Abnormity monitoring method and device for vehicle CAN bus

Abstract

The invention provides an abnormity monitoring method and device for a vehicle CAN bus. The method comprises the following steps of sending each abnormal test message set in a bus test process; acquiring a corresponding response message on the bus; if the response message exists in a preset response library, determining whether abnormity is monitored or not according to a normal or abnormal stateindicated by the preset response library; and if the response message does not exist in the preset response library, determining whether abnormity is monitored or not according to the repeated occurrence number of the response message in the test process. According to the method, the acquired response message is compared with the preset response library, and whether the response message is abnormal or not is determined according to the repeated occurrence number when the response message does not belong to the preset response library, so that the automatic abnormity monitoring of the responsemessages on the bus is realized, and the technical problems that a traditional bus abnormity monitoring program in the prior art cannot run in a bus application environment of Internet of Vehicles, the judgement is mainly made through the experience of people, the efficiency is low and the automatic identification cannot be realized are solved.

Description

technical field [0001] The invention relates to the technical field of vehicle information security, in particular to a method and device for abnormality monitoring of a CAN bus of a vehicle. Background technique [0002] With the development of automotive electronic technology and the improvement of automotive performance requirements, the number of electronic control units (ECU, Electronic Control Unit) in the car is increasing, and the interactive information between each electronic control unit is passed through the controller area network bus (CAN, Controller Area Network) and other networks, the abnormalities and security vulnerabilities of ECU units have made the security problems of the Internet of Vehicles increasingly prominent. Therefore, fuzzing the CAN bus to achieve abnormal monitoring has gradually been proposed and applied by security researchers. [0003] In traditional fuzz testing application scenarios, the system interface or network port provided by the ...

AI Technical Summary

Problems solved by technology

[0005] For this reason, the first object of the present invention is to propose a method for abnormality monitoring of the CAN bus of a vehicle, and compare the response message obtained from the bus with the preset response library to determine whether there is an abnormality. When it belongs to the preset response library, it is determined whether it is abnormal according to the number of repeated occurrences, which realizes the automatic abnormal monitoring of the response message on the bus during the test process, and solves the problem that the traditional bus abnormal monitoring program in the prior art cannot run on the Internet of Vehicles In the bus application environment, it is mainly determined by human experience, the efficiency is low, and the technical problem of automatic identification cannot be realized

Images