Vehicle-mounted terminal information security threat analysis and risk assessment system and method

Abstract

The invention provides a vehicle-mounted terminal information security threat analysis and risk assessment system and method. Information is input through the information input module; an assessment report of vehicle-mounted terminal information security threat analysis and risk assessment completed by the system can be directly obtained; the safety, effectiveness and reliability of the vehicle-mounted terminal information are greatly improved; furthermore, a database is arranged; the method is used for determining the type of a vehicle-mounted terminal according to the new vehicle-mounted terminal type in the vehicle-mounted industry. The vehicle-mounted terminal is provided with an internal assembly and an external interface, and assets needing to be protected by the vehicle-mounted terminal and conventional threats of the assets, the database is updated in real time, a corresponding threat library and a demand library are constructed based on the real-time data, automatic executionof threat analysis and risk assessment of the system is realized, accuracy and consistency of results are effectively improved, and meanwhile, a data flow diagram used in STRIDE is changed into analysis based on internal components and external interfaces of the system, so that drawing of tedious data flow diagrams is effectively avoided, and human resource investment is reduced.

Description

technical field [0001] The invention relates to the technical field of vehicle information, in particular to a system and method for threat analysis and risk assessment of vehicle terminal information security. Background technique [0002] With the rapid development of intelligent networked vehicles, automotive information security incidents are emerging one after another, and the information security of intelligent networked vehicles has attracted more and more attention from the industry. To achieve information security for a vehicle, it needs to be realized through the vehicle-mounted terminal, which is a component of the vehicle. For the vehicle-mounted terminal to achieve information security, threat analysis and risk assessment of the vehicle-mounted terminal system is a very important link. Threat analysis and risk assessment is an analytical technique applied at the concept stage to help identify potential information security threats in a system and assess the risk...

AI Technical Summary

Problems solved by technology

Compared with EVITA, HEAVENS is more complete, more mature, and more applicable. It is a security model widely used in the industry. However, in the threat analysis link, the STRIDE method is usually used to analyze threats. When the system is more complex or there are many scenarios, It will cause the d

Images