汽车工程

汽车工程 ›› 2023, Vol. 45 ›› Issue (9): 1553-1562.doi: 10.19562/j.chinasae.qcgc.2023.ep.004

所属专题： 智能网联汽车技术专题-控制2023年

• • 上一篇    下一篇

基于AFC-TARA的车载网络组件风险率量化评估分析

左政1,王云鹏1,麻斌1,2,邹博松3,曹耀光4,杨世春1()   

  1. 1.北京航空航天大学交通科学与工程学院，北京 　102206
    2.吉林大学通信工程学院，长春 　130022
    3.中国软件评测中心，北京 　100038
    4.北京航空航天大学前沿科学技术创新研究院，北京 　102206
  • 收稿日期:2022-09-08 修回日期:2022-10-09 出版日期:2023-09-25 发布日期:2023-09-23
  • 通讯作者: 杨世春 E-mail:yangshichun@buaa.edu.cn
  • 基金资助:
    河北省重点研发计划项目(20310801D);国家重点研发计划(2017YFB0102502)

Quantitative Evaluation and Analysis of On-board Network Components Risk Rate Based on AFC-TARA

Zheng Zuo1,Yunpeng Wang1,Bin Ma1,2,Bosong Zou3,Yaoguang Cao4,Shichun Yang1()   

  1. 1.School of Transportation Science and Engineering，Beihang University，Beijing 　102206
    2.College of Communication Engineering，Jilin University，Changchun 　130022
    3.China Software Testing Center，Beijing 　100038
    4.Research Institute for Frontier Science，Beihang University，Beijing 　102206
  • Received:2022-09-08 Revised:2022-10-09 Online:2023-09-25 Published:2023-09-23
  • Contact: Shichun Yang E-mail:yangshichun@buaa.edu.cn

RichHTML

3

PDF (PC)

73

赞

摘要：

信息安全设计的首要步骤是威胁分析与风险评估（threat analysis and risk assessment，TARA），以此确定安全需求和目标，为信息安全正向开发及安全漏洞修复提供依据。然而，当前TARA分析仅能对恶意攻击及安全漏洞的影响进行评估，即不支持对防护策略效用的量化评估。为此，本文提出了一种攻击和修复相结合的威胁分析与风险评估（attack and fix combined threat analysis and risk assessment，AFC-TARA）方法。通过将系统级车载网络架构的安全状态转换为连续时间马尔科夫链模型，并将转移速率与漏洞挖掘、漏洞修复及安全防护策略相关联，进而实现综合考虑攻击变量与防御变量的系统级车载网络架构安全分析与评估。

关键词: 信息安全, 智能网联汽车, 威胁分析与风险评估, 马尔科夫链模型, 恶意攻击, 安全防护

Abstract:

The first step of information security design is threat analysis and risk assessment （TARA）， which determines security requirements and objectives， and provides a basis for the forward development of information security and the repair of security vulnerabilities. However， the current TARA can only evaluate the impact of malicious attack and security vulnerabilities， which can’t support quantitative evaluation of the effectiveness of protection strategies. Therefore， an attack and fix combined threat analysis and risk assessment （AFC-TARA） method is proposed in this paper. By converting the security state of the system-level on-board network architecture into a continuous-time Markov chain model， and associating the vulnerability mining， vulnerability repair and security defense strategy with the transition rate， a system-level on-board network architecture security assessment and analysis that comprehensively considers attack variables and defense variables are finally realized.

Key words: information security, intelligent connected vehicles, threat analysis and risk assessment, Markov model, malicious attack, security protection