A Crowd Testing System for Internet of Vehicles Vulnerabilities

Abstract

The present invention relates to a public vehicle network vulnerability testing system, comprising: an interaction module configured to enable white hat users to interact with the vehicle network vulnerability public testing system; an audit module, which includes a screening unit, a basic evaluation unit and an environment analysis unit Evaluation unit, wherein the basic sub-evaluation unit is configured to calculate the basic evaluation score based on the basic availability index and the basic impact index, and the environmental sub-evaluation unit is configured to calculate the environmental evaluation score based on the environmental availability index and the environmental impact index. value, the total score of the vulnerability is the basic evaluation score or the environmental evaluation score; the level confirmation module is configured to confirm the level of the submitted vulnerability according to the total score of the vulnerability; the storage module is configured to store and record the rated vulnerabilities. By setting up modules such as interaction and auditing, it is possible to realize the public testing of the vulnerabilities of the Internet of Vehicles, and to screen, analyze and evaluate the vulnerabilities, and present the threat distribution for the system, so as to prevent or warn in advance.

Description

technical field [0001] The invention relates to the technical field of Internet of Vehicles data security, in particular to a public testing system for Internet of Vehicles vulnerabilities. Background technique [0002] With the rapid development of the Internet of Vehicles, a number of services based on services such as navigation, entertainment, and vehicle body data transmission have injected vitality into the Internet of Vehicles and brought another type of crisis. There are more and more information tampering, information leakage, and other vulnerability attacks aimed at vehicle information security, while the technologies for discovering and repairing the vulnerability risks of the Internet of Vehicles are immature and relatively scattered, so they may have a relatively large impact on the information security of the Internet of Vehicles. Impact. [0003] At present, the vulnerability detection systems on the market all submit vulnerabilities on a single platform and ...

AI Technical Summary

Problems solved by technology

There are more and more information tampering, information leakage, and other vulnerability attacks aimed at vehicle information security, while the technologies for discovering and repairing the vulnerability risks of the Internet of Vehicles are immature and relatively scattered, so they may have a relatively large impact on the information security of the Internet of Vehicles. Impact

[0003] At present, the vulnerability detection systems on the market all submit vulnerabilities on a single platform and then process them. They only complete the three major vulnerability processing steps of early warning, detection and repair, without statistical analysis of the occurrence of vulnerabilities, so they cannot detect the threats caused by vulnerability attacks. Distribution presented in advance and early warning

Moreover, there is an urgent demand for safety crowd testing in the field of Internet of Vehicles, and there are few system platforms on the market that can support crowd testing business

Images