEE Trans. Intell. Veh."},{"key":"ref_19","doi-asserted-by":"crossref","unstructured":"T\u00f6rngren, M., Gallina, B., Schoitsch, E., Troubitsyna, E., and Bitsch, F. (2026). Computer Safety, Reliability, and Security. SAFECOMP 2025 Workshops, Springer Nature Switzerland.","DOI":"10.1007\/978-3-032-02018-5"},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"59131","DOI":"10.1109\/ACCESS.2021.3072739","article-title":"6-Layer Model for a Structured Description and Categorization of Urban Traffic and Environment","volume":"9","author":"Scholtes","year":"2021","journal-title":"IEEE Access"},{"key":"ref_21","unstructured":"Hillebrand, M. (2021). Entwicklungssystematik zur Integration von Eigenschaften der Selbstheilung in Intelligente Technische Systeme. [Ph.D. Thesis, University of Paderborn]. Volume 403."},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"991","DOI":"10.1109\/TSE.2022.3170122","article-title":"Finding Critical Scenarios for Automated Driving Systems: A Systematic Mapping Study","volume":"49","author":"Zhang","year":"2023","journal-title":"IEEE Trans. Softw. Eng."},{"key":"ref_23","unstructured":"(2022). Road Vehicles\u2014Safety of the Intended Functionality (Standard No. ISO 21448)."},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3277666","article-title":"STRAM","volume":"51","author":"Cho","year":"2019","journal-title":"ACM Comput. Surv."},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"181","DOI":"10.1109\/JSYST.2009.2017397","article-title":"Towards a Conceptual Framework for Resilience Engineering","volume":"3","author":"Madni","year":"2009","journal-title":"IEEE Syst. J."},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"109851","DOI":"10.1016\/j.ress.2023.109851","article-title":"A multi-stage quantitative resilience analysis and optimization framework considering dynamic decisions for urban infrastructure systems","volume":"243","author":"Wang","year":"2024","journal-title":"Reliab. Eng. Syst. Saf."},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"71688","DOI":"10.1109\/ACCESS.2025.3563120","article-title":"Verifying Robustness of Neural Networks in Vision-Based End-to-End Autonomous Driving","volume":"13","author":"Bernardeschi","year":"2025","journal-title":"IEEE Access"},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"107467","DOI":"10.1016\/j.ress.2021.107467","article-title":"Simulation model for simple yet robust resilience assessment metrics for engineered systems","volume":"209","author":"Patriarca","year":"2021","journal-title":"Reliab. Eng. Syst. Saf."},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Hulse, D., and Irshad, L. (2022, January 18\u201322). Using Degradation Modeling to Identify Fragile Operational Conditions in Human- and Component-driven Resilience Assessment. Proceedings of the 2022 IEEE\/AIAA 41st Digital Avionics Systems Conference (DASC), Portsmouth, VA, USA.","DOI":"10.1109\/DASC55683.2022.9925877"},{"key":"ref_30","unstructured":"Magnus \u00c5gren, S. (2018). Manager Perspective Follow-Up Instrument, Zenodo, European Organization for Nuclear Research."},{"key":"ref_31","unstructured":"(2018). Road Vehicles\u2014Functional Safety (Standard No. ISO 26262)."},{"key":"ref_32","unstructured":"(2021). Road Vehicles\u2014Cybersecurity Engineering (Standard No. ISO\/SAE 21434)."},{"key":"ref_33","unstructured":"Pohl, K. (2015). Requirements Engineering Fundamentals: A Study Guide for the Certified Professional for Requirements Engineering Exam; Foundation Level\u2014IREB Compliant, Rocky Nook. [2nd ed.]. Rocky Nook Computing."},{"key":"ref_34","doi-asserted-by":"crossref","unstructured":"Koch, T., Trippel, S., Dziwok, S., and Bodden, E. (2022, January 6\u20138). Integrating Security Protocols in Scenario-based Requirements Specifications. Proceedings of the 10th International Conference on Model-Driven Engineering and Software Development, Online.","DOI":"10.5220\/0010783300003119"},{"key":"ref_35","unstructured":"Galbas, R., Nolte, M., Eberle, U., Hungar, H., Mosebach, H., Salem, N.F., Schittenhelm, H., Reich, J., Kirschbaum, T., and Westhofen, L. (2024). V&V Methods Safety Assurance Positioning Paper, The German Aerospace Center (DLR)."},{"key":"ref_36","doi-asserted-by":"crossref","first-page":"2883","DOI":"10.1017\/dsi.2019.295","article-title":"Potentials for the Integration of Design Thinking along Automotive Systems Engineering Focusing Security and Safety","volume":"1","author":"Tekaat","year":"2019","journal-title":"Proc. Des. Soc. Int. Conf. Eng. Des."},{"key":"ref_37","doi-asserted-by":"crossref","unstructured":"Tezcan, M., Iskesen, T., Isman, B., and Kocahan, T. (2024, January 16\u201318). Theoretical Proposal in SOTIF based Hazardous Scenario Generation. Proceedings of the 2024 Innovations in Intelligent Systems and Applications Conference (ASYU), Ankara, Turkiye.","DOI":"10.1109\/ASYU62119.2024.10756963"},{"key":"ref_38","doi-asserted-by":"crossref","unstructured":"Haas, R.E., and Moller, D.P.F. (2017, January 14\u201317). Automotive connectivity, cyber attack scenarios and automotive cyber security. Proceedings of the 2017 IEEE International Conference on Electro Information Technology (EIT), Piscataway, NJ, USA.","DOI":"10.1109\/EIT.2017.8053441"},{"key":"ref_39","doi-asserted-by":"crossref","unstructured":"Henniger, O., Apvrille, L., Fuchs, A., Roudier, Y., Ruddle, A., and Weyl, B. (2009, January 20\u201322). Security requirements for automotive on-board networks. Proceedings of the 2009 9th International Conference on Intelligent Transport Systems Telecommunications, Piscataway, NJ, USA.","DOI":"10.1109\/ITST.2009.5399279"},{"key":"ref_40","doi-asserted-by":"crossref","first-page":"187","DOI":"10.1016\/j.procir.2021.05.053","article-title":"SAVE: Security & safety by model-based systems engineering on the example of automotive industry","volume":"100","author":"Japs","year":"2021","journal-title":"Procedia CIRP"},{"key":"ref_41","doi-asserted-by":"crossref","first-page":"237","DOI":"10.1007\/978-3-319-24249-1_21","article-title":"A Combined Safety-Hazards and Security-Threat Analysis Method for Automotive Systems","volume":"Volume 9338","author":"Koornneef","year":"2015","journal-title":"Computer Safety, Reliability and Security"},{"key":"ref_42","doi-asserted-by":"crossref","first-page":"31","DOI":"10.1145\/2556938","article-title":"An integrated approach to safety and security based on systems theory","volume":"57","author":"Young","year":"2014","journal-title":"Commun. ACM"},{"key":"ref_43","first-page":"183","article-title":"STPA-SafeSec: Safety and security analysis for cyber-physical systems","volume":"34","author":"Friedberg","year":"2017","journal-title":"J. Inf. Secur. Appl."},{"key":"ref_44","doi-asserted-by":"crossref","first-page":"347","DOI":"10.1007\/978-3-642-31072-0_24","article-title":"A Combined Process for Elicitation and Analysis of Safety and Security Requirements","volume":"Volume 113","author":"Bider","year":"2012","journal-title":"Enterprise, Business-Process and Information Systems Modeling"},{"key":"ref_45","doi-asserted-by":"crossref","first-page":"100642","DOI":"10.1016\/j.ijcip.2023.100642","article-title":"A systematic co-engineering of safety and security analysis in requirements engineering process","volume":"43","author":"Jung","year":"2023","journal-title":"Int. J. Crit. Infrastruct. Prot."},{"key":"ref_46","doi-asserted-by":"crossref","unstructured":"Ma, J., Che, X., Li, Y., and Lai, E.M.K. (2021). Traffic Scenarios for Automated Vehicle Testing: A Review of Description Languages and Systems. Machines, 9.","DOI":"10.3390\/machines9120342"},{"key":"ref_47","doi-asserted-by":"crossref","first-page":"1599","DOI":"10.1017\/pds.2022.162","article-title":"Collaborative Modeling of Use Case & Damage Scenarios in Online Workshops Using a 3D Environment","volume":"2","author":"Japs","year":"2022","journal-title":"Proc. Des. Soc."},{"key":"ref_48","unstructured":"(2022). Road Vehicles\u2014Test Scenarios for Automated Driving\u2014Vocabulary (Standard No. ISO 34501:2022)."},{"key":"ref_49","doi-asserted-by":"crossref","unstructured":"Menzel, T., Bagschik, G., Isensee, L., Schomburg, A., and Maurer, M. (2019, January 9\u201312). From Functional to Logical Scenarios: Detailing a Keyword-Based Scenario Description for Execution in a Simulation Environment. Proceedings of the 2019 IEEE Intelligent Vehicles Symposium (IV), Paris, France.","DOI":"10.1109\/IVS.2019.8814099"},{"key":"ref_50","doi-asserted-by":"crossref","first-page":"570","DOI":"10.1002\/j.2334-5837.2021.00855.x","article-title":"Resilience Requirements Patterns","volume":"31","author":"Brtis","year":"2021","journal-title":"INCOSE Int. Symp."},{"key":"ref_51","doi-asserted-by":"crossref","first-page":"795","DOI":"10.1109\/TSE.2025.3534318","article-title":"Obstacle Analysis in Requirements Engineering: Retrospective and Emerging Challenges","volume":"51","author":"Letier","year":"2025","journal-title":"IEEE Trans. Softw. Eng."},{"key":"ref_52","doi-asserted-by":"crossref","unstructured":"Ponsard, C., Ramon, V., and Deprez, J.C. (2021, January 6\u20138). Goal and Threat Modelling for Driving Automotive Cybersecurity Risk Analysis Conforming to ISO\/SAE 21434. Proceedings of the 18th International Conference on Security and Cryptography, Online.","DOI":"10.5220\/0010603008330838"},{"key":"ref_53","doi-asserted-by":"crossref","first-page":"978","DOI":"10.1109\/32.879820","article-title":"Handling obstacles in goal-oriented requirements engineering","volume":"26","author":"Letier","year":"2000","journal-title":"IEEE Trans. Softw. Eng."},{"key":"ref_54","doi-asserted-by":"crossref","first-page":"189","DOI":"10.1016\/j.comnet.2015.09.012","article-title":"Resilience support in software-defined networking: A survey","volume":"92","author":"Smith","year":"2015","journal-title":"Comput. Netw."},{"key":"ref_55","doi-asserted-by":"crossref","first-page":"13","DOI":"10.1016\/j.comcom.2018.07.028","article-title":"Architecture and design for resilient networked systems","volume":"131","author":"Hutchison","year":"2018","journal-title":"Comput. Commun."}],"container-title":["Future Internet"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1999-5903\/18\/1\/51\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,1,15]],"date-time":"2026-01-15T11:40:17Z","timestamp":1768477217000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1999-5903\/18\/1\/51"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,1,15]]},"references-count":55,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2026,1]]}},"alternative-id":["fi18010051"],"URL":"https:\/\/doi.org\/10.3390\/fi18010051","relation":{},"ISSN":["1999-5903"],"issn-type":[{"value":"1999-5903","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,1,15]]}}}