A Specialized Threat Framework and Analysis of Attack Vectors in the Internet of Vehicles

The Internet of Vehicles (IoV) has emerged as a transformative paradigm in modern transportation, evolving into a complex system of systems that integrates Cloud Servers, Mobile Terminals, Vehicles, and Road Infrastructure. However, this heterogeneous architecture introduces significant security vulnerabilities. This paper presents a comprehensive survey and systematic analysis of cybersecurity threats within the rapidly evolving IoV landscape. Unlike previous studies that focus on isolated aspects, we propose a refined threat taxonomy tailored to the unique attributes of the IoV ecosystem. We systematically categorize potential vulnerabilities across the four key entities and provide a detailed classification of attack vectors, distinguishing between intrusion sources—such as Software-Defined Radio (SDR) and instrumentation—and specific attack methods like Web penetration, GPS spoofing, and CAN bus manipulation. Furthermore, we analyze the interaction between these vectors and critical IoV assets to demonstrate how threats propagate through open communication interfaces. Concluding, the paper highlights urgent challenges, including the trade-offs between real-time performance and security overheads, and outlines future research directions such as adaptive AI-driven defenses and lightweight distributed security mechanisms.