An intelligent network connected vehicle APP penetration testing method and system, and a storage medium

Abstract

The application discloses a kind of intelligent network connection car APP penetration test method, system and storage medium, the method includes: obtaining firmware in intelligent network connection car;The APK file in firmware is obtained by scanning firmware;The original file is obtained by de-shelling APK file;Static scanning is carried out to original file, and static evaluation result is obtained.By implementing the application, the APK file in firmware is extracted by scanning firmware, and the original file is determined by de-shelling APK file, and the penetration test of intelligent network connection car APP can be realized by static scanning original file, solve the problem that the existing technology is complex in manual test of car APP, firmware is difficult to analyze and the like, create conditions for automatic remote penetration test, facilitate tester to use;Meanwhile, the penetration test method provides a good guiding role for car APP penetration test, and can effectively promote the improvement of car industry APP penetration test level.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of vehicle-mounted APP, in particular to a smart connected vehicle APP penetration testing method and system and a storage medium. BACKGROUND

[0002] In recent years, the research on the information security of smart connected vehicles has become a hot topic. Internet of Things (loT) devices and vehicle-to-everything (V2X) devices are widely used in daily life. However, most V2X devices are single-function devices, and manufacturers usually do not spend much effort on maintaining them, resulting in a low probability of discovering potential security vulnerabilities. Moreover, the testing of loT device firmware in the prior art mainly relies on manual debugging, which involves a lot of repetitive debugging work and is inefficient.

[0003] Automobile APP is an essential part of the V2X system, and the attack and defense research around it has attracted much attention. Automobile APP penetration testing plays a very important role in mobile phone control vehicle security, vehicle TSP security, and vehicle owner privacy. However, there is no mature testing method, testing system, or testing tool for smart connected vehicle APP penetration testing. SUMMARY

[0004] Therefore, the embodiments of the present application provide a smart connected vehicle APP penetration testing method and system to solve the technical problem of the lack of penetration testing methods or testing systems for automobile APP in the prior art.

[0005] The technical solutions of the present application are as follows:

[0006] The first aspect of the embodiments of the present application provides a smart connected vehicle APP penetration testing method, comprising: obtaining firmware in a smart connected vehicle; scanning the firmware to obtain APK files in the firmware; decompiling the APK files to obtain original files; and performing static scanning on the original files to obtain a static evaluation result.

[0007] Optionally, the smart connected vehicle APP penetration testing method further comprises: capturing data packets on the vehicle control APP; and performing APP vehicle control scanning based on the data packets to obtain a vehicle control scanning result.

[0008] Optionally, the scanning of the firmware comprises scanning a preset directory in the firmware and performing a full-disk scan on the firmware. The scanning of the firmware further comprises analyzing, cutting, and decompiling the firmware.

[0009] Optionally, the original file is statically scanned to obtain a static evaluation result, comprising: decompiling the original file to obtain a configuration file, a resource file, a signature file and a code file; matching the configuration file, the resource file, the signature file and the code file with vulnerability rules in a static vulnerability library respectively to perform source code security evaluation, client security evaluation, data security evaluation and dynamic link library security evaluation to obtain the static evaluation result.

[0010] Optionally, the original file is statically scanned to obtain a static evaluation result, and the static scanning further comprises: performing decompilation risk testing on JAVA code and SO dynamic link library in the original file; performing hard coding testing on sensitive keywords in the original file; performing security testing on preset components in the original file; performing Drozer testing on local files in the original file; testing vulnerabilities of data in the original file; and performing security evaluation on dynamic link library in the original file.

[0011] Optionally, the data packet is used to perform APP vehicle control scanning to obtain a vehicle control scanning result, comprising: decrypting HTTPS traffic in the data packet; performing HTTPS security testing on the decrypted HTTPS traffic; performing TSP testing on the decrypted HTTPS traffic; capturing sensitive keyword data in the data packet, and performing replay attack on the sensitive keyword data; and performing dynamic security testing on an APP client.

[0012] Optionally, before scanning the firmware, the method further comprises: detecting buffer overflow, stack overflow and integer overflow of the firmware.

[0013] The second aspect of the embodiment of the application provides an intelligent connected vehicle APP penetration testing system, comprising: a test terminal, the test terminal comprising: a firmware acquisition module, configured to acquire firmware in an intelligent connected vehicle; a scanning module, configured to scan the firmware to obtain APK files in the firmware; a decompilation module, configured to decompile the APK files to obtain original files; and an evaluation module, configured to statically scan the original files to obtain a static evaluation result.

[0014] Optionally, the intelligent connected vehicle APP penetration testing system further comprises: a server terminal and a cloud, the server terminal being connected to the test terminal and configured to manage vulnerability rules in a static vulnerability library, and the cloud being connected to the server terminal and the test terminal respectively.

[0015] The third aspect of the embodiment of the application provides a computer readable storage medium, the computer readable storage medium stores computer instructions, and the computer instructions are used for causing the computer to execute the intelligent connected vehicle APP penetration test method.

[0016] The technical solution provided by the application has the following effects:

[0017] The intelligent connected vehicle APP penetration test method, system and storage medium provided by the embodiment of the application extract APK files in the firmware through firmware scanning, determine original files through decompilation of the APK files, and realize penetration test on the intelligent connected vehicle APP through static scanning of the original files, thereby solving the problems of complex and tedious manual test of the vehicle APP, difficulty in analyzing the firmware and the like in the prior art, creating conditions for automatic remote penetration test, and facilitating use of the test personnel; meanwhile, the penetration test method provides a good guidance for penetration test of the vehicle APP, and can effectively promote improvement of the penetration test level of the vehicle industry APP. BRIEF DESCRIPTION OF DRAWINGS

[0018] In order to more clearly illustrate the technical solutions in the specific embodiments or the prior art, the following will briefly introduce the drawings needed to be used in the description of the specific embodiments or the prior art. Obviously, the drawings in the following description are some embodiments of the application, and other drawings can be obtained by those skilled in the art without creative labor on the basis of these drawings.

[0019] Figure 1 is a flowchart of the intelligent connected vehicle APP penetration test method according to the embodiment of the application;

[0020] Figure 2 is a structural block diagram of the intelligent connected vehicle APP penetration test system according to the embodiment of the application;

[0021] Figure 3 is a structural block diagram of the intelligent connected vehicle APP penetration test system according to another embodiment of the application;

[0022] Figure 4 is a structural schematic diagram of the computer readable storage medium according to the embodiment of the application;

[0023] Figure 5 is a structural schematic diagram of the intelligent connected vehicle APP penetration test system according to the embodiment of the application. DETAILED DESCRIPTION

[0024] As described in the background, there is no mature test method, test system, test tool, etc. for intelligent networked vehicle APP penetration testing. The existing detection of Android & IOS APP is mainly static feature scanning and dynamic behavior detection. Among them, the App detection scheme based on static feature scanning is in the form of deployment in the local, which realizes automation according to the vulnerability library, can scan App static vulnerabilities such as Webview, component exposure, weak password algorithm and other vulnerabilities. The App detection scheme based on dynamic behavior is in the form of dynamic testing by simulator injection, repackaging and packet capture, which can perform App dynamic testing such as signature verification testing, Root environment testing, http / https communication testing, etc.

[0025] Based on the above, it can be seen that the test items of the prior art deviate from the vehicle-mounted APP security requirements; the test items of the prior art for APP cannot be applied to vehicle-mounted APP testing. Moreover, the APP in the Internet of Vehicles controller is hidden in the controller firmware, which needs to be extracted manually before uploading and scanning, and the efficiency is low.

[0026] Therefore, the embodiment of the present application provides a kind of intelligent networked vehicle APP penetration test method, can be convenient, fast and effective penetration test to car APP.

[0027] In order to make the purpose, technical scheme and advantages of the embodiments of the present application clearer, the technical scheme in the embodiments of the present application will be described clearly and completely below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative labor are within the scope of protection of the present application.

[0028] The embodiment of the present application provides a kind of intelligent networked vehicle APP penetration test method, as shown in Figure 1 The method comprises the following steps:

[0029] Step S101: obtain the firmware in intelligent networked vehicle;Specifically, with the popularization of new energy vehicles, intelligent, networked, electric and shared become new development direction, and the use of Android system in car firmware is increasing, so testing APP in car controller (such as IVI, T-box) firmware is an essential part of car safety. Therefore, the firmware can be the firmware in the car controller.

[0030] Step S102: scanning the firmware to obtain the APK file in the firmware. When extracting the APK file, the firmware content can be extracted and parsed after obtaining the firmware to obtain the data file in the firmware, and then the APK file in the data file is extracted.

[0031] Step S103: de-shelling the APK file to obtain the original file; after extracting the APK file, the APP can be de-shelled to obtain the original file. Specifically, a plurality of de-shellers based on hook frida can be used to obtain dump and extract the original dex file through hook classloader, loadClass, getDex, DexPathList pathList and mCookie, etc. In addition, after extracting the original file, the abstract code reinforcement can also be restored by means of active calling.

[0032] In an embodiment, when de-shelling the APP, a hook module based on Xpose, CydiaSubstrate can be used to de-shell the reinforced APP.

[0033] Step S104: static scanning of the original file to obtain a static evaluation result. After obtaining the original file, the original file can be statically scanned, specifically, the original file can be matched with the vulnerability rules in the static vulnerability library, and the source code security evaluation, client security evaluation, data security evaluation and dynamic link library security evaluation can be performed.

[0034] Specifically, the static vulnerability library is stored in the vulnerability library. The vulnerability library is used to store and display vulnerability information, and the vulnerability information is obtained by selecting and summarizing based on CNVD vulnerability library and domestic well-known vulnerability database, including scanning result database, vulnerability feature database, etc. The vulnerability library can also output and display the security vulnerability report according to the result of static evaluation. In addition, the vulnerability library can update the vulnerability features through data crawling and machine learning to improve the accuracy.

[0035] The intelligent networked vehicle APP penetration testing method provided by the embodiment of the application extracts the APK file in the firmware through firmware scanning, determines the original file through de-shelling of the APK file, and realizes penetration testing of the intelligent networked vehicle APP through static scanning of the original file, solves the problems of complex and tedious manual testing of the vehicle APP, difficulty in analyzing the firmware and the like in the prior art, creates conditions for automatic remote penetration testing, and facilitates the use of testers; at the same time, the penetration testing method provides a good guidance for vehicle APP penetration testing, and can effectively promote the improvement of the vehicle industry APP penetration testing level.

[0036] As an optional implementation of the embodiment of the present application, when the firmware is scanned, the preset directory in the firmware can be scanned first, and then the firmware is scanned. The preset directory includes the directories of / system / lib, / system / priv-app / , / system / app, / data / app, / misc, / data / data, / appproxy, / vendor, etc. in the firmware. The preset directory is the storage location of most APKs. By scanning the preset directory first and then scanning the whole firmware, the speed of firmware scanning can be improved.

[0037] Specifically, when the APK file is scanned and extracted, Binwalk, IDA and other tools can be used to analyze the instruction set and compression form of the firmware and cut the data segment of the firmware system to obtain the data file, and then the data file is decompiled and analyzed to identify and extract the APK file. In addition, foremost can be used to extract the firmware data, and APK file scanning can be performed in multiple forms such as regular expression, string matching and file type identification.

[0038] In an embodiment, before the firmware is scanned, the firmware is subjected to buffer overflow, stack overflow and integer overflow vulnerability detection. Specifically, before the APK file is extracted, the unsafe API functions (such as gets, getenv, scanf, sscanf, sprintf, vsprintf, strcat, strcpy) can also be scanned. The scanning of the corresponding functions can detect buffer overflow, stack overflow, integer overflow and other vulnerabilities by detecting array out-of-bound, memory allocation and memory access.

[0039] As an optional implementation of the embodiment of the present application, the original file is subjected to static scanning to obtain a static evaluation result, including: the original file is decompiled to obtain a configuration file, a resource file, a signature file and a code file; the configuration file, the resource file, the signature file and the code file are matched with vulnerability rules in a static vulnerability library respectively to perform source code security evaluation, client security evaluation, data security evaluation and dynamic link library security evaluation to obtain the static evaluation result. Specifically, the decompilation process can use apktool, IDA or JEB and other tools to decompile the DEX and SO after the shell is removed to obtain the configuration file (such as AndroidManifest.xml), the resource file, the signature file and the smali code file.

[0040] In an embodiment, the static scanning of the original file obtains a static evaluation result, and further includes: performing a decompilation risk test on JAVA code and SO dynamic link library in the original file; performing a hard coding test on sensitive keywords in the original file; performing a security test on preset components in the original file; performing a Drozer test on local files in the original file; performing a test on vulnerabilities of data existing in the original file; and performing a security evaluation on dynamic link libraries in the original file.

[0041] In an embodiment, the static scanning can use IDA, JEB, Drozer and other tools to perform source code security evaluation, data security evaluation and client security evaluation. Specifically, for the original dex file, a decompilation risk test can be performed to detect JAVA code and SO dynamic link library whether to be obfuscated and flattened. A hard coding test can also be performed on sensitive keywords IP, root, login, password, encrypt and the like. The hard coding test is mainly to test account, password or other password keys in engineering mode to determine whether there is insecurity.

[0042] When the operating system of the APP is an Android system, the preset components in the original file include Activity, Service, Content provider and Broadcast Receive. The security test on the four preset components can detect whether the components are exposed, whether implicit Intent is used, dynamically registered Receiver, Activity component hijacking test and Intent Scheme URL vulnerability test and the like. When the Drozer tool is used for testing, local directory traversal vulnerability, local database SQL injection, local data file permission vulnerability, Logcat sensitive information leakage and data backup test and the like can be detected. The test on vulnerabilities of data existing in the original file includes detection of insecure random number vulnerability, AES / DES / RSA weak encryption vulnerability, weak Hash encryption algorithm vulnerability, insecure API overflow vulnerability and the like. The dynamic link library security evaluation includes detection of non-use of compiler stack protection risk, detection of non-use of address space randomization risk, FFmpeg file reading vulnerability test and libupnp vulnerability test and the like.

[0043] As an optional implementation of the embodiment of the application, the intelligent connected vehicle APP penetration testing method further comprises: capturing data packets on the vehicle control APP; performing APP vehicle control scanning according to the data packets to obtain a vehicle control scanning result. Specifically, for the intelligent connected vehicle APP, in addition to the APP in the vehicle controller firmware, since most of the current vehicles can be controlled by a mobile phone control APP, the penetration test of the intelligent connected vehicle APP further includes a test of the mobile phone control APP.

[0044] In an embodiment, the APP vehicle control scanning according to the data packets to obtain a vehicle control scanning result comprises: decrypting HTTPS traffic in the data packets; performing HTTPS security testing on the decrypted HTTPS traffic; performing TSP testing on the decrypted HTTPS traffic; capturing sensitive keyword data in the data packets, and performing a replay attack on the sensitive keyword data; and performing dynamic security testing on the APP client.

[0045] Specifically, for the test of the mobile phone control APP, each network interface can be traversed by using an automatic testing tool, and then the data packets on the APP can be captured by using tcpdump and the HTTPS traffic can be decrypted by using Wireshark. The HTTPS security testing on the decrypted HTTPS traffic includes HTTPS certificate weak verification, HTTPS sensitive data hijacking, HTTPS hostname weak verification, and HTTPS two-way authentication testing.

[0046] In the replay attack test, a Wireshark plug-in can also be used to capture vehicle control sensitive keywords such as Dooropen, doorclose, enginestart, enginestop, onkeyon, ptmopen, and trunkopen in the data packets, and then a replay attack can be performed to observe the effect.

[0047] For the decrypted HTTPS traffic, TSP testing can also be performed to verify whether the server communication mechanism is secure, whether sensitive data is encrypted, whether brute force cracking is possible, and whether there is an overreach, i.e., to perform brute force cracking testing, overreach vulnerability testing, and the like. In addition, SSL certificate risk testing, SMS bombing testing, and logic vulnerability testing can also be performed. Alternatively, a Bursuite tool can be used to set up a proxy to perform a man-in-the-middle attack test.

[0048] In addition, an Android emulator can be used to perform client dynamic testing, including signature verification testing, dynamic link library injection testing, integrity verification testing, emulator security detection, Root environment detection security, and the like.

[0049] The test result of the mobile phone controlled vehicle APP can also be imported into the vulnerability library, and the test result includes vulnerability description, scanning process information, vulnerability rating, judgment condition, corresponding reference CVE, and solution, etc.

[0050] The intelligent connected vehicle APP penetration testing method provided by the embodiment of the application can realize comprehensive penetration testing of the vehicle APP, can scan the APK file in the firmware of the Android system controller IVI and T-BOX, and can also detect the mobile terminal APK (i.e., the mobile phone controlled vehicle APP), and automatically output a security vulnerability report; therefore, the penetration testing method integrates the firmware analysis function, the firmware APP scanning and identification function, the APP decompilation function, the APP client detection function, the APP vehicle control traffic analysis, the vulnerability library data function, the output security vulnerability report and chart display function.

[0051] The embodiment of the application further provides an intelligent connected vehicle APP penetration testing system, as shown in Figure 2 The test terminal includes:

[0052] The firmware acquisition module is configured to acquire the firmware in the intelligent connected vehicle; for details, refer to the corresponding part of the above method embodiment, which will not be repeated here.

[0053] The scanning module is configured to scan the firmware to obtain the APK file in the firmware; for details, refer to the corresponding part of the above method embodiment, which will not be repeated here.

[0054] The decompilation module is configured to decompile the APK file to obtain the original file; for details, refer to the corresponding part of the above method embodiment, which will not be repeated here.

[0055] The evaluation module is configured to perform static scanning on the original file to obtain a static evaluation result; for details, refer to the corresponding part of the above method embodiment, which will not be repeated here.

[0056] The intelligent connected vehicle APP penetration testing system provided by the embodiment of the application extracts the APK file in the firmware through firmware scanning, determines the original file through decompilation of the APK file, and performs static scanning on the original file to realize penetration testing of the intelligent connected vehicle APP, solves the problems of complicated and complex manual testing of the vehicle APP and difficulty in analyzing the firmware in the prior art, creates conditions for automatic remote penetration testing, and is convenient for testers to use; at the same time, the penetration testing system provides a good guidance for vehicle APP penetration testing, and can effectively promote the improvement of the vehicle industry APP penetration testing level.

[0057] In an embodiment, the intelligent connected vehicle APP penetration testing system further comprises a server terminal and a cloud, the server terminal is connected to the test terminal, and is used for managing vulnerability rules in a static vulnerability library, and the cloud is connected to the server terminal and the test terminal respectively.

[0058] Specifically, the server terminal can be deployed on a local physical server or a virtual machine; the server terminal can be composed of a case, a CPU, a memory, a hard disk and a gigabit network port, and adopts a B / S architecture, supports deployment on a physical server / cloud host, supports remote upgrading and local file offline upgrading, has the ability to provide services in the form of API, is convenient for customized development, has scanning performance: in a hardware minimum configuration, a single engine environment, the average application detection time is less than or equal to 3 minutes; the task completion quantity of a single day limit detection application is not less than 1000; has good scalability, supports horizontal expansion of a scanning engine and distributed deployment.

[0059] In an embodiment, the vulnerability library can be saved in the server terminal, the server terminal can receive the penetration test result, and automatically classifies and grades the vulnerability in combination with the vulnerability library; in addition, the vulnerability of the same type or the same device can be summarized, displayed and rated.

[0060] As shown in Figure 3 As shown in

[0061] The function description of the intelligent connected vehicle APP penetration testing system provided by the embodiment of the present application is described in detail in the above-mentioned embodiment of the intelligent connected vehicle APP penetration testing method.

[0062] The embodiment of the present application further provides a storage medium, such as Figure 4As shown, a computer program 601 is stored on it. When executed by a processor, this program implements the steps of the intelligent connected vehicle APP penetration testing method described in the above embodiments. The storage medium also stores audio and video stream data, feature frame data, interactive request signaling, encrypted data, and a preset data size. The storage medium can be a magnetic disk, optical disk, read-only memory (ROM), random access memory (RAM), flash memory, hard disk drive (HDD), or solid-state drive (SSD), etc.; the storage medium may also include combinations of the above types of memory.

[0063] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The program can be stored in a computer-readable storage medium, and when executed, it can include the processes of the embodiments of the above methods. The storage medium can be a magnetic disk, optical disk, read-only memory (ROM), random access memory (RAM), flash memory, hard disk drive (HDD), or solid-state drive (SSD), etc.; the storage medium can also include combinations of the above types of memory.

[0064] The intelligent connected vehicle APP penetration testing system provided in this embodiment of the invention, such as... Figure 5 As shown, it may include a processor 51 and a memory 52, wherein the processor 51 and the memory 52 can be connected via a bus or other means. Figure 5 Taking the example of a connection between China and Israel via a bus.

[0065] Processor 51 can be a central processing unit (CPU). Processor 51 can also be other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, or combinations of the above types of chips.

[0066] The memory 52, as a kind of non-transient computer readable storage medium, can be used to store non-transient software programs, non-transient computer executable programs and modules, such as corresponding program instructions / modules in the embodiments of the present application. The processor 51 performs various functional applications and data processing of the processor by running the non-transient software programs, instructions and modules stored in the memory 52, that is, implements the intelligent connected vehicle APP penetration test method in the above-mentioned method embodiments.

[0067] The memory 52 can include a program storage area and a data storage area, wherein the program storage area can store an operating system and at least one application required by a function; the data storage area can store data created by the processor 51 and the like. In addition, the memory 52 can include a high-speed random access memory, and can also include a non-transient memory, such as at least one magnetic disk storage device, a flash memory device, or other non-transient solid-state memory device. In some embodiments, the memory 52 can optionally include a memory remotely arranged with respect to the processor 51, and these remote memories can be connected to the processor 51 through a network. Examples of the above-mentioned network include but are not limited to the Internet, an intranet, a local area network, a mobile communication network and a combination thereof.

[0068] The one or more modules are stored in the memory 52, and when executed by the processor 51, perform the intelligent connected vehicle APP penetration test method in the embodiment shown in Figure 1 2.

[0069] The above-mentioned system specific details can be understood by referring to the corresponding related descriptions and effects in the embodiments shown in Figures 1-2 The above-mentioned system specific details can be understood by referring to the corresponding related descriptions and effects in the embodiments shown in

[0070] Although the embodiments of the present application are described in conjunction with the accompanying drawings, various modifications and changes can be made by those skilled in the art without departing from the spirit and scope of the present application, and such modifications and changes fall within the scope defined by the appended claims.

Claims

1. A penetration testing method for intelligent connected vehicle apps, characterized in that, include: Obtain the firmware in the intelligent connected vehicle, wherein the firmware is the firmware in the vehicle controller, and the vehicle controller includes an IVI and a T-box; The firmware is scanned to obtain the APK file within the firmware; The APK file is unpacked to obtain the original file; A static scan of the original file was performed to obtain static evaluation results; A static scan of the original file was performed to obtain static evaluation results, including: The original file is decompiled to obtain configuration files, resource files, signature files, and code files; The configuration file, resource file, signature file, and code file are matched with the vulnerability rules in the static vulnerability database to perform source code security assessment, client security assessment, data security assessment, and dynamic link library security assessment, and obtain the static assessment results. The method further includes: Capture data packets from the vehicle control app: Decrypt the HTTPS traffic in the data packet; Perform HTTPS security testing on the decrypted HTTPS traffic; Perform a TSP test on the decrypted HTTPS traffic; Capture sensitive keyword data from the data packet and perform a replay attack on the sensitive keyword data; Perform dynamic security testing on the APP client.

2. The penetration testing method for intelligent connected vehicle apps according to claim 1, characterized in that, Scanning the firmware includes: The firmware is scanned to a preset directory and a full disk scan is performed. Scanning the firmware further includes: The firmware is parsed, segmented, and decompiled.

3. The penetration testing method for intelligent connected vehicle apps according to claim 1, characterized in that, The static evaluation results obtained by performing a static scan on the original file also include: Perform decompilation risk testing on the JAVA code and SO dynamic link library in the original file; Perform hard-coding tests on sensitive keywords in the original file; Perform security testing on the preset components in the original file; Perform Drozer testing on the local files in the original file; Test for vulnerabilities in the data of the original file; A security assessment is performed on the dynamic link libraries in the original file.

4. The penetration testing method for intelligent connected vehicle apps according to claim 1, characterized in that, Before scanning the firmware, the process also includes: The firmware is tested for buffer overflow, stack overflow, and integer overflow vulnerabilities.

5. A penetration testing system for intelligent connected vehicle apps, characterized in that, include: The test terminal includes: A firmware acquisition module is used to acquire firmware in intelligent connected vehicles, wherein the firmware is firmware in the vehicle controller, and the vehicle controller includes an IVI and a T-box. The scanning module is used to scan the firmware to obtain the APK file in the firmware; The unpacking module is used to unpack the APK file to obtain the original file; The evaluation module is used to perform a static scan on the original file and obtain a static evaluation result. A static scan of the original file was performed to obtain static evaluation results, including: The original file is decompiled to obtain configuration files, resource files, signature files, and code files; The configuration file, resource file, signature file, and code file are matched with the vulnerability rules in the static vulnerability database to perform source code security assessment, client security assessment, data security assessment, and dynamic link library security assessment, and obtain the static assessment results. The control APP testing module is used to capture data packets on the vehicle control APP: decrypt the HTTPS traffic in the data packets; perform HTTPS security testing on the decrypted HTTPS traffic; perform TSP testing on the decrypted HTTPS traffic; capture sensitive keyword data in the data packets and perform replay attacks on the sensitive keyword data; and perform dynamic security testing on the APP client.

6. The intelligent connected vehicle APP penetration testing system according to claim 5, characterized in that, Also includes: A server terminal and a cloud are connected, the server terminal being connected to the test terminal for managing vulnerability rules in a static vulnerability database, and the cloud being connected to both the server terminal and the test terminal.

7. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer instructions for causing the computer to perform the intelligent connected vehicle APP penetration testing method as described in any one of claims 1-4.

Images