一種面向車輛ECU信息安全的威脅分析與風(fēng)險(xiǎn)評(píng)估方法

鄧宇　向民奇　韋天文　劉書(shū)帆

摘 要：本文提出一種面向車輛ECU信息安全的威脅分析與風(fēng)險(xiǎn)評(píng)估方法來(lái)識(shí)別車輛ECU存在的潛在網(wǎng)絡(luò)安全隱患，以便在產(chǎn)品的開(kāi)發(fā)試驗(yàn)階段相應(yīng)的網(wǎng)絡(luò)安全漏洞得到修補(bǔ)加固，風(fēng)險(xiǎn)等級(jí)得到有效的降低。首先對(duì)ECU所有的資產(chǎn)按照軟件模塊、配置信息和數(shù)據(jù)信息進(jìn)行劃分，其次從功能安全、隱私安全、經(jīng)濟(jì)安全和操作性安全四個(gè)因素來(lái)考慮其影響等級(jí)，然后從準(zhǔn)備時(shí)間、專業(yè)水平、相關(guān)知識(shí)、機(jī)會(huì)窗口、設(shè)備需求和可重復(fù)性來(lái)考慮資產(chǎn)被攻擊者成功攻破的可能性，最后綜合考慮資產(chǎn)的影響等級(jí)和被成功攻破可能性兩方面來(lái)決定最后的風(fēng)險(xiǎn)等級(jí)。

關(guān)鍵詞：ECU 信息安全 影響等級(jí) 攻擊可能性 風(fēng)險(xiǎn)等級(jí)

A threat analysis and risk assessment method for vehicle ECU cyber security

Deng Yu Xiang Minqi Wei Tianwen Liu Shufan

Abstract：This paper proposes a threat analysis and risk assessment method for vehicle ECU information security to identify the potential cyber security risks of vehicle ECU， so that the corresponding cyber security vulnerabilities can be repaired and reinforced in the product development and test stage， and the risk level can be effectively reduced. Firstly， all ECU assets are divided according to software modules， configuration information and data information. Secondly， the impact level is considered from four factors： functional security， privacy security， economic security and operational security. Then， the possibility of assets being successfully broken by attackers is considered from preparation time， professional level， relevant knowledge， opportunity window， equipment requirements and repeatability. Finally， the final risk level is determined by considering the influence level of assets and the possibility of successful attack.

Key words：electronic control unit， cyber security， impact level， possibility of attack， risk level