Vehicle vulnerability attack effect testing system and testing method based on semi-physical simulation

Abstract

The invention provides a vehicle vulnerability attack effect test system and a test method based on semi-physical simulation, and relates to the technical field of vehicle vulnerability testing. The system comprises: a semi-physical simulation test bench and an attack effect display terminal; the semi-physical simulation test bench comprises: a data processing system and a user operation device; wherein the data processing system comprises a plurality of ECUs, and any two ECUs are connected through a central network management communication; the data processing system is used to perform the following steps: obtaining an initial operation instruction CL1 issued by a power input device or a behavior operation I / O device when a user simulates normal driving of a vehicle; parsing CL1 to generate a target operation instruction ML1 corresponding to CL1; sending ML1 to an attack effect display terminal to display the attack effect of a preset vehicle vulnerability on a vehicle when the user operates the vehicle function corresponding to CL1; the system of the invention makes the cost of vehicle vulnerability testing low and the test efficiency high.

Description

Technical Field

[0001] The present invention relates to the technical field of vehicle vulnerability testing, and in particular to a vehicle vulnerability attack effect testing system and a testing method based on semi-physical simulation. Background Art

[0002] With the rapid development of the automobile industry, the functions and performance of automobiles are constantly updated and iterated. However, no matter how the automobiles are updated and iterated, the testing of automobile vulnerabilities is always an indispensable part of the automobile research and development process. It is understandable that different car models have different corresponding control systems and data transmission protocols. Therefore, if testers want to test the control system of each model of automobile for known vulnerabilities, they need to purchase the corresponding hardware for each model of automobile, which will result in higher testing costs and lower testing efficiency. Summary of the invention

[0003] In view of the above technical problems, the technical solution adopted by the present invention is:

[0004] According to a first aspect of the present application, a vehicle vulnerability attack effect testing system based on semi-physical simulation is provided, and the vehicle vulnerability attack effect testing system based on semi-physical simulation includes: a semi-physical simulation test bench and an attack effect display terminal; wherein the semi-physical simulation test bench and the attack effect display terminal are communicatively connected; the semi-physical simulation test bench is used to test any type of vehicle for a preset vulnerability, and send the test data to the attack effect display terminal, so as to display the vulnerability attack effect through the attack effect display terminal.

[0005] The semi-physical simulation test bench includes: a data processing system and a user operation device; wherein the data processing system includes a plurality of ECUs, and any two ECUs are connected to each other through a central network management communication; the user operation device includes a power input device and a behavior operation I / O device, and the power input device and the behavior operation I / O device are connected to the ECU corresponding to the data processing system in communication; the power input device is used to simulate the power device of the vehicle, and the behavior operation I / O device is used to simulate the user's I / O operation on the vehicle;

[0006] The preset vehicle vulnerabilities are implanted into the corresponding data processing module, and the data processing system is used to perform the following steps:

[0007] S100, obtaining an initial operation instruction CL1 issued by a power input device or a behavior operation I / O device when a user simulates normal driving of a vehicle; wherein CL1 corresponds to any function of the vehicle.

[0008] S200, parsing CL1 to generate a target operation instruction ML1 corresponding to CL1.

[0009] S300, sending ML1 to the attack effect display terminal to display the attack effect of the preset vehicle vulnerability on the vehicle when the user operates the vehicle function corresponding to CL1.

[0010] According to the second aspect of the present application, a test method for a vehicle vulnerability attack effect test system based on semi-physical simulation is also provided, characterized in that the method comprises the following steps:

[0011] S100, obtaining an initial operation instruction CL1 issued by a power input device or a behavior operation I / O device when a user simulates normal driving of a vehicle; wherein CL1 corresponds to any function of the vehicle;

[0012] S200, parsing CL1 to generate a target operation instruction ML1 corresponding to CL1;

[0013] S300, sending ML1 to the attack effect display terminal to display the attack effect of the preset vehicle vulnerability on the vehicle when the user operates the vehicle function corresponding to CL1.

[0014] The present invention has at least the following beneficial effects:

[0015] The vehicle vulnerability attack effect test system based on semi-physical simulation of the present invention comprises a semi-physical simulation test bench and an attack effect display terminal in communication connection; the semi-physical simulation test bench is used to test any type of vehicle for a preset vulnerability, and send the test data to the attack effect display terminal, so as to display the vulnerability attack effect through the attack effect display terminal; the data processing system comprises a plurality of ECUs, and any two ECUs are connected in communication through a central network management; the user operation device comprises a power input device and a behavior operation I / O device, and the power input device and the behavior operation I / O device are connected in communication with the ECU corresponding to the data processing system; the power input device is used to simulate the power device of the vehicle, and the behavior operation I / O device is used to simulate the user's I / O operation on the vehicle; the tester can implant a known vehicle vulnerability in the ECU, and then test the attack effect of the vulnerability on the vehicle; because the test system can set corresponding parameters according to the model of the test vehicle to adapt to the test of vehicles of different models, the test cost is low and the test efficiency is high. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0017] Figure 1A schematic diagram of the structure of a vehicle vulnerability attack effect testing system based on semi-physical simulation provided by an embodiment of the present invention;

[0018] Figure 2 A flowchart of steps executed by a data processing system provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0019] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present invention.

[0020] It should be noted that various aspects of the embodiments within the scope of the appended claims are described below. It should be apparent that the aspects described herein may be embodied in a wide variety of forms, and any specific structure and / or function described herein is merely illustrative. Based on the present disclosure, it should be understood by those skilled in the art that an aspect described herein may be implemented independently of any other aspect, and two or more of these aspects may be combined in various ways. For example, any number of aspects described herein may be used to implement the device and / or practice the method. In addition, other structures and / or functionalities other than one or more of the aspects described herein may be used to implement this device and / or practice this method.

[0021] See also Figure 1 , which is a structural diagram of a vehicle vulnerability attack effect testing system based on semi-physical simulation provided in this embodiment, wherein the vehicle vulnerability attack effect testing system based on semi-physical simulation includes: a semi-physical simulation test bench and an attack effect display terminal; wherein the semi-physical simulation test bench and the attack effect display terminal are communicatively connected; the semi-physical simulation test bench is used to test any type of vehicle for a preset vulnerability, and send the test data to the attack effect display terminal, so as to display the vulnerability attack effect through the attack effect display terminal.

[0022] The semi-physical simulation test bench includes: a data processing system and a user operation device; wherein the data processing system includes a plurality of electronic control units (ECUs), and any two ECUs are connected through a central network management communication; the user operation device includes a power input device and a behavior operation I / O device, and the power input device and the behavior operation I / O device are connected to the ECU corresponding to the data processing system; the power input device is used to simulate the power device of the vehicle, and the behavior operation I / O device is used to simulate the user's I / O operation on the vehicle.

[0023] In this embodiment, the semi-physical simulation test bench is developed by specific hardware, and the semi-physical simulation test bench includes: a data processing system and a user operation device; the user operation device includes a power input device, such as: a steering wheel, an accelerator pedal, etc.; the user operation device also includes a behavioral operation I / O device, such as: a window lift switch, a door switch, etc.; the user operation device can simulate every operation of the user on a real vehicle when driving.

[0024] The data processing system includes several ECUs, such as information ECU, body ECU, power ECU and chassis ECU; each ECU can be developed using an STM32 development board to simulate each ECU of an actual vehicle; the data processing system also includes an on-board T-BOX and other data processing modules; the ECU corresponding to the data processing system can receive control instructions generated by the user operating the power input device or the behavior operation I / O device, and process the control instructions, and then send them to the attack effect display end.

[0025] Furthermore, the vehicle vulnerability attack effect testing system based on semi-physical simulation also includes a plurality of wireless communication devices, each of which is connected to the ECU in the data processing system through a corresponding wireless connection method.

[0026] In this embodiment, the wireless communication devices include Bluetooth devices, WIFI devices, radio frequency devices and wireless navigation devices, and these wireless communication devices can be connected to the data processing system for communication; for example, the Bluetooth device can communicate with the data processing system wirelessly via Bluetooth.

[0027] The preset vehicle vulnerabilities are implanted into the corresponding data processing module, and the data processing system is used to execute Figure 2 Steps shown:

[0028] S100, obtaining an initial operation instruction CL1 issued by a power input device or a behavior operation I / O device when a user simulates normal driving of a vehicle; wherein CL1 corresponds to any function of the vehicle.

[0029] In this embodiment, known vehicle vulnerabilities can be obtained. When testing the impact of the vulnerability on a specific model of vehicle, the tester can implant any known preset vehicle vulnerability into the corresponding data processing module; then, the user can simulate the operation of the vehicle during normal driving, such as: stepping on the accelerator pedal to accelerate, operating the steering wheel to steer, and operating the window button to open the window, etc.; when the user operates the user operation device, the corresponding operation instruction can be generated, for example: if the user operates the button to open the window, an operation instruction to open the window is generated.

[0030] S200, parsing CL1 to generate a target operation instruction ML1 corresponding to CL1.

[0031] Further, the ECU includes a central ECU and a sub-ECU; step S200 includes the following steps:

[0032] S210, the central ECU parses CL1 according to a preset instruction parsing rule to obtain an intermediate operation instruction ZL1 corresponding to CL1; wherein the central ECU is used to uniformly parse different types of operation instructions.

[0033] In this embodiment, a central ECU is preset, which is responsible for uniformly parsing various instructions sent by the user operating device to generate intermediate operation instructions that can be recognized by the vehicle vulnerability attack effect testing system based on semi-physical simulation; it should be noted that the preset instruction parsing rules can be designed according to actual needs, for example: the window opening operation instructions of various models of vehicles are uniformly parsed into the window opening instruction KC that can be recognized by the vehicle vulnerability attack effect testing system based on semi-physical simulation.

[0034] S220, the central ECU sends ZL1 to the sub-ECU corresponding to CL1.

[0035] In this embodiment, since the function corresponding to CL1 needs to be processed by the corresponding sub-ECU, ZL1 needs to be sent to the sub-ECU corresponding to CL1; for example: the intermediate operation instruction corresponding to the operation of stepping on the accelerator pedal is processed by the power ECU, and the intermediate operation instruction corresponding to the operation of turning the steering wheel is processed by the body ECU.

[0036] S230, the sub-ECU corresponding to CL1 converts ZL1 into ML1 to control the action of the actuator corresponding to CL1.

[0037] In this embodiment, ZL1 cannot directly control the action of the actuator, and ZL1 needs to be converted into a control signal that can be recognized by the corresponding actuator, such as a high-level signal, a low-level signal, or a control signal that can be recognized by the virtual simulation environment.

[0038] S300, sending ML1 to the attack effect display terminal to display the attack effect of the preset vehicle vulnerability on the vehicle when the user operates the vehicle function corresponding to CL1.

[0039] In this embodiment, the attack effect display terminal can be CARLA, however, CARLA does not support the CAN protocol, while the CAN protocol is used in actual vehicle control systems; in this embodiment, in order to simulate the actual vehicle more realistically, the semi-physical simulation test bench also uses the CAN protocol, so protocol conversion is required between the semi-physical simulation test bench and the attack effect display terminal.

[0040] Furthermore, the vehicle vulnerability attack effect testing system based on semi-physical simulation also includes: a protocol conversion layer and a connection conversion layer; the data processing system is connected to the attack effect display terminal through the protocol conversion layer and the connection conversion layer; the protocol conversion layer is used to perform the following steps:

[0041] S310, obtain ML1.

[0042] S320, according to the preset protocol mapping table, convert ML1 into the designated instruction ML1' corresponding to GN1; wherein GN1 is the vehicle function corresponding to CL1; the preset protocol mapping table includes a plurality of rows, each row corresponding to a target operation instruction and a designated instruction corresponding to a vehicle function of a type of vehicle; the same vehicle function of different types of vehicles corresponds to the same designated instruction.

[0043] In this embodiment, the preset protocol mapping table QA=(QA1, QA2, ..., QA i ,…,QA n ), i=1, 2,...,n; among them, QA i is the row data of the vehicle function corresponding to the i-th target operation instruction, n is the number of target operation instructions; QA i =(QA i，0 , QA i，1 , QA i，2 );QA i，0 is the vehicle model corresponding to the i-th vehicle function, QA i，1 is the target operation instruction corresponding to the i-th vehicle function, QA i，2 is the specified instruction corresponding to the i-th vehicle function.

[0044] In this embodiment, the target operation instruction for each function corresponding to each model of vehicle can be obtained, and then the target operation instruction for each function corresponding to each model of vehicle can be put into QA in an exhaustive manner. For example, the target operation instruction for opening the window of a vehicle of model 1 and the target operation instruction for opening the window of a vehicle of model 2 are the same, thereby realizing the mapping of vehicle functions of all models of vehicles.

[0045] Further, ML1' is determined by the following steps:

[0046] S311, traverse QA, if QA i，0 =GH1 and QA i，1 =ML1, then QA i，2 Determined as ML1'; where GH1 is the vehicle model corresponding to CL1.

[0047] In this embodiment, the vehicle model GH1 corresponding to CL1 can be determined based on CL1. If QA i，0 =GH1 and QAi，1 =ML1, it means that CL1 can be located in QA, so QA i，2 Determined as ML1'; it can be understood that ML1' is a target operation instruction that can be identified by the vehicle vulnerability attack effect testing system based on semi-physical simulation in this embodiment.

[0048] S330, sending ML1' to the connection conversion layer.

[0049] In this embodiment, ML1' only includes a specific function and information of an actuator that executes the function, such as the actuator number and control signal that executes the function. Therefore, ML1' needs to be further converted into a control signal corresponding to a specific actuator through a connection conversion layer.

[0050] Furthermore, the connection conversion layer is used to perform the following steps:

[0051] S340, in response to acquiring ML1', determining the actuator JG1 corresponding to ML1' and the control signal KZ1 that enables JG1 to execute the vehicle function corresponding to CL1 according to a preset connection mapping table; wherein the preset connection mapping table includes a plurality of rows, each row corresponding to a specified instruction and the actuator and control signal corresponding to the specified instruction.

[0052] In this embodiment, the preset connection mapping table QB=(QB1, QB2, ..., QB j , …, QB m ), j = 1, 2, ..., m; where QB j is the row data corresponding to the jth vehicle function, m is the number of vehicle functions; QB j =(QB j，0 , Q.B. j，1 , Q.B. j，2 ); QB j，0 is the jth vehicle function, QB j，1 is the actuator corresponding to the jth vehicle function, QB j，2 is the control signal corresponding to the jth vehicle function.

[0053] In this embodiment, for vehicles of different models, the control signal of the actuator corresponding to the same function may also be different. For example, the control signal of the actuator corresponding to the window opening function of vehicle model 1 is a high-level signal, while the control signal of the actuator corresponding to the window opening function of vehicle model 2 is a low-level signal. If the test vehicle is replaced, a series of control logics of the vulnerability testing system need to be modified. By using the connection mapping table QB in this embodiment, only QB needs to be modified, thereby greatly improving the test efficiency.

[0054] In addition, through QB, the number of the actuator can be modified at will to adapt to more test scenarios, making the vulnerability testing system more flexible and convenient.

[0055] Furthermore, the execution structure may be a relay.

[0056] JG1 and KZ1 were determined by the following steps:

[0057] S341, traverse QB, if QB j，0 =GN1, then QB j，1 Determine as JG1, and QB j，2 Determined to be KZ1.

[0058] S350, controls JG1 through KZ1 to execute the vehicle function corresponding to CL1.

[0059] In this embodiment, according to GN1, QB can be traversed to determine the execution mechanism corresponding to GN1 and the control signal corresponding to the execution structure.

[0060] In the vehicle vulnerability attack effect test system based on semi-physical simulation of the present embodiment, the semi-physical simulation test bench is communicatively connected to the attack effect display terminal; the semi-physical simulation test bench is used to test any type of vehicle for a preset vulnerability, and send the test data to the attack effect display terminal to display the vulnerability attack effect through the attack effect display terminal; the data processing system includes a plurality of ECUs, and any two ECUs are communicatively connected through a central network management; the user operation device includes a power input device and a behavior operation I / O device, and the power input device and the behavior operation I / O device are communicatively connected to the ECU corresponding to the data processing system; the power input device is used to simulate the power device of the vehicle, and the behavior operation I / O device is used to simulate the user's I / O operation on the vehicle; the tester can implant a known vehicle vulnerability in the ECU, and then test the attack effect of the vulnerability on the vehicle; because the test system can set corresponding parameters according to the model of the test vehicle to adapt to the test of vehicles of different models, the test cost is low and the test efficiency is high.

[0061] In an exemplary embodiment, when a certain vehicle is tested for vulnerabilities, when a certain function is abnormally executed, and it is clear which time period of data is abnormal, in order to trace which historical time period of data processing caused the function abnormality, the following method is provided:

[0062] Q100, in response to the vehicle function abnormality tested by the vehicle vulnerability attack effect testing system based on semi-physical simulation, the preset historical time period T is evenly divided into y sub-historical time periods to obtain a sub-historical time period list HT=(HT1, HT2, ..., HT x ,…,HT y), x = 1, 2, ..., y; where HT x The xth historical sub-time period obtained by evenly dividing T; the end time of T is the current time.

[0063] In this embodiment, it can be understood that when the vehicle is tested for vulnerabilities, the vulnerability testing system is implanted with known vulnerabilities, which will cause abnormal vehicle functions; the vehicle function abnormality can be confirmed manually, for example: the user operates the window opening operation, but the window is not opened, indicating that the window function is abnormal; the historical time period T and the sub-historical time period can be set according to actual needs, for example: T is 1 hour, and the sub-historical time period is 5 minutes.

[0064] Q200, obtain the number of data items and data types sent by each data processing module to other data processing modules, as well as the number of data items and data types received from other data processing modules in each sub-historical time period, so as to obtain the abnormal data sending and receiving matrix list Z corresponding to HT = (Z1, Z2, ..., Z x , …, Z y ), where Z x HT x The corresponding abnormal data sending and receiving matrix; Z x is a q×q matrix; q is the number of data processing modules; Z x The rth row and sth column element Z x (r, s) = [Z x (r,s)_1,Z x (r, s)_2]; when r = s, Z x (r, s) = [0, 0]; when r>s, Z x (r, s)_1 and Z x (r, s)_2 are the number of data items and data types received by the rth data processing module from the sth data processing module; when r<s, Z x (r, s)_1 and Z x (r, s)_2 are the number of data items and the number of data types sent by the rth data processing module to the sth data processing module respectively; r=1, 2,…, q; s=1, 2,…, q.

[0065] In this embodiment, during the vulnerability test, the number of data items and the number of data types sent to which data processing module by each data processing module, as well as the number of data items and the number of data types received from which data processing module, will be recorded. Therefore, the number of data items and the number of data types sent by each data processing module to other data processing modules in each sub-historical time period, as well as the number of data items and the number of data types received from other data processing modules, can be obtained to obtain the abnormal data sending and receiving matrix list Z corresponding to HT.

[0066] Q300, obtains each operation of the user in each sub-historical time period, and executes each operation in a vulnerability-free vehicle vulnerability attack effect testing system based on semi-physical simulation.

[0067] In this embodiment, when the user operates the user operation device, each operation can also be recorded. Then, each operation of the user in each sub-historical time period can be executed in a vulnerability-free semi-physical simulation-based vehicle vulnerability attack effect testing system to achieve the purpose of reproduction.

[0068] Q400, obtain the number of data items and data types sent by each data processing module to other data processing modules, as well as the number of data items and data types received from other data processing modules in each sub-historical time period, so as to obtain a normal data sending and receiving matrix list W corresponding to HT = (W1, W2, ..., W x , …, W y ), where W x HT x The corresponding normal data sending and receiving matrix; W x is a q×q matrix; W x The rth row and sth column element W x (r, s) = [W x (r,s)_1,W x (r, s)_2]; when r = s, W x (r, s) = [0, 0]; when r>s, W x (r, s)_1 and W x (r, s)_2 are the number of data items and data types received by the rth data processing module from the sth data processing module; when r<s, W x (r, s)_1 and W x (r, s)_2 are the number of data items and the number of data types sent by the rth data processing module to the sth data processing module respectively.

[0069] In the process of reproducing the user's operation as described above, the number of data items and the number of data types sent by each data processing module to other data processing modules, as well as the number of data items and the number of data types received from other data processing modules in each sub-historical time period can also be recorded to obtain the normal data sending and receiving matrix list W corresponding to HT; it can be understood that the construction method of the abnormal data sending and receiving matrix list and the normal data sending and receiving matrix list is exactly the same, and the normal data sending and receiving matrix list can be understood as a standard data sending and receiving matrix list.

[0070] Q500, based on Z and W, determine the abnormal sub-historical time period corresponding to the vehicle function abnormality.

[0071] Further, step Q500 may include the following steps:

[0072] Q510, obtain the similarity between the abnormal data sending and receiving matrix and the normal data sending and receiving matrix corresponding to each sub-historical time period to obtain a matrix similarity list η=(η1, η2, ..., η x ,…,η y ), where η x Z x With W x The similarity between x =NUM x / (q×q);NUM x Z x With W x The number of elements that are the same between them.

[0073] In this embodiment, Z x With W x Compare the corresponding elements of the same row and column to get NUM x ; η x Represents Z x With W x The ratio of the same elements to the total elements, η x The larger the value, the higher the Z x With W x The higher the similarity between them.

[0074] Q520, traverse η, if η x <η', then η x The corresponding sub-historical time period is determined as an abnormal sub-historical time period; wherein η' is a preset matrix similarity threshold.

[0075] In this embodiment, if n x <η', indicating Z x With W x The difference between them is large, which can determine η x The corresponding sub-historical time period is determined as the abnormal sub-historical time period; then the data processed by the data processing module in the abnormal sub-historical time period is checked in detail; it can be understood that there can be multiple abnormal sub-historical time periods.

[0076] Furthermore, after step Q500, the method further comprises the following steps:

[0077] Q600, obtain the abnormal data sending and receiving matrix ZR corresponding to the abnormal sub-historical time period.

[0078] In this embodiment, after the abnormal sub-historical time period is determined, the abnormal data sending and receiving matrix ZR corresponding to the abnormal sub-historical time period can be determined.

[0079] Q700, obtain the difference between the element in the uth row and the sth column of ZR and the element in the sth row and the uth column to obtain a difference list λ=(λ 1，2 ,λ 1，3 , …, λ 1，s , …, λ 1，q , …, λ u，s , …, λ q-1，q ), u=1, 2,...q-1; among them, u<s; λ u，s =|ZR(u, s)_1-ZR(s, u)_1| / NUM max ; ZR(u, s)_1 is the number of data sent by the u-th data processing module corresponding to ZR to the s-th data processing module, and ZR(s, u) is the number of data sent by the s-th data processing module to the u-th data processing module; NUM max The maximum number of data items sent and received between any two data processing modules.

[0080] In this embodiment, the number of data sent and received by each data processing module can be obtained to determine NUM max ; Under normal circumstances, the number of data sent by the u-th data processing module to the s-th data processing module is equal to the number of data sent by the s-th data processing module to the u-th data processing module. If the two are different, it means that there is abnormal data transmitted between the two; therefore, λ u，s The larger the value, the higher the abnormality between the u-th data processing module and the s-th data processing module.

[0081] Q800, traverse λ, if λ u，s >λ', the uth data processing module and the sth data processing module are determined as a group of abnormal data processing modules.

[0082] In this embodiment, if λ u，s >λ', indicating that the data transmission between the u-th data processing module and the s-th data processing module is abnormal, the u-th data processing module and the s-th data processing module are determined as abnormal data processing modules, and subsequently the u-th data processing module and the s-th data processing module can be checked in detail to determine the specific impact of the preset vulnerability on the u-th data processing module and the s-th data processing module.

[0083] Through the method in this embodiment, when a vehicle function is abnormal during vehicle testing, the historical data of each data processing module is reversely analyzed, and the time period of the data abnormality and the abnormal data processing module can be quickly determined, thereby improving the efficiency of tracing the cause of the abnormality.

[0084] The multi-model vehicle simulation test method of this embodiment obtains the target operation instruction ML1; according to the preset protocol mapping table QA, ML1 is converted into the specified instruction ML1' corresponding to GN1; according to the preset connection mapping table QB, the actuator JG1 corresponding to ML1' and the control signal KZ1 that enables JG1 to execute the vehicle function corresponding to CL1 are determined; JG1 is controlled by KZ1 to execute the vehicle function corresponding to CL1; the target operation instructions of vehicles of different models can be converted into a unified control signal through the preset protocol mapping table QA and the preset connection mapping table QB, thereby realizing the test requirements adapted to vehicles of different models, and at the same time, making the test process relatively simple and the test efficiency relatively high.

[0085] In addition, although the steps of the method in the present disclosure are described in a specific order in the drawings, this does not require or imply that the steps must be performed in this specific order, or that all the steps shown must be performed to achieve the desired results. Additionally or alternatively, some steps may be omitted, multiple steps may be combined into one step, and / or one step may be decomposed into multiple steps, etc.

[0086] An embodiment of the present invention also provides a non-transitory computer-readable storage medium, which can be set in an electronic device to store at least one instruction or at least one program related to implementing a method in a method embodiment. The at least one instruction or the at least one program is loaded and executed by the processor to implement the method provided in the above embodiment.

[0087] The program product may use any combination of one or more readable media. The readable medium may be a readable signal medium or a readable storage medium. The readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples (non-exhaustive list) of readable storage media include: an electrical connection with one or more wires, a portable disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above.

[0088] Computer readable signal media may include data signals propagated in baseband or as part of a carrier wave, in which readable program code is carried. Such propagated data signals may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. Readable signal media may also be any readable medium other than a readable storage medium, which may send, propagate, or transmit a program for use by or in conjunction with an instruction execution system, apparatus, or device.

[0089] The program code embodied on the readable medium may be transmitted using any appropriate medium, including but not limited to wireless, wired, optical cable, RF, etc., or any suitable combination of the foregoing.

[0090] Program code for performing the operations of the present application may be written in any combination of one or more programming languages, including object-oriented programming languages ​​such as Java, C++, etc., and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user computing device, partially on the user device, as a separate software package, partially on the user computing device and partially on a remote computing device, or entirely on a remote computing device or server. In the case of a remote computing device, the remote computing device may be connected to the user computing device through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computing device (e.g., using an Internet service provider to connect through the Internet).

[0091] An embodiment of the present invention further provides an electronic device, comprising a processor and the aforementioned non-transitory computer-readable storage medium.

[0092] The electronic device according to this embodiment of the present application is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.

[0093] The electronic device is presented in the form of a general-purpose computing device. The components of the electronic device may include, but are not limited to: the at least one processor mentioned above, the at least one storage device mentioned above, and a bus connecting different system components (including storage devices and processors).

[0094] The storage stores program codes, which can be executed by the processor, so that the processor executes the steps described in the above “exemplary method” section of this specification according to various exemplary embodiments of the present application.

[0095] The memory may include readable media in the form of volatile memory, such as random access memory (RAM) and / or cache memory, and may further include read only memory (ROM).

[0096] The storage may also include a program / utility having a set (at least one) of program modules, such program modules including but not limited to: an operating system, one or more application programs, other program modules and program data, each of which or some combination may include the implementation of a network environment.

[0097] The bus may represent one or more of several types of bus structures including a memory bus or memory controller, a peripheral bus, an accelerated graphics port, a processor, or a local bus using any of a variety of bus architectures.

[0098] The electronic device may also communicate with one or more external devices (e.g., keyboards, pointing devices, Bluetooth devices, etc.), may communicate with one or more devices that enable a user to interact with the electronic device, and / or may communicate with any device (e.g., routers, modems, etc.) that enables the electronic device to communicate with one or more other computing devices. Such communication may be performed through an input / output (I / O) interface. Furthermore, the electronic device may also communicate with one or more networks (e.g., local area networks (LANs), wide area networks (WANs), and / or public networks, such as the Internet) through a network adapter. The network adapter communicates with other modules of the electronic device through a bus. It should be understood that, although not shown in the figure, other hardware and / or software modules may be used in conjunction with the electronic device, including but not limited to: microcode, device drivers, redundant processors, external disk drive arrays, RAID systems, tape drives, and data backup storage systems, etc.

[0099] Through the description of the above implementation, it is easy for those skilled in the art to understand that the example implementation described here can be implemented by software, or by software combined with necessary hardware. Therefore, the technical solution according to the implementation of the present disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.) or on a network, including several instructions to enable a computing device (which can be a personal computer, a server, a terminal device, or a network device, etc.) to execute the method according to the implementation of the present disclosure.

[0100] An embodiment of the present invention further provides a computer program product, which includes program code. When the program product is run on an electronic device, the program code is used to enable the electronic device to execute the steps of the method according to various exemplary embodiments of the present invention described above in this specification.

[0101] Although some specific embodiments of the present invention have been described in detail by way of example, it should be understood by those skilled in the art that the above examples are only for illustration, not for limiting the scope of the present invention. It should also be understood by those skilled in the art that various modifications may be made to the embodiments without departing from the scope and spirit of the present invention.

Claims

1. A vehicle vulnerability attack effect testing system based on semi-physical simulation, characterized in that: The vehicle vulnerability attack effect test system based on semi-physical simulation includes: a semi-physical simulation test bench and an attack effect display terminal; wherein the semi-physical simulation test bench and the attack effect display terminal are communicatively connected; the semi-physical simulation test bench is used to test any type of vehicle for a preset vulnerability, and send the test data to the attack effect display terminal, so as to display the vulnerability attack effect through the attack effect display terminal; The semi-physical simulation test bench includes: a data processing system and a user operation device; wherein the data processing system includes a plurality of ECUs, and any two ECUs are connected to each other through a central network management communication; the user operation device includes a power input device and a behavior operation I / O device, and the power input device and the behavior operation I / O device are connected to the ECU corresponding to the data processing system in communication; the power input device is used to simulate the power device of the vehicle, and the behavior operation I / O device is used to simulate the user's I / O operation on the vehicle; The preset vehicle vulnerabilities are implanted into the corresponding data processing module, and the data processing system is used to perform the following steps: S100, obtaining an initial operation instruction CL1 issued by a power input device or a behavior operation I / O device when a user simulates normal driving of a vehicle; wherein CL1 corresponds to any function of the vehicle; S200, parsing CL1 to generate a target operation instruction ML1 corresponding to CL1; S300, sending ML1 to the attack effect display terminal to display the attack effect of the preset vehicle vulnerability on the vehicle when the user operates the vehicle function corresponding to CL1; The vehicle vulnerability attack effect test system based on semi-physical simulation also includes: a protocol conversion layer and a connection conversion layer; the data processing system is connected to the attack effect display terminal through the protocol conversion layer and the connection conversion layer; the protocol conversion layer is used to perform the following steps: S310, obtaining ML1; S320, according to a preset protocol mapping table, converting ML1 into a designated instruction ML1' corresponding to GN1; wherein GN1 is the vehicle function corresponding to CL1; the preset protocol mapping table includes a plurality of rows, each row corresponding to a target operation instruction and a designated instruction corresponding to a vehicle function of a type of vehicle; the same vehicle function of different types of vehicles corresponds to the same designated instruction; S330, sending ML1' to the connection conversion layer; The connection conversion layer is used to perform the following steps: S340, in response to acquiring ML1', determining, according to a preset connection mapping table, an actuator JG1 corresponding to ML1' and a control signal KZ1 for causing JG1 to execute a vehicle function corresponding to CL1; wherein the preset connection mapping table includes a plurality of rows, each row corresponding to a specified instruction and an actuator and a control signal corresponding to the specified instruction; S350, controls JG1 through KZ1 to execute the vehicle function corresponding to CL1.

2. The vehicle vulnerability attack effect testing system based on semi-physical simulation according to claim 1 is characterized in that: The ECU includes a central ECU and a sub-ECU; step S200 includes the following steps: S210, the central ECU parses CL1 according to a preset instruction parsing rule to obtain an intermediate operation instruction ZL1 corresponding to CL1; wherein the central ECU is used to uniformly parse different types of operation instructions; S220, the central ECU sends ZL1 to the sub-ECU corresponding to CL1; S230, the sub-ECU corresponding to CL1 converts ZL1 into ML1 to control the action of the actuator corresponding to CL1.

3. The vehicle vulnerability attack effect testing system based on semi-physical simulation according to claim 1 is characterized in that: The preset protocol mapping table QA = (QA1, QA2, ..., QA i ,…,QA n ), i=1, 2,...,n; among them, QA i is the row data of the vehicle function corresponding to the i-th target operation instruction, n is the number of target operation instructions; QA i =(QA i，0 , QA i，1 , QA i，2 );QA i，0 is the vehicle model corresponding to the i-th vehicle function, QA i，1 is the target operation instruction corresponding to the i-th vehicle function, QA i，2 is the designated instruction corresponding to the i-th vehicle function; ML1' is determined by the following steps: S311, traverse QA, if QA i，0 =GH1 and QA i，1 =ML1, then QA i，2 Determined as ML1'; where GH1 is the vehicle model corresponding to CL1.

4. The vehicle vulnerability attack effect testing system based on semi-physical simulation according to claim 1 is characterized in that: The default connection mapping table QB = (QB1, QB2, ..., QB j , …, QB m ), j = 1, 2, ..., m; where QB j is the row data corresponding to the jth vehicle function, m is the number of vehicle functions; QB j =(QB j，0 , Q.B. j，1 , Q.B. j，2 );QB j，0 is the jth vehicle function, QB j，1 is the actuator corresponding to the jth vehicle function, QB j，2 is the control signal corresponding to the jth vehicle function; JG1 and KZ1 are determined by the following steps: S341, traverse QB, if QB j，0 =GN1, then QB j，1 Determine as JG1, and QB j，2 Determined to be KZ1.

5. The vehicle vulnerability attack effect testing system based on semi-physical simulation according to claim 4 is characterized in that: The actuator includes a relay.

6. The vehicle vulnerability attack effect testing system based on semi-physical simulation according to claim 1 is characterized in that: The data processing system also includes a vehicle-mounted T-BOX; wherein the vehicle-mounted T-BOX is connected to any ECU via a central network management communication.

7. The vehicle vulnerability attack effect testing system based on semi-physical simulation according to claim 1 is characterized in that: The vehicle vulnerability attack effect testing system based on semi-physical simulation also includes a plurality of wireless communication devices, each of which is connected to the ECU in the data processing system through a corresponding wireless connection method.

8. A testing method for the vehicle vulnerability attack effect testing system based on semi-physical simulation as claimed in claim 1, characterized in that: The method comprises the following steps: S100, obtaining an initial operation instruction CL1 issued by a power input device or a behavior operation I / O device when a user simulates normal driving of a vehicle; wherein CL1 corresponds to any function of the vehicle; S200, parsing CL1 to generate a target operation instruction ML1 corresponding to CL1; S300, sending ML1 to the attack effect display terminal to display the attack effect of the preset vehicle vulnerability on the vehicle when the user operates the vehicle function corresponding to CL1.

Images