本文以一款集成式机械式自动变速器（Automated Manual Transmission，AMT）为研究对象，系统开展威胁分析与风险评估（Threat Analysis and Risk Assessment，TARA）。在识别出控制器局域网（Controller Area Network，CAN）报文、固件、密钥等 8 项核心安全资产的基础上，分析潜在危害场景，从安全、财产、操作性及隐私四个维度量化危害等级。针对各危害场景，反向分析可能的攻击行为以构建威胁场景，从时间、专业知识、产品知识、机会窗口与设备五个维度综合评估攻击可行性。最后，综合危害等级与攻击可行性，通过风险矩阵确定各个威胁场景的风险等级，进而提出降低、转移或保留等处置策略。

This paper conducts threat analysis and risk assessment for an integrated Automated Manual Transmission (AMT). Based on the identification of eight core security assets, including Controller Area Network (CAN) messages, firmware, etc. potential damage scenarios are analyzed, and the impact rating is quantified from four dimensions: safety, property, operability, and privacy. For each damage scenario, possible attack path are reversely analyzed to construct threat scenarios, and the attack feasibility is comprehensively evaluated from five dimensions: time, expertise, product knowledge, window of opportunity, and equipment. Finally, by combining hazard levels and attack feasibility, the risk matrix is adopted to determine the risk level of each threat scenario, and corresponding treatment strategies such as reduction, transfer, or retention are proposed.