Intelligent network automobile information security risk assessment method and system

Abstract

The invention discloses an intelligent network automobile information security risk automatic evaluation method and system. The method comprises steps of sequentially carrying out the risk evaluationaccording to steps, asset recognition, threat analysis, vulnerability analysis and attack path analysis after an evaluation object is selected; after preliminary risk assessment, a threat severity andinfluence severity analysis report being generated, the threat severity of an assessment object being subjected to grade assessment, and the influence caused by the threat severity being assessed; then, risk disposal and mitigation measures being implemented, and threats and influences brought by the threats of the evaluation object being reduced; and finally, generating a risk assessment report.The method is advantaged in that the range of the method covers automobile information safety management, including automobile information safety comprehensive management, product development periodinformation safety management and information safety management after product mass production, and information safety risk assessment automation of software and hardware related to network communication (including an automobile internal network) of an intelligent networked automobile in the automobile design, research, development and manufacturing process is achieved; and efficiency is improved.

Description

technical field [0001] The invention relates to the field of vehicle information security design, and in particular to an intelligent network vehicle information security risk assessment method and system. Background technique [0002] With the continuous improvement of the intelligentization, networking and electrification of automobiles, the problem of information security of intelligent network automobiles is becoming more and more serious. Methods such as information tampering and virus intrusion have been successfully used by hackers in automobile attacks. The information security crisis of smart connected cars can not only cause personal privacy and economic losses to enterprises, but also seriously affect functional safety, resulting in serious consequences of car crashes and deaths. [0003] However, at present, information security risk assessment has not been fully applied to automobile design, R&D, manufacturing, and information security processes, and the existin...

AI Technical Summary

Problems solved by technology

[0004] In order to solve the technical problem that automobile information security risk assessment cannot be automated in the pri...

Images