Vulnerability testing method and device based on vehicle-mounted terminal system

Abstract

The invention provides a vulnerability testing method and device based on a vehicle-mounted terminal system. The vulnerability testing method specifically comprises the following steps: A, acquiring asystem architecture of a to-be-tested vehicle-mounted terminal system; B, acquiring a vulnerability verification script number of a vulnerability verification script library and corresponding vulnerability verification script execution environment information; vulnerability verification script execution result information containing various vulnerability verification script execution results is also obtained; C, preparing a test environment according to the vulnerability verification script execution environment information; wherein the vulnerability verification script execution environmentinformation comprises whether root permission needs to be obtained or not, a script execution terminal directory and whether execution permission needs to be given or not; D, loading a vulnerability verification script file under the corresponding system architecture according to the vulnerability verification script number; and E, executing the vulnerability verification script file to obtain a corresponding vulnerability verification script execution result, comparing the vulnerability verification script execution result with vulnerability verification script execution result information toobtain a vulnerability detection result, and storing the vulnerability detection result in a vulnerability detection result information base. By adopting the method and the device, the vulnerabilitycan be accurately triggered and detected.

Description

technical field [0001] The invention relates to the field of Internet information technology, in particular to a method and device for testing vulnerabilities based on a vehicle-mounted terminal system. Background technique [0002] In the era of the Internet of Vehicles, cars can be connected to smart terminals and the Internet through the vehicle terminal system to realize entertainment, navigation, traffic information and other services. Automotive terminal systems often use embedded Linux, QNX, Android, etc. as operating systems. Currently, mainstream automotive terminal systems are mainly developed by manufacturers based on the Android operating system. Therefore, for the vehicle terminal security detection method, you can refer to the Android system vulnerability detection method. [0003] At present, the common automated testing tools for system vulnerabilities in China include: VTS and X-Ray. [0004] Android VTS [0005] At the end of 2015, NowSecure released an ...

AI Technical Summary

Problems solved by technology

[0014] At present, the domestic mainstream Android system vulnerability automation testing tools have the problems of poor compatibility and unstable operation process on higher operating system versions; the number of vulnerabilities covered by these two tools is very small, and it is not conducive to expansion, and the detection information is very limited

Although foreign vulnerability detection tools can achieve the purpose of vulnerability detection, the fragmentation problem of the Android system is very serious, resulting in large errors in detection results

[0015] In addition, these tools are not fully suitable for the vulnerability detection of the vehicle terminal system because they are only for the vulnerability detection of the Android system and do not take into account the particularity of the vehicle terminal system.

Images