Security asset management method and device of Internet of Vehicles system and related equipment
By decoupling the security assets of the Internet of Vehicles and building a tree-like topology of the whole vehicle, the problem of difficult to display the relationship and importance of security asset management in the Internet of Vehicles system is solved, and efficient vulnerability discovery and repair priority is achieved Level judgment.
Patent Information
- Application Number
- CN202310815574.3
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2023-07-04
- Publication Date
- 2025-01-07
AI Technical Summary
The existing Internet of Vehicles systems lack effective safe asset management methods, making it difficult to clearly demonstrate the relationship and importance of safe assets, resulting in difficulty in judging the priority of vulnerability repair.
By decoupling the safety assets of the vehicle model, a tree-like asset topology of the vehicle is constructed, based on the physical connection relationship and functional business logic relationship, the security risks are mapped to the topology for risk assessment, and the repair strategy is determined based on the evaluation results.
It realizes efficient management of vehicle safety assets, clearly demonstrates the relationship and importance, facilitates timely discover system vulnerabilities and formulates priority repair strategies, and improves the efficiency of safety asset management.
Smart Images
Figure CN119276518A_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the technical field of intelligent vehicle networking, and in particular to a security asset management method, device and related equipment of a vehicle networking system. Background Art
[0002] With the development of connected and intelligent vehicles, automotive network security has received more and more attention. According to statistics, the amount of code in modern cars has far exceeded that of PC and smartphone systems, and the amount of code in high-end cars has reached 100 million lines. Moreover, with the further deepening of the concept of software-defined cars in recent years, the amount of code in cars will continue to grow rapidly. The increase in the amount of car code has brought about an increase in software complexity, but also an increase in the risk of automotive software vulnerabilities. Security vulnerabilities are closely related to security assets. Therefore, managing the security assets of the Internet of Vehicles system is the first step in vulnerability management.
[0003] Currently, there is no mature and effective security asset management method for Internet of Vehicles security assets. Generally, they are identified through TARA activities in the early stage of vehicle model development and implemented in an offline form. This security asset management method is relatively discrete and cannot achieve efficient and effective management of vehicle security assets. The correlation between security assets cannot be well presented. The importance of security assets cannot be well reflected and identified. When new vulnerabilities are discovered, it is also difficult to judge the priority of vulnerability repair based on the correlation and importance of assets.
[0004] Therefore, how to provide an efficient vehicle safety asset management method to clearly display the correlation and importance between safety assets, so as to facilitate timely discovery of system vulnerabilities in vehicles based on safety assets managed by the Internet of Vehicles system, has become a technical problem that urgently needs to be solved in the industry. Summary of the invention
[0005] In view of this, embodiments of the present application provide a security asset management method, device and storage medium for an Internet of Vehicles system to at least partially solve the above-mentioned problems.
[0006] In a first aspect, an embodiment of the present application provides a security asset management method for a vehicle networking system, comprising:
[0007] Performing soft and hard decoupling of the safety assets of the at least one vehicle type to obtain a whole vehicle soft and hard decoupling result of the safety assets;
[0008] Based on the soft-hard decoupling result, constructing a vehicle model asset topology of the at least one vehicle model;
[0009] In the vehicle model asset topology, based on the physical connection relationship and functional business logic relationship between the security assets, the external entities associated with the at least one vehicle model through the vehicle networking system are associated to determine the vehicle tree asset topology of the at least one vehicle model;
[0010] When it is determined that any one or more software or hardware of the security assets has a security risk, the security risk is mapped to the tree-like asset topology of the entire vehicle to perform risk assessment;
[0011] Based on the results of the risk assessment, a repair strategy for repairing the security risk is determined.
[0012] Optionally, in an embodiment of the present application, when it is determined that any one or more software or hardware of the security assets has a security risk, mapping the security risk to the tree-like asset topology of the entire vehicle to perform risk assessment includes:
[0013] Extract other peripheral assets associated with any one or more software or hardware that poses security risks;
[0014] Based on the other extracted surrounding assets, one or more of asset exposure assessment, attack link assessment or asset importance assessment is performed to determine the result of the risk assessment.
[0015] Optionally, in an embodiment of the present application, determining a repair strategy for repairing the security risk according to a result of the risk assessment includes:
[0016] Based on the attack priority index and impact priority index of different security assets in the risk assessment, the threat index of different vulnerabilities in the corresponding security assets;
[0017] Based on the threat index, determine the corresponding vulnerability repair priority;
[0018] Based on the vulnerability repair priority, a repair strategy for repairing the security risk is determined.
[0019] Optionally, in an embodiment of the present application, the attack priority index is determined by the exposure degree of the different security assets and the attack link factor, wherein the exposure degree is used to characterize the difficulty of the different security assets being attacked when running in the Internet of Vehicles system, and the attack link factor is used to characterize the potential probability of the different security assets having actual attack links;
[0020] The impact priority index is determined by the importance of the different safety assets to the vehicle owner and the brand.
[0021] Optionally, in an embodiment of the present application, the threat index corresponding to different vulnerabilities in the security assets based on the attack priority index and impact priority index of different security assets in the risk assessment includes:
[0022] ThreatLevel(Priority Fact):Roundup(Mininum[(Attack Priority+ImpactPriority),10]);
[0023] Among them, ThreatLevel (Priority Fact) is the threat index, Attack Priority is the attack priority index, and Impact Priority is the impact priority index.
[0024] Optionally, in an embodiment of the present application, the step of associating the external entities associated with the at least one vehicle model through the vehicle networking system to determine the vehicle tree-like asset topology of the at least one vehicle model includes:
[0025] Decouple the software and hardware of external entities and determine the external security asset topology;
[0026] The vehicle type asset topology and the external safety asset topology are associated to determine a vehicle tree-like asset topology of at least one vehicle type.
[0027] Optionally, in an embodiment of the present application, the method further includes:
[0028] Generate a database storage form corresponding to the safety assets in the vehicle tree topology structure representing the at least one vehicle model;
[0029] Associating the database storage forms through one or more relationship tables to generate a database storage structure for supporting the construction of a vehicle tree topology structure of at least one vehicle model;
[0030] Data is stored in the data storage structure.
[0031] Optionally, in an embodiment of the present application, the method further includes:
[0032] Generate an asset list of safety assets corresponding to the at least one vehicle model and / or a front-end display interface corresponding to the tree-like asset topology of the entire vehicle for managing the safety assets.
[0033] In a second aspect, based on the security asset management method of the Internet of Vehicles system described in the first aspect of the present application, an embodiment of the present application further provides a security asset management device of the Internet of Vehicles system, including:
[0034] A decoupling module, used to perform soft and hard decoupling of the safety assets of the at least one vehicle type, and obtain a whole vehicle soft and hard decoupling result of the safety assets;
[0035] A construction module, used to construct a vehicle model asset topology of the at least one vehicle model based on the soft-hard decoupling result;
[0036] A determination module, configured to associate the external entities associated with the at least one vehicle model through the vehicle networking system in the vehicle model asset topology based on the physical connection relationship and the functional business logic relationship between the security assets, and determine the vehicle tree asset topology of the at least one vehicle model;
[0037] An assessment module, for mapping the security risk to the tree-like asset topology of the whole vehicle to perform risk assessment when it is determined that any one or more software or hardware of the security assets has a security risk;
[0038] The decision module is used to determine a repair strategy for repairing the security risk according to the result of the risk assessment.
[0039] For the third convenience, an embodiment of the present application further provides a computer storage medium having computer executable instructions stored thereon, and when the computer executable instructions are executed, any one of the security asset management methods for the Internet of Vehicles system provided in the first aspect of the present application is executed.
[0040] The present application provides a method, device and related equipment for managing security assets of an Internet of Vehicles system, which obtains the results of the whole vehicle's soft-hard decoupling of the security assets by performing software-hard decoupling on the security assets of at least one vehicle type; constructs the vehicle asset topology of at least one vehicle type based on the software-hard decoupling results; in the vehicle asset topology, external entities associated with the at least one vehicle type through the Internet of Vehicles system are associated based on the physical connection relationship and functional business logic relationship between the security assets, and the whole vehicle tree asset topology of the at least one vehicle type is determined; when it is determined that any one or more software or hardware of the security assets has a security risk, the security risk is mapped to the whole vehicle tree asset topology for risk assessment; based on the results of the risk assessment, a repair strategy for repairing the security risk is determined. Based on the Internet of Vehicles technology, the present application sorts out the physical relationship and logical functional relationship between the internal security assets and external security assets of the vehicle, constructs the whole vehicle tree asset topology, clearly displays the association relationship and importance between the security assets of the vehicle, and facilitates the timely discovery of system vulnerabilities in the vehicle based on the security assets managed by the Internet of Vehicles system. BRIEF DESCRIPTION OF THE DRAWINGS
[0041] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in the embodiments of the present application. For ordinary technicians in this field, other drawings can also be obtained based on these drawings.
[0042] Figure 1 A schematic diagram of a workflow of a security asset management method for a vehicle networking system provided in an embodiment of the present application;
[0043] Figure 2 A schematic diagram of a tree-like asset topology structure of a vehicle model provided in an embodiment of the present application;
[0044] Figure 3 A schematic diagram of the structure of a data storage form provided in an embodiment of the present application;
[0045] Figure 4 A schematic diagram of the structure of a security asset management device for a connected vehicle system provided in an embodiment of the present application. DETAILED DESCRIPTION
[0046] In order to enable those skilled in the art to better understand the technical solutions in the embodiments of the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. All other embodiments obtained by ordinary technicians in this field based on the embodiments in the embodiments of the present application should fall within the scope of protection of the embodiments of the present application.
[0047] It should be understood that the various steps described in the method implementation of the present application can be performed in different orders and / or performed in parallel. In addition, the method implementation may include additional steps and / or omit the steps shown. The scope of the present application is not limited in this respect.
[0048] Embodiment 1
[0049] The present application embodiment provides a method for managing security assets of a vehicle networking system, such as Figure 1 As shown, Figure 1 A structural diagram of a security asset management method for a vehicle networking system provided in an embodiment of the present application includes:
[0050] Step S101, perform soft and hard decoupling of the security assets of at least one vehicle model, and obtain the soft and hard decoupling results of the security assets of the whole vehicle. That is, in the implementation of this embodiment, from the perspective of the composition of the vehicle model, the network security assets of the vehicle are mainly composed of electronic control components. It is divided into a hardware system and a software system. The hardware includes various circuit boards and related electrical components, such as various chips. The software system includes the basic underlying operating system and upper-level application components. Therefore, in the embodiment of the present application, by performing soft and hard decoupling of the network security assets of the vehicle, based on the results of the soft and hard decoupling, all the security assets of the corresponding vehicle model or vehicle can be fully obtained. To ensure that the network security assets of the vehicle are effectively and completely managed through the security asset management method provided in the embodiment of the present application.
[0051] Step S102: Based on the software-hardware decoupling result, construct the vehicle asset topology of the at least one vehicle model. That is, by hierarchical classification, the software application components and different hardware components that have undergone software-hardware decoupling are sorted out to construct a vehicle asset topology that can clearly show the association relationship between various network security assets within the vehicle model.
[0052] Step S103: In the vehicle model asset topology, based on the physical connection relationship and functional business logic relationship between the security assets, the external entities associated with the at least one vehicle model through the vehicle networking system are associated to determine the vehicle tree asset topology of the at least one vehicle model. In the embodiment of the present application, the external entity is an entity other than the vehicle, and common ones include TSP background, mobile phone APP, etc., so as to obtain a complete topological structure that can clearly display all the vehicle networking security asset relationships of the corresponding vehicle, so as to facilitate corresponding management.
[0053] Optionally, in an implementation of the embodiment of the present application, the external entities associated with the at least one vehicle model through the Internet of Vehicles system are associated to determine the tree-like asset topology of the whole vehicle of the at least one vehicle model, including: performing soft and hard decoupling of the external entities, determining the external safety asset topology, and associating the vehicle model asset topology and the external safety asset topology to determine the tree-like asset topology of the whole vehicle of at least one vehicle model. In the embodiment of the present application, the consistency of the safety assets of the corresponding vehicle models is guaranteed by further performing soft and hard decoupling of the external entities. Among them, from the dimension of safety assets, the external entity generally needs to focus on its system and software. That is, in this embodiment, the external assets are sorted out from the perspective of the system, software and hardware of the external entity to achieve soft and hard decoupling. Furthermore, since the different functional services of the vehicle are completed by the cooperation of different hardware components and entities, there must be a functional logic level association relationship between the safety assets. Therefore, in the embodiment of the present application, the vehicle model asset topology and its external security asset topology are associated from the IoT connection relationship between the hardware and the logical business connection relationship on the software and system to generate a tree-like asset topology of the entire vehicle of the corresponding model, which can clearly display the association relationship between all the security assets of the corresponding model, and the implementation process is simple, efficient, and not prone to errors.
[0054] The above process is exemplarily described in the embodiments of the present application. Figure 2 As shown, Figure 2 A schematic diagram of the tree-like asset topology structure of a vehicle model provided in an embodiment of the present application. It includes a vehicle model asset topology 21 of the vehicle model, and an external asset topology 22 representing the external entities of the corresponding vehicle model. The vehicle model asset topology 21 includes at least part A and part B. Part A involves corresponding hardware and systems. The corresponding hardware involves the chips used, and the corresponding system is also equipped with configured software. Part B also involves corresponding hardware, systems, chips, and software. Similarly, the external entities of the vehicle model include at least entity 1 and entity 2. Different entities are respectively related to the hardware, systems, and software used by each. The physical connection relationship between vehicle safety assets and the business logic relationship of the Internet of Vehicles functions are triggered, such as Figure 2 The shown aspects include driving safety, OTA function, vehicle control function, wireless key, Bluetooth key and comfort function, etc. The security assets of the vehicle are associated with each other to build a tree-like asset topology that can represent the vehicle model. Its structure and logical relationship are clear and complete. Based on the tree-like asset topology, the management of security assets of the Internet of Vehicles can be greatly simplified, and the efficiency of security asset management can be improved.
[0055] Step S104: When it is determined that any one or more software or hardware in the security assets has a security risk, the security risk is mapped to the tree-like asset topology of the entire vehicle for risk assessment. In the embodiment of the present application, when a software module or chip is newly found to have a security vulnerability or risk, it is mapped to the tree-like asset topology of the entire vehicle, and its IoT connection relationship and functional business logic relationship can be quickly sensed, and traced back to the affected parts, entities or models. By quickly assessing the existing security risks, the results of the risk assessment are more comprehensive.
[0056] Optionally, in one embodiment of the present application, when it is determined that any one or more software or hardware of the security assets has a security risk, the security risk is mapped to the tree-like asset topology of the entire vehicle to perform a risk assessment, including: extracting other surrounding assets associated with any one or more software or hardware with security risks; based on the extracted other surrounding assets, performing one or more of asset exposure assessment, attack link assessment or asset importance assessment to determine the result of the risk assessment. In an embodiment of the present application, by extracting other associated surrounding assets, a more comprehensive risk assessment result can be further provided. By performing risk assessment through one or more of asset exposure assessment, attack link assessment or asset importance assessment, a standard, unified and reliable risk assessment method is provided for risk assessment, which simplifies the risk assessment process while ensuring the accuracy of risk assessment.
[0057] Optionally, in an embodiment of the present application, the method further includes generating a database storage form corresponding to the safety assets in the vehicle tree topology structure representing the at least one vehicle model; associating the database storage form through one or more relationship tables to generate a database storage structure for supporting the construction of the vehicle tree topology structure of at least one vehicle model; and storing data in the data storage structure. Specifically, in the database storage form, different forms are connected in a many-to-many manner through multiple relationship tables, and the forms are connected by the parts corresponding to the vehicle model and the safety assets. Figure 3 As shown, Figure 3A structural schematic diagram of a data storage form provided for an embodiment of the present application includes a form for illustrating a vehicle model and a car identification code (Car-ID), Plat-ID, etc., and also includes hardware, chips, systems, software and related components corresponding to the security assets contained in the vehicle's entire tree topology structure. The present application embodiment will not be repeated here. In this way, the database storage form for characterizing the vehicle's entire tree topology structure of the corresponding vehicle model can store the security asset data of the corresponding vehicle model in a clear and organized manner. Since different vehicle models can be equipped with the same hardware, chips, software, systems or components, different forms are connected to each other through multiple relationship tables to achieve many-to-many relationship connections, and can also save a certain degree of database storage space required for storing data for supporting multiple vehicle tree topology structures of different vehicle models that use some of the same security assets, thereby providing an efficient, reliable and low-cost data storage service for the security asset management method platform described in the embodiment of the present application.
[0058] Step S105: Determine a repair strategy for repairing the security risk based on the result of the risk assessment. For example, for security assets with higher risks in the risk assessment, the priority of repair is higher. Of course, this embodiment of the city is only an example of how to determine a repair strategy for repairing the security risk based on the result of the risk assessment, and does not mean that the application is limited to this.
[0059] Optionally, in an embodiment of the present application, the repair strategy for repairing the security risk is determined based on the result of the risk assessment, including: determining the threat index of different vulnerabilities in the corresponding security assets based on the attack priority index and impact priority index of different security assets in the risk assessment; determining the corresponding vulnerability repair priority based on the threat index; and determining the repair strategy for repairing the security risk based on the vulnerability repair priority. Through the method provided by the embodiment of the present application, the complex data of the risk assessment result is quantified according to a unified standard to provide a reliable basis for quickly determining the repair strategy.
[0060] Optionally, in an embodiment of the present application, the attack priority index is determined by the exposure degree of the different security assets and the attack link factor, wherein the exposure degree is used to characterize the difficulty of the different security assets being attacked when running in the Internet of Vehicles system, and the attack link factor is used to characterize the potential probability of the different security assets having actual attack links;
[0061] The embodiment of the present application here exemplarily describes the exposure level of the security asset. When determining the exposure level (exposureLevel) of any security asset, the exposure level of the security asset can be determined according to the exposure coefficient corresponding to the preset exposure description of different assets in the working scenario, as shown in the following table:
[0062] Exposure Factor Asset Exposure Description 0.85 Remote communication access 0.62 Near Field Communication Access 0.55 Local access 0.2 Physical access, including disassembly access
[0063] For example, if the vehicle's T-box functional module has a remote communication connection, its exposure coefficient is determined to be 0.85. If a functional module has a reachable Bluetooth or WIFI interface, the exposure coefficient of the relevant asset is determined to be 0.62. For example, the vehicle's Gateway (vehicle communication gateway) module has only an OBD interface as its external interface, and the exposure coefficient is 0.55. If there is only a hidden USB interface and the security asset needs to be dismantled to connect to the vehicle, the corresponding self-deprecating exposure description is physical access, and the exposure coefficient is 0.2.
[0064] The attack chain factor (AttackChainFact) is determined by the preset attack chain coefficient corresponding to different attack chain factor descriptions, as shown in the following table:
[0065] Attack link coefficient Attack link factor description 0.6 There is a visible attack link 0.2 There is a potential attack link 0.1 No obvious attack link
[0066] The attack priority is determined by the exposure coefficient and the attack link factor. The higher the exposure, the more obvious the attack link, and the higher the priority.
[0067] Specifically, in an optional implementation of the present application, the attack priority is defined as:
[0068] Attack Priority=7.5*(1–[(1-exposureLevel)(1-AttackChainFact)])
[0069] The impact priority index is determined by the significance of the different security assets to the vehicle owner and the brand. It is used to indicate that when a certain security attribute of the relevant asset is destroyed, it will cause a risk to the life safety of the driver, and its importance is high. Specifically, in an optional implementation of the embodiment of the present application, the importance can be determined by pre-set different importance descriptions and their corresponding importance coefficients:
[0070] Importance coefficient Importance 0.6 Impact on driving safety / brand reputation / core IP 0.2 Affecting property safety 0.2 Impact on personal privacy 0.1 Impact on function usage
[0071] Further, in an optional implementation of the embodiment of the present application, based on the attack priority index and impact priority index of different security assets in the risk assessment, the threat index corresponding to different vulnerabilities in the security assets includes:
[0072] ThreatLevel=Roundup(Mininum[(Attack Priority+Impact Priority),10]);
[0073] Among them, ThreatLevel (Priority Fact) is the threat index, Attack Priority is the attack priority index, and Impact Priority is the impact priority index; and the repair priority (Priority Fact) of the corresponding security risk or vulnerability to be repaired is determined by determining the threat index.
[0074] Specifically, in an optional implementation of the embodiment of the present application, the repair priority of the vulnerability to be repaired can be determined according to the following table.
[0075] Security risks / vulnerabilities to be fixed Fix Priority CVE-** High (ThreatLevel>=7) CVE-** Middle(3 <ThreatLevel<7) CVE-** Low (ThreatLevel<=3)
[0076] The embodiment of the present application provides a quantitative and unified standard method for determining the degree of exposure, attack link factors and attack priority for the present application through the above-mentioned method. The implementation process is simple, reliable and highly operable. At the same time, by setting the degree of exposure, attack link factors, impact priority index or threat index according to the above-mentioned setting of the present application, a scientific and quantitative risk assessment parameter basis is provided for the present application, so that the risk assessment results are used as the basis for formulating the repair strategy, and the process of participating in the data processing of formulating the repair strategy is more convenient and reliable. Of course, the embodiment of the present application is only an exemplary explanation of the attack priority and impact priority of the security asset, and does not mean that the present application is limited to this.
[0077] Optionally, in an implementation of the embodiment of the present application, the method further includes: generating an asset list of safety assets corresponding to the at least one vehicle model and / or a front-end display interface corresponding to the tree-like asset topology of the entire vehicle, for managing the safety assets, so that the operation and maintenance management personnel can efficiently manage the safety assets according to the front-end display interface.
[0078] The present application provides a method for managing security assets of an Internet of Vehicles system, by performing software and hardware decoupling of the security assets of at least one vehicle model, obtaining the software and hardware decoupling results of the security assets of the whole vehicle; constructing the vehicle asset topology of the at least one vehicle model based on the software and hardware decoupling results; in the vehicle asset topology, based on the physical connection relationship and functional business logic relationship between the security assets, the external entities associated with the at least one vehicle model through the Internet of Vehicles system are associated to determine the vehicle tree asset topology of the at least one vehicle model; when it is determined that any one or more software or hardware of the security assets has a security risk, the security risk is mapped to the vehicle tree asset topology to perform risk assessment; based on the result of the risk assessment, a repair strategy for repairing the security risk is determined. Based on the Internet of Vehicles technology, the present application sorts out the physical relationship and logical functional relationship between the internal security assets and the external security assets of the vehicle, constructs the vehicle tree asset topology, clearly displays the association relationship and importance between the security assets of the vehicle, and facilitates the timely discovery of system vulnerabilities in the vehicle based on the security assets managed by the Internet of Vehicles system.
[0079] Embodiment 2
[0080] Based on the security asset management method of the Internet of Vehicles system described in the first embodiment of the present application, the present application also provides a security asset management device 40 for the Internet of Vehicles system, such as Figure 4 As shown, Figure 4 The present invention provides a schematic diagram of a security asset management device 40 for a vehicle networking system according to an embodiment of the present invention. The security asset management device 40 for the vehicle networking system includes:
[0081] A decoupling module 401 is used to perform soft and hard decoupling of the safety assets of the at least one vehicle type, and obtain a whole vehicle soft and hard decoupling result of the safety assets;
[0082] A construction module 402 is used to construct a vehicle model asset topology of the at least one vehicle model based on the soft-hard decoupling result;
[0083] The determination module 403 is used to associate the external entities associated with the at least one vehicle model through the vehicle networking system based on the physical connection relationship and the functional business logic relationship between the security assets in the vehicle model asset topology, and determine the whole vehicle tree asset topology of the at least one vehicle model;
[0084] An evaluation module 404 is used to map the security risk to the tree-like asset topology of the whole vehicle to perform risk evaluation when it is determined that any one or more software or hardware of the security assets has a security risk;
[0085] The decision module 405 is used to determine a repair strategy for repairing the security risk according to the result of the risk assessment.
[0086] Optionally, in an implementation of the embodiment of the present application, the evaluation module 404 is further configured to:
[0087] Extract other surrounding assets associated with any one or more software or hardware with security risks; based on the extracted other surrounding assets, perform one or more of asset exposure assessment, attack link assessment or asset importance assessment to determine the result of risk assessment.
[0088] Optionally, in one embodiment of the present application, the decision module 405 is also used to determine the threat index of different vulnerabilities in the security assets based on the attack priority index and impact priority index of different security assets in the risk assessment; based on the threat index, determine the corresponding vulnerability repair priority; based on the vulnerability repair priority, determine a repair strategy for repairing the security risk.
[0089] Optionally, in an embodiment of the present application, the attack priority index is determined by the exposure degree of the different security assets and the attack link factor, wherein the exposure degree is used to characterize the difficulty of the different security assets being attacked when running in the Internet of Vehicles system, and the attack link factor is used to characterize the potential probability of the different security assets having actual attack links;
[0090] The impact priority index is determined by the importance of the different safety assets to the vehicle owner and the brand.
[0091] Optionally, in an embodiment of the present application, the decision module 405 calculates the threat index in the following manner:
[0092] ThreatLevel=Roundup(Mininum[(Attack Priority+Impact Priority),10]);
[0093] Among them, ThreatLevel (Priority Fact) is the threat index, Attack Priority is the attack priority index, and Impact Priority is the impact priority index; and the repair priority (Priority Fact) of the corresponding security risk or vulnerability to be repaired is determined by determining the threat index.
[0094] Optionally, in an embodiment of the present application, the determining module 403 is further configured to:
[0095] Decouple the software and hardware of external entities and determine the external security asset topology;
[0096] The vehicle type asset topology and the external safety asset topology are associated to determine a vehicle tree-like asset topology of at least one vehicle type.
[0097] Optionally, in one embodiment of the present application, the security asset management device 40 of the Internet of Vehicles system also includes a storage module (not shown in the accompanying drawings), which is used to generate a database storage form corresponding to the security assets in the vehicle tree topology structure representing at least one vehicle model; associate the database storage form through one or more relationship tables to generate a database storage structure for supporting the construction of the vehicle tree topology structure of at least one vehicle model; and store data in the data storage structure.
[0098] Optionally, in one embodiment of the present application, the security asset management device 40 of the Internet of Vehicles system also includes a front-end display module (not shown in the drawings), which is used to: generate an asset list of security assets corresponding to the at least one vehicle model and / or a front-end display interface corresponding to the tree-like asset topology of the entire vehicle, for managing the security assets.
[0099] The present application provides a security asset management device for an Internet of Vehicles system, which performs software and hardware decoupling of the security assets of at least one vehicle model by setting a decoupling module to obtain the software and hardware decoupling result of the security assets; sets a construction module to construct the vehicle asset topology of at least one vehicle model based on the software and hardware decoupling result; sets a determination module to associate the external entities of at least one vehicle model associated with the Internet of Vehicles system in the vehicle asset topology based on the physical connection relationship and functional business logic relationship between the security assets, and determines the vehicle tree asset topology of at least one vehicle model; sets an evaluation module to map the security risk to the vehicle tree asset topology when it is determined that any one or more software or hardware in the security assets has a security risk, so as to conduct a risk assessment; sets a decision module to determine a repair strategy for repairing the security risk according to the result of the risk assessment. Based on the Internet of Vehicles technology, the present application sorts out the physical relationship and logical functional relationship between the internal security assets and the external security assets of the vehicle, constructs the vehicle tree asset topology, clearly shows the association relationship and importance between the security assets of the vehicle, and facilitates the timely discovery of system vulnerabilities in the vehicle based on the security assets managed by the Internet of Vehicles system.
[0100] Embodiment 3
[0101] The present application also provides a storage medium on which a computer program is stored. When the program is executed by a processor, the security asset management method of any one of the vehicle networking systems described in the first embodiment of the present application is implemented. The security asset management method of the vehicle networking system includes but is not limited to:
[0102] Performing soft and hard decoupling of the safety assets of the at least one vehicle type to obtain a whole vehicle soft and hard decoupling result of the safety assets;
[0103] Based on the soft-hard decoupling result, constructing a vehicle model asset topology of the at least one vehicle model;
[0104] In the vehicle model asset topology, based on the physical connection relationship and functional business logic relationship between the security assets, the external entities associated with the at least one vehicle model through the vehicle networking system are associated to determine the vehicle tree asset topology of the at least one vehicle model;
[0105] When it is determined that any one or more software or hardware of the security assets has a security risk, the security risk is mapped to the tree-like asset topology of the entire vehicle to perform risk assessment;
[0106] Based on the results of the risk assessment, a repair strategy for repairing the security risk is determined.
[0107] So far, the application has described specific embodiments of the subject matter. Other embodiments are within the scope of the appended claims. In some cases, the actions recorded in the claims can be performed in a different order and still achieve the desired results. In addition, the processes depicted in the accompanying drawings do not necessarily require the specific order or sequential order shown to achieve the desired results. In some embodiments, multitasking and parallel processing can be advantageous.
[0108] In the 1990s, improvements to a technology could be clearly distinguished as hardware improvements (for example, improvements to the circuit structure of diodes, transistors, switches, etc.) or software improvements (improvements to the method flow). However, with the development of technology, many improvements to the method flow today can be regarded as direct improvements to the hardware circuit structure. Designers almost always obtain the corresponding hardware circuit structure by programming the improved method flow into the hardware circuit. Therefore, it cannot be said that an improvement in a method flow cannot be implemented using a hardware entity module. For example, a programmable logic device (PLD) (such as a field programmable gate array (FPGA)) is such an integrated circuit whose logical function is determined by the user's programming of the device. Designers can "integrate" a digital system layer on a PLD by programming it themselves, without having to ask a chip manufacturer to design and produce a dedicated integrated circuit chip. Moreover, nowadays, instead of manually making integrated circuit chips, this kind of programming is mostly implemented by "logic compiler" software, which is similar to the software compiler used when developing and writing programs, and the original code before compilation must also be written in a specific programming language, which is called hardware description language (HDL). There is not only one HDL, but many kinds, such as ABEL (Advanced Boolean Expression Language), AHDL (Altera Hardware Description Language), Confluence, CUPL (Cornell University Programming Language), HDCal, JHDL (Java Hardware Description Language), Lava, Lola, MyHDL, PALASM, RHDL (Ruby Hardware Description Language), etc. The most commonly used ones are VHDL (Very-High-Speed Integrated Circuit Hardware Description Language) and Verilog. Those skilled in the art should also know that it is only necessary to program the method flow slightly in the above-mentioned hardware description languages and program it into the integrated circuit, and then it is easy to obtain the hardware circuit that implements the logic method flow.
[0109] The controller can be implemented in any appropriate manner, for example, the controller can take the form of a microprocessor or processor and a computer-readable medium storing a computer-readable program code (such as software or firmware) that can be executed by the (micro)processor, a logic gate, a switch, an application-specific integrated circuit (ASIC), a programmable logic controller, and an embedded microcontroller. Examples of controllers include, but are not limited to, the following microcontrollers: ARC 625D, Atmel AT91SAM, Microchip PIC18F26K20, and Silicone Labs C8051F320. The memory controller can also be implemented as part of the control logic of the memory. Those skilled in the art also know that in addition to implementing the controller in a purely computer-readable program code manner, the controller can be implemented in the form of a logic gate, a switch, an application-specific integrated circuit, a programmable logic controller, and an embedded microcontroller by logically programming the method steps. Therefore, this controller can be considered as a hardware component, and the devices included therein for implementing various functions can also be regarded as structures within the hardware component. Or even, the devices for implementing various functions can be regarded as both software modules for implementing the method and structures within the hardware component.
[0110] The system layers, devices, modules or units described in the above embodiments may be implemented by computer chips or entities, or by products with certain functions. A typical implementation device is a computer. Specifically, the computer may be, for example, a personal computer, a laptop computer, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or a combination of any of these devices.
[0111] For the convenience of description, the above device is described in various units according to their functions. Of course, when implementing the present application, the functions of each unit can be implemented in the same or multiple software and / or hardware.
[0112] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, system layers, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented in one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that contain computer-usable program code.
[0113] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.
[0114] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, system layers or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that contain computer-usable program code.
[0115] The present application may be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific transactions or implement specific abstract data types. The present application may also be practiced in distributed computing environments where transactions are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules may be located in local and remote computer storage media, including storage devices.
[0116] Each embodiment in this specification is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the system layer embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.
[0117] The above are only embodiments of the present application and are not intended to limit the present application. For those skilled in the art, the present application may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included within the scope of the claims of the present application.
Claims
1. A security asset management method for a vehicle networking system, characterized in that: include: Performing soft and hard decoupling of the safety assets of the at least one vehicle type to obtain a whole vehicle soft and hard decoupling result of the safety assets; Based on the soft-hard decoupling result, constructing a vehicle model asset topology of the at least one vehicle model; In the vehicle model asset topology, based on the physical connection relationship and functional business logic relationship between the security assets, the external entities associated with the at least one vehicle model through the vehicle networking system are associated to determine the vehicle tree asset topology of the at least one vehicle model; When it is determined that any one or more software or hardware of the security assets has a security risk, the security risk is mapped to the tree-like asset topology of the entire vehicle to perform risk assessment; Based on the results of the risk assessment, a repair strategy for repairing the security risk is determined.
2. The security asset management method of the Internet of Vehicles system according to claim 1, characterized in that: When it is determined that any one or more software or hardware of the security assets has a security risk, the security risk is mapped to the tree-like asset topology of the entire vehicle to perform risk assessment, including: Extract other peripheral assets associated with any one or more software or hardware that poses security risks; Based on the other extracted surrounding assets, one or more of asset exposure assessment, attack link assessment or asset importance assessment is performed to determine the result of the risk assessment.
3. The security asset management method of the Internet of Vehicles system according to claim 2, characterized in that: Determining a repair strategy for repairing the security risk based on the result of the risk assessment includes: Based on the attack priority index and impact priority index of different security assets in the risk assessment, the threat index of different vulnerabilities in the corresponding security assets; Based on the threat index, determine the corresponding vulnerability repair priority; Based on the vulnerability repair priority, a repair strategy for repairing the security risk is determined.
4. The security asset management method of the Internet of Vehicles system according to claim 3, characterized in that: The attack priority index is determined by the exposure degree of the different security assets and the attack link factor, wherein the exposure degree is used to characterize the difficulty of the different security assets being attacked when running in the Internet of Vehicles system, and the attack link factor is used to characterize the potential probability of the different security assets having actual attack links; The impact priority index is determined by the importance of the different safety assets to the vehicle owner and the brand.
5. The security asset management method of the Internet of Vehicles system according to claim 3, characterized in that: The attack priority index and impact priority index of different security assets in the risk assessment, and the threat index corresponding to different vulnerabilities in the security assets, include: ThreatLevel(Priority Fact):Roundup(Mininum[(Attack Priority+ImpactPriority),10]); Among them, ThreatLevel (Priority Fact) represents the threat index, Attack Priority represents the attack priority index, and Impact Priority represents the impact priority index.
6. The security asset management method of the Internet of Vehicles system according to claim 1, characterized in that: The step of associating the external entities associated with the at least one vehicle model through the vehicle networking system to determine the vehicle tree-like asset topology of the at least one vehicle model includes: Decouple the software and hardware of external entities and determine the external security asset topology; The vehicle type asset topology and the external safety asset topology are associated to determine a vehicle tree-like asset topology of at least one vehicle type.
7. The security asset management method of the Internet of Vehicles system according to claim 1, characterized in that: The method further comprises: Generate a database storage form corresponding to the safety assets in the vehicle tree topology structure representing the at least one vehicle model; Associating the database storage forms through one or more relationship tables to generate a database storage structure for supporting the construction of a vehicle tree topology structure of at least one vehicle model; Data is stored in the data storage structure.
8. The security asset management method of the Internet of Vehicles system according to claim 1, characterized in that: The method further comprises: Generate an asset list of safety assets corresponding to the at least one vehicle model and / or a front-end display interface corresponding to the tree-like asset topology of the entire vehicle for managing the safety assets.
9. A security asset management device for a vehicle networking system, characterized in that: include: A decoupling module, used to perform soft and hard decoupling of the safety assets of the at least one vehicle type, and obtain a whole vehicle soft and hard decoupling result of the safety assets; A construction module, used to construct a vehicle model asset topology of the at least one vehicle model based on the soft-hard decoupling result; A determination module, configured to associate the external entities associated with the at least one vehicle model through the vehicle networking system in the vehicle model asset topology based on the physical connection relationship and the functional business logic relationship between the security assets, and determine the vehicle tree asset topology of the at least one vehicle model; An assessment module, for mapping the security risk to the tree-like asset topology of the whole vehicle to perform risk assessment when it is determined that any one or more software or hardware of the security assets has a security risk; The decision module is used to determine a repair strategy for repairing the security risk according to the result of the risk assessment.
10. A computer storage medium, characterized in that: The computer storage medium stores computer executable instructions, and when the computer executable instructions are executed, the security asset management method for the Internet of Vehicles system as described in any one of claims 1 to 8 is executed.