Information security TARA report automatic generation system based on SQL database

Abstract

The present invention relates to an automatic generation system of information security TARA reports based on SQL database, comprising: a framework definition unit, used to define a TARA report framework; a requirement acquisition unit, used to acquire the TARA analysis requirements input by a user; a data query unit, used to query an SQL database according to the TARA analysis requirements and obtain query results; a data analysis unit, used to analyze the query results to obtain an attack tree dendrogram; a processing unit, used to generate a TARA report file according to the defined TARA report framework, and also used to acquire corresponding data from the query results to write into the corresponding part of the generated TARA report file, and also used to write the attack tree dendrogram into the corresponding part of the generated TARA report file, thereby completing the automatic generation of a TARA report. The present invention greatly improves the efficiency of report generation while ensuring the visualization of the report and facilitating the understanding of the report content.

Description

Technical Field

[0001] The present invention relates to the field of automotive electronic technology, and in particular to an automatic generation system of information security TARA reports based on SQL database. Background Art

[0002] ISO 21434, the Engineering Standard for Cybersecurity of Road Vehicles, was developed and reviewed by the International Organization for Standardization (ISO) and the Society of Automotive Engineers (SAE) working group to provide vehicle development standards that comply with safety regulations for the "Cybersecurity Management System CSMS" certification proposed by the United Nations Economic Commission for Europe. This standard covers the entire life cycle of a vehicle, including development, manufacturing, operation, maintenance, and recycling.

[0003] The concept phase in ISO 21434 provides a threat analysis and risk treatment (TARA) method. The TARA analysis process quantifies information security threats and the damage caused by threats, and then determines the corresponding risk treatment countermeasures. Based on the treatment countermeasures, the network security goals are determined, and finally the network security requirements are derived. The subsequent development process is carried out according to this requirement. The complete TARA process includes: asset analysis, threat scenario identification, impact rating, attack path analysis, attack feasibility rating, risk value determination, and risk treatment decision. In the TARA analysis process, the correspondence between threat scenarios and damage scenarios is relatively complex. Multiple threat scenarios may lead to one damage scenario, and one threat scenario may lead to multiple damage scenarios. For each dangerous scenario, attack path analysis and attack feasibility rating are required. Different threat scenarios may have some of the same attack paths.

[0004] The existing TARA analysis reports are manually written, which requires a lot of time to sort out the relationships between various analysis items such as threat scenarios, damage scenarios, attack nodes, etc. In addition, there may be a large number of repeated analysis items in different TARA reports, which makes the existing TARA analysis reports take a long time to produce and there is a certain amount of duplication of work. Summary of the invention

[0005] The purpose of the present invention is to overcome the defects of the prior art and provide an information security TARA report automatic generation system based on SQL database to solve the problems of the existing TARA analysis report being manually written and having a long production time and a certain amount of repetitive labor.

[0006] The technical solution to achieve the above purpose is:

[0007] The present invention provides an information security TARA report automatic generation system based on an SQL database, wherein the SQL database includes analysis boundary items, asset items, threat scenario items, attack tree items, attack node items, damage scenario items, security target items, and security requirement items; the automatic generation system includes:

[0008] Framework definition unit, used to define the TARA report framework;

[0009] The requirement acquisition unit is used to obtain the TARA analysis requirements input by the user;

[0010] A data query unit, connected to the demand acquisition unit and the SQL database, and configured to query the SQL database according to the TARA analysis demand acquired by the demand acquisition unit and obtain a query result;

[0011] A data analysis unit, connected to the data query unit, for analyzing the query results obtained by the data query unit to obtain an attack tree dendrogram;

[0012] A processing unit is connected to the framework definition unit, the demand acquisition unit, the data query unit and the data analysis unit, and is used to generate a TARA report file according to the TARA report framework defined by the framework definition unit, and is also used to obtain corresponding data from the query results obtained by the data query unit to write into the corresponding part of the generated TARA report file, and is also used to write the attack tree dendrogram obtained by the data analysis unit into the corresponding part of the generated TARA report file, thereby completing the automatic generation of the TARA report.

[0013] A further improvement of the information security TARA report automatic generation system based on SQL database of the present invention is that the TARA report framework defined by the framework definition unit includes an introduction part, a background part, an asset identification part, a damage scenario part, a threat scenario part, a risk determination part, a network security goal part and a network security requirement part.

[0014] A further improvement of the SQL database-based information security TARA report automatic generation system of the present invention is that the analysis boundary table item of the SQL database includes a description field of the TARA analysis boundary and an asset field associated with the corresponding analysis boundary;

[0015] The asset table includes the assets involved in the TARA analysis, the cybersecurity attribute fields of the assets, and the fields describing the matching relationship between the cybersecurity attributes and the threat scenarios;

[0016] The threat scenario table entry includes a description field of the threat scenario and the attack tree ID number that causes the corresponding threat scenario;

[0017] The attack tree table includes several attack nodes and the relationship between the attack nodes;

[0018] The attack node table entry includes the attack time required for the attack corresponding to the attack node, the degree of expertise required for the attack, the complexity of knowledge required for the attack, the attack opportunity window, and the equipment required for the attack;

[0019] The damage scenario table entry includes a description field of the damage scenario and a type field corresponding to the damage scenario;

[0020] The security target table entry includes a description field of the security target and a reason field for setting the corresponding security target;

[0021] The security requirement table entry includes a description field of the security requirement and a security target ID field associated with the corresponding security requirement.

[0022] A further improvement of the SQL database-based information security TARA report automatic generation system of the present invention is that the attack node table item also includes an attack node level table item to classify the attack nodes according to the attack level.

[0023] A further improvement of the SQL database-based information security TARA report automatic generation system of the present invention is that the data query unit uses Python tools to query the SQL database, and the data query unit also uses Python tools to filter and select the query results.

[0024] A further improvement of the SQL database-based information security TARA report automatic generation system of the present invention is that the data analysis unit extracts attack nodes related to the threat scenario from the query results, analyzes the relevant relationships, and automatically generates an attack tree diagram.

[0025] A further improvement of the information security TARA report automatic generation system based on SQL database of the present invention is that the processing unit is also used to generate a corresponding configuration file according to the leaf nodes in the attack tree dendrogram generated by the data analysis unit, and output the generated configuration file to allow the user to fill in the corresponding evaluation value.

[0026] A further improvement of the SQL database-based information security TARA report automatic generation system of the present invention is that the profile includes the impact level of the damage scenario on security, economy, operation and privacy, as well as the evaluation values ​​of the time required for the attack, the degree of expertise, the complexity of knowledge, the window of opportunity and the equipment.

[0027] A further improvement of the SQL database-based information security TARA report automatic generation system of the present invention is that it also includes a data calculation unit connected to the data analysis unit and the processing unit;

[0028] The data calculation unit is used to cumulatively calculate the impact level of the damage scenario on safety, economy, operation and privacy to obtain the total damage degree of the damage scenario;

[0029] The data calculation unit also performs cumulative calculation on the attack potential of the attack node, the time required for the attack, the degree of expertise, the complexity of knowledge, the window of opportunity and the evaluation value of the equipment to obtain the cumulative evaluation value of the attack node.

[0030] A further improvement of the SQL database-based information security TARA report automatic generation system of the present invention is that the data calculation unit is also used to calculate the evaluation value of each attack node in the attack tree dendrogram;

[0031] The data calculation unit calculates the evaluation values ​​of nodes at each level upward in sequence according to the evaluation values ​​of the leaf nodes. For nodes with an OR connection relationship, the parent node inherits the evaluation value of each child node; for nodes with an AND connection relationship, the evaluation value of the parent node is the maximum value of the evaluation values ​​of its child nodes.

[0032] The beneficial effects of the information security TARA report automatic generation system based on SQL database of the present invention are:

[0033] The automatic generation system of the present invention is based on a complete SQL database, which lists all the projects involved in the TARA analysis report and the complex relationships between the projects. Then, for a certain aspect of TARA analysis, the SQL database is queried and the query results are analyzed to automatically generate a TARA analysis report, which can greatly improve the efficiency of TARA analysis report generation.

[0034] The TARA analysis method in the automatic generation system of the present invention fully meets the process specified in ISO21434, making it easy to complete relevant regulatory certification.

[0035] The SQL data of the automatic generation system of the present invention is a complete database of the automotive motor E / E level and the component level, which is convenient for data maintenance and reuse.

[0036] The automatic generation system of the present invention can perform fast and accurate data query based on the SQL database, and present all relevant data after determining the analysis boundary, which is convenient for subsequent data processing and display.

[0037] The automatic report generation system of the present invention is based on LaTeX's automatic report generation. It directly extracts database and user input data, performs automatic data processing and calculation based on ISO21434 specifications, and presents the data and automatic analysis conclusions in the report in the form of tables or graphics, which greatly improves the report generation efficiency while ensuring the visualization of the report and facilitating the understanding of the report content. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] Figure 1 This is a SQL database structure diagram in the SQL database-based information security TARA report automatic generation system of the present invention.

[0039] Figure 2 This is an example diagram of generating an attack tree in the automatic generation system of the information security TARA report based on the SQL database of the present invention.

[0040] Figure 3 This is a schematic diagram of the attack level division of attack nodes in the automatic generation system of the information security TARA report based on the SQL database of the present invention.

[0041] Figure 4 This is an example diagram of the calculation of the evaluation value of the attack node of the attack tree in the automatic generation system of the information security TARA report based on the SQL database of the present invention. DETAILED DESCRIPTION

[0042] The present invention will be further described below in conjunction with the accompanying drawings and specific embodiments.

[0043] See also Figure 1 The present invention provides an automatic generation system of information security TARA reports based on SQL database. First, a general TARA analysis structured query voice (SQL) database is established, and all assets, threat scenarios, attack nodes, damage scenarios, security goals, security requirements and other table items are listed in the database to show the complex relationship between these items. Then, for a certain aspect of TARA analysis, all related items are listed based on the structured query capability of the SQL database. Finally, LaTeX is used to automatically generate a TARA analysis report from the query results, which can greatly improve the efficiency of report generation. LaTex has a wealth of graphic module plug-ins, which can use the query results of the database for visual display, making it easier for users to understand the analysis report. The following is an explanation of the information security TARA report automatic generation system based on SQL database of the present invention in conjunction with the accompanying drawings.

[0044] TARA analysis mainly includes two levels: the vehicle electronic and electrical architecture level and the component level. The vehicle electronic and electrical architecture level analyzes threats to assets such as user data, ECU firmware, bus communication data, system configuration, and encryption materials, and specifies corresponding security goals for the above assets that pose a greater threat and cause greater damage after destruction. The component level mainly analyzes assets such as specific communication interfaces, code segments and data segments in the MCU, and determines the interfaces or memories that require information security protection.

[0045] The automotive electronic and electrical architecture includes a large number of controllers, and different controllers have different information security requirements. Therefore, the component level needs to perform TARA analysis for each ECU. During the TARA analysis, it is necessary to identify security assets and determine threat scenarios based on the damage to the information security attributes (integrity, authenticity, and availability) of the assets. Multiple threat scenarios may lead to one damage scenario, and one threat scenario may lead to multiple damage scenarios. The correspondence between threat scenarios and damage scenarios is relatively complex. For each threat scenario, attack path analysis and attack feasibility rating are required. Different threat scenarios may have some of the same attack paths. The derivation of security goals is determined based on the threat scenario and damage scenario ratings.

[0046] The present invention provides an automatic generation system of information security TARA reports based on SQL database, wherein the SQL database includes analysis boundary table items, asset table items, threat scenario table items, attack tree table items, attack node table items, damage scenario table items, security target table items and security requirement table items; the automatic generation system includes a framework definition unit, a requirement acquisition unit, a data query unit, a data analysis unit and a processing unit, wherein the framework definition unit is used to define a TARA report framework; the requirement acquisition unit is used to acquire the TARA analysis requirements input by the user; the data query unit is connected with the requirement acquisition unit and the SQL database, and the data query unit is used to query the SQL database according to the TARA analysis requirements acquired by the requirement acquisition unit and The query result is obtained; the data analysis unit is connected to the data query unit, and the data analysis unit is used to analyze the query result obtained by the data query unit to obtain an attack tree dendrogram; the processing unit is connected to the framework definition unit, the requirement acquisition unit, the data query unit and the data analysis unit, and the processing unit is used to generate a TARA report file according to the TARA report framework defined by the framework definition unit, and the processing unit is also used to obtain corresponding data from the query result queried by the data query unit to write it into the corresponding part of the generated TARA report file, and the processing unit is also used to write the attack tree dendrogram obtained by the data analysis unit into the corresponding part of the generated TARA report file, thereby completing the automatic generation of the TARA report.

[0047] In a specific embodiment of the present invention, Figure 1 As shown, the SQL database of the present invention is a complete database of the automotive electronic and electrical architecture level and the component level. The SQL data of the present invention integrates all the table items in the TARA analysis and the relationships between the table items. By establishing a complete database system, it is convenient to query the database based on some keywords.

[0048] The analysis boundary table items of the SQL data of the present invention include description fields of the TARA analysis boundaries and asset fields associated with the corresponding analysis boundaries; the TARA analysis boundaries correspond to the TARA analysis requirements, that is, the TARA analysis boundaries involved in the analysis report can be determined according to the TARA analysis requirements, and then the corresponding assets that need to be analyzed can be obtained by querying the analysis boundary table items in the SQL database.

[0049] The asset table items include the assets involved in the TARA analysis, the cybersecurity attribute fields of the assets, and the fields describing the matching relationship between the cybersecurity attributes and the threat scenarios. The cybersecurity attribute fields of the assets include confidentiality, integrity, authenticity, and availability. Since the threat scenarios may damage the cybersecurity attributes, the asset table items contain fields describing the matching relationship between the cybersecurity attributes and the threat scenarios.

[0050] The threat scenario table entry includes a description field of the threat scenario and an attack tree ID number that causes the corresponding threat scenario; there are several threat scenarios, each with a corresponding description field.

[0051] The attack tree table includes several attack nodes and the relationship between each attack node; Figure 2 As shown, the attack tree is composed of a series of attack nodes. Multiple fields are required in the attack tree table to represent the attack nodes and the relationship between nodes, such as the parent node and child nodes of the attack node, and the relationship between child nodes under the same parent node.

[0052] The attack node table includes the time required for the attack, the degree of expertise required for the attack, the complexity of the knowledge required for the attack, the attack opportunity window, and the equipment required for the attack corresponding to the attack node; the attack node needs to determine the attack potential based on the time required for the attack, the degree of expertise required for the attack, the complexity of the knowledge required for the attack, the attack opportunity window, and the equipment required for the attack, and then determine the possibility of the attack.

[0053] The damage scenario table entry includes a description field of the damage scenario and a type field corresponding to the damage scenario; the type field corresponding to the damage scenario includes the degree of damage to life safety, the degree of damage to function, the degree of damage to operation, and the degree of damage to privacy. The damage rating is determined based on the degree of damage in the above four aspects. The damage rating field is also included in the damage scenario table entry.

[0054] The security target table entry includes a description field for the security target and a reason field for setting the corresponding security target; the security requirement table entry includes a description field for the security requirement and a security target ID field associated with the corresponding security requirement, and the security requirement is derived through the security target.

[0055] Furthermore, combined with Figure 3 As shown, the attack node table entry also includes an attack node level table entry to classify the attack nodes according to the attack level.

[0056] There is a defense-in-depth mechanism in information security, so attacks on the system are often carried out layer by layer, which will cause overlaps in the attack trees of different threat scenarios. For example, attacks on user data or encrypted materials require breaking through the communication interface first, and then controlling the kernel to complete the operation. Here, there will be overlaps in the attack paths that destroy the information security attributes of user data and encrypted materials. In view of the above characteristics, attack nodes need to be classified according to the attack level. This level reflects the depth of the attack on the system, so the attack node level table item is added to the attack node table item.

[0057] Furthermore, the relationship between threat scenarios and damage scenarios is relatively complex. One threat scenario may correspond to multiple damage scenarios, and multiple threat scenarios may correspond to one damage scenario. In the SQL database, the relationship between threat scenarios and damage scenarios can be described using table item relationships. The relationship between security goals and threat scenarios and damage scenarios is also described using table item relationships.

[0058] In a specific implementation of the present invention, the data query unit uses Python tools to query the SQL database, and the data query unit also uses Python tools to filter and select the query results.

[0059] Using Python tools can facilitate the processing and storage of query results. Python can query through specific keywords (such as analyzing an item in the boundary table), set code rules based on user needs, filter query results, and store the filtered results in the specified file in a feature format.

[0060] Furthermore, the automatic generation system of the present invention also includes a storage unit, which is used to store the results of the query of the data query unit, that is, filtered by the Python tool, and the filtered results are stored in a specified file in the storage unit in a characteristic format.

[0061] In a specific embodiment of the present invention, the automatic report generation system of the present invention is developed and implemented based on LaTeX, and the system is an automated TARA report automatic generation system based on LaTeX.

[0062] Furthermore, the TARA report framework defined by the framework definition unit includes an introduction section, a background section, an asset identification section, a damage scenario section, a threat scenario section, a risk determination section, a cybersecurity goals section, and a cybersecurity requirements section.

[0063] The automatic report generation system needs to predefine the report framework. According to the steps of TARA analysis, the report is divided into several parts: introduction, background, asset identification, damage scenarios, threat scenarios, risk determination, network security goals and network security requirements. The introduction and background parts are manually filled in after analysis, and the other parts are manually completed in each chapter framework. The analysis process is calculated and filled according to the SQL and configuration file content.

[0064] Furthermore, the data analysis unit extracts attack nodes related to the threat scenario from the query results, analyzes the relevant relationships, and automatically generates an attack tree diagram. Figure 2 , shows an example of an attack tree.

[0065] Furthermore, the processing unit is also used to generate a corresponding configuration file according to the leaf nodes in the attack tree dendrogram generated by the data analysis unit, and output the generated configuration file to allow the user to fill in the corresponding evaluation value.

[0066] The configuration file generated by the processing unit includes the name or description of the attack node, the attributes corresponding to the attack node, that is, the time required for attack, the degree of expertise required for attack, the complexity of knowledge required for attack, the window of opportunity for attack, and the equipment required for attack corresponding to the attack node queried from the attack node table of the SQL database, wherein the time required for attack, the degree of expertise required for attack, the complexity of knowledge required for attack, the window of opportunity for attack, and the equipment required for attack corresponding to the attack node correspond to an evaluation value filling section for allowing the user to manually complete the filling of the evaluation value. The specific quantitative standards for the time required for attack, the degree of expertise required for attack, the complexity of knowledge required for attack, the window of opportunity for attack, and the equipment required for attack corresponding to the above-mentioned attack node can refer to ISO 21434 "Road Vehicle Cybersecurity Engineering Standard".

[0067] TARA analysis includes some input data determined based on experience, such as the damage scenario impact analysis, which determines the impact of the current damage scenario on security, economy, operation, privacy, etc., and the attack node analysis, which evaluates the time required for the attack, the degree of expertise, the complexity of knowledge, the window of opportunity, and the equipment. These data are determined by the user and filled in according to the preset configuration file format as input data for the generation of TARA automated reports.

[0068] The profile completed by the user includes the impact level of the damage scenario on security, economy, operation and privacy, as well as the evaluation value of the time required for the attack, expertise, knowledge complexity, opportunity window and equipment (also known as AP factor).

[0069] The automatic report generation system of the present invention can be provided with an import port, which is used to facilitate the user to import the completed configuration file into the system through the import port. Alternatively, the configuration file can be stored in a designated location of the storage unit after being filled in, and a feedback signal is input to the processing unit, so that the processing unit can read the corresponding configuration file at the designated location.

[0070] The automatic report generation system of the present invention also includes a data calculation unit connected to the data analysis unit and the processing unit; the data calculation unit is used to accumulate the impact levels of the damage scenarios on security, economy, operation and privacy to obtain the total damage level of the damage scenarios; the data calculation unit also accumulates the attack potential of the attack nodes, the time required for the attack, the degree of expertise, the complexity of knowledge, the window of opportunity and the evaluation values ​​of the equipment to obtain the accumulated evaluation value of the attack nodes.

[0071] The data calculation unit realizes the function of automatic calculation, calculates the total damage degree of the damage scenario, and accumulates the evaluation value of the attack nodes to determine the attack potential and risk value, and then determine the feasibility of the attack.

[0072] Specifically, the processing unit can determine the attack potential by looking up the table based on the cumulative evaluation value of the attack node (that is, the cumulative value of the AP factor), that is, the system is preset with a corresponding relationship table between the cumulative evaluation value of the attack node and the attack potential. The processing unit further determines the attack possibility by looking up the table of the attack potential level, and the processing unit determines the risk value by looking up the table together with the attack potential of the threat and the damage scenario rating. The automation of the determination of attack potential, attack feasibility and risk value is realized. The risk value is determined based on the quantified threat scenario attack feasibility and damage rating, and the risk value is the main factor in risk decision-making and security goal determination.

[0073] Furthermore, the data calculation unit is also used to calculate the evaluation value of each attack node in the attack tree dendrogram;

[0074] The data calculation unit calculates the evaluation values ​​of nodes at all levels upward in turn according to the evaluation values ​​of the leaf nodes. For nodes with an OR connection relationship, the parent node inherits the evaluation value of each child node; for nodes with an AND connection relationship, the evaluation value of the parent node is the maximum value of the evaluation values ​​of its child nodes.

[0075] Attack tree analysis is the focus of TARA analysis. In order to facilitate the viewing of attack tree links, LaTeX is used to extract attack node information related to the threat scenario. After analyzing the relevant relationship, the attack tree diagram is automatically generated. The color of each node in the tree diagram is determined according to the attack potential value.

[0076] like Figure 4 As shown in the figure, the evaluation values ​​(AP factors) of the leaf nodes are completed by the user. The nodes above the leaf nodes until the root node need to be calculated by the data calculation unit to pass the rating, and finally determine the attack potential of the entire attack tree. Any child node under the corresponding OR connection is a valid attack path. The parent node inherits the AP factor of each child node. The child nodes under the AND connection jointly cause the attack of the parent node, so the calculation of the AP factor of the parent node is obtained by taking the maximum value of each item in the AP factor of its child nodes. Figure 4 The relationship between the two child nodes of node A is OR, so the AP factors of nodes B and C are integrated. The relationship between the two child nodes of root node E is AND, so the two AP factors integrated in node A are taken as the maximum value of the AP factor in node D to obtain two AP factors. After calculating the total, it is found that the attack path through node B is easier, that is, the attack feasibility is relatively large.

[0077] Furthermore, the processing unit is also used to automatically draw and graphically display according to the configuration file data and the automatic calculation results.

[0078] In order to make the TARA analysis report more intuitive, some data and ratings are displayed in charts. The chart template is completed with the help of LaTeX programming capabilities, and then automatically draws according to the above configuration file data and automated calculation results. Different results or severity levels in the chart are represented by different colors to ensure the intuitiveness of the analysis results.

[0079] Based on the TARA analysis process specified in the ISO21434 specification, this paper establishes a complete SQL database system that can realize the storage of TARA analysis data at the vehicle E / E level and component level. By inputting the analysis boundary, the database system can quickly and accurately display the relevant analysis results for subsequent display or further processing. The standardized process facilitates the management and maintenance of data, and the advantage of the database in representing complex relationships facilitates data reuse and rapid data extraction.

[0080] The present invention establishes a TARA report automatic generation system through LaTaX language based on TARA analysis data extracted from SQL database and user input data. The system can complete automatic calculation of input data and quickly display the results in the report in the form of tables or graphics, thereby realizing efficient TARA report generation.

[0081] The following is an explanation of the process of the SQL database-based information security TARA report automatic generation system of the present invention.

[0082] When in use, the user inputs the TARA analysis requirements into the system. Based on the TARA analysis requirements, the system can determine the TARA analysis boundaries, and then determine the asset fields that require TARA analysis from the SQL database. Based on the determined assets, the threat scenarios that damage the information security attributes of the assets can be determined from the asset table items, and then the attack tree ID number can be determined. The various attack nodes of the attack tree can be queried, and then the attack tree can be generated. The attack potential, attack feasibility and risk value of each attack path of the attack tree are analyzed and calculated. The analysis and calculation are implemented through the data calculation unit and the processing unit, where the evaluation value of the leaf node is input by the user through the configuration file.

[0083] The processing unit writes the corresponding content into the corresponding part of the TARA report according to the query results and analysis and calculation results of the above-mentioned SQL database, and outputs the TARA report, thereby completing the automatic generation of the TARA report.

[0084] The present invention first designs a general TARA analysis structured query language (SQL) database, lists all assets, threat scenarios, attack nodes, damage scenarios, security goals, security requirements and other table items in the database, and expresses the complex relationship between these items. Then, for a certain aspect of TARA analysis, all related items are listed based on the structured query capability of SQL. Finally, LaTeX is used to automatically generate a TARA analysis report from the query results. The data in the report is partly from the SQL database query results, and partly from the data manually entered by the user after empirical judgment. Using the programming ability of LaTeX, programs such as automatic calculation, automatic query, automatic attack tree generation, and automatic calculation of attack node factors are designed to greatly improve the efficiency of report generation. LaTex has a rich graphics module plug-in, which can use the query results of the database for visual display, making it convenient for users to understand the analysis report.

[0085] The present invention is described in detail above in conjunction with the embodiments of the accompanying drawings. A person skilled in the art can make various variations of the present invention according to the above description. Therefore, certain details in the embodiments should not constitute a limitation of the present invention, and the scope of protection of the present invention shall be defined by the scope of the attached claims.

Claims

1. An automatic generation system of information security TARA reports based on SQL database, characterized in that: The SQL database includes analysis boundary items, asset items, threat scenario items, attack tree items, attack node items, damage scenario items, security target items, and security requirement items; the automatic generation system includes: Framework definition unit, used to define the TARA report framework; The requirement acquisition unit is used to obtain the TARA analysis requirements input by the user; A data query unit, connected to the demand acquisition unit and the SQL database, and configured to query the SQL database according to the TARA analysis demand acquired by the demand acquisition unit and obtain a query result; A data analysis unit, connected to the data query unit, for analyzing the query results obtained by the data query unit to obtain an attack tree dendrogram; A processing unit is connected to the framework definition unit, the demand acquisition unit, the data query unit and the data analysis unit, and is used to generate a TARA report file according to the TARA report framework defined by the framework definition unit, and is also used to obtain corresponding data from the query results obtained by the data query unit to write into the corresponding part of the generated TARA report file, and is also used to write the attack tree dendrogram obtained by the data analysis unit into the corresponding part of the generated TARA report file, thereby completing the automatic generation of the TARA report.

2. The automatic generation system of information security TARA report based on SQL database as claimed in claim 1, characterized in that: The TARA report framework defined by the framework definition unit includes an introduction part, a background part, an asset identification part, a damage scenario part, a threat scenario part, a risk determination part, a network security goal part, and a network security requirements part.

3. The automatic generation system of information security TARA report based on SQL database as claimed in claim 1, characterized in that: The analysis boundary table entry of the SQL database includes a description field of the TARA analysis boundary and an asset field associated with the corresponding analysis boundary; The asset table includes the assets involved in the TARA analysis, the cybersecurity attribute fields of the assets, and the fields describing the matching relationship between the cybersecurity attributes and the threat scenarios; The threat scenario table entry includes a description field of the threat scenario and the attack tree ID number that causes the corresponding threat scenario; The attack tree table includes several attack nodes and the relationship between the attack nodes; The attack node table entry includes the attack time required for the attack corresponding to the attack node, the degree of expertise required for the attack, the complexity of knowledge required for the attack, the attack opportunity window, and the equipment required for the attack; The damage scenario table entry includes a description field of the damage scenario and a type field corresponding to the damage scenario; The security target table entry includes a description field of the security target and a reason field for setting the corresponding security target; The security requirement table entry includes a description field of the security requirement and a security target ID field associated with the corresponding security requirement.

4. The automatic generation system of information security TARA report based on SQL database as claimed in claim 3, characterized in that: The attack node table entry also includes an attack node level table entry to classify the attack nodes according to the attack level.

5. The automatic generation system of information security TARA report based on SQL database as claimed in claim 1, characterized in that: The data query unit uses Python tools to query the SQL database, and the data query unit also uses Python tools to filter and select the query results.

6. The automatic generation system of information security TARA report based on SQL database as claimed in claim 1, characterized in that: The data analysis unit extracts attack nodes related to the threat scenario from the query results, analyzes the relevant relationships and automatically generates an attack tree diagram.

7. The automatic generation system of information security TARA report based on SQL database as claimed in claim 6, characterized in that: The processing unit is also used to generate a corresponding configuration file according to the leaf nodes in the attack tree dendrogram generated by the data analysis unit, and output the generated configuration file to allow the user to fill in the corresponding evaluation value.

8. The automatic generation system of information security TARA report based on SQL database as claimed in claim 7, characterized in that: The profile includes the impact level of the compromise scenario on security, economics, operations and privacy, as well as assessments of the time required for the attack, level of expertise, knowledge complexity, window of opportunity and equipment.

9. The automatic generation system of information security TARA report based on SQL database as claimed in claim 8, characterized in that: Also includes a data calculation unit connected to the data analysis unit and the processing unit; The data calculation unit is used to cumulatively calculate the impact level of the damage scenario on safety, economy, operation and privacy to obtain the total damage degree of the damage scenario; The data calculation unit also performs cumulative calculation on the attack potential of the attack node, the time required for the attack, the degree of expertise, the complexity of knowledge, the window of opportunity and the evaluation value of the equipment to obtain the cumulative evaluation value of the attack node.

10. The automatic generation system of information security TARA report based on SQL database as claimed in claim 9, characterized in that: The data calculation unit is also used to calculate the evaluation value of each attack node in the attack tree dendrogram; The data calculation unit calculates the evaluation values ​​of nodes at each level upward in sequence according to the evaluation values ​​of the leaf nodes. For nodes with an OR connection relationship, the parent node inherits the evaluation value of each child node; for nodes with an AND connection relationship, the evaluation value of the parent node is the maximum value of the evaluation values ​​of its child nodes.

Images