Safety test method, device and system of vehicle-mounted system, medium and product

Abstract

The invention relates to the technical field of vehicle-mounted information safety testing, and discloses a safety testing method, device and system for a vehicle-mounted system.The designed artificial intelligence module responds to a testing instruction of a to-be-tested task selected by a user, first testing data corresponding to the vehicle-mounted system are obtained through an access module, and / or the first testing data are sent to a server through a server; and calling a safety test module corresponding to the to-be-tested task demand to perform corresponding task test on the vehicle-mounted system, obtaining second test data fed back by the corresponding safety test module after the test is completed, and performing safety analysis on the first test data and / or the second test data based on a pre-integrated vehicle-mounted system safety standard, therefore, automatic safety information testing of the vehicle-mounted system is realized, and manual intervention is not needed.

Description

Technical Field

[0001] The present invention relates to the technical field of vehicle-mounted information security testing, and in particular to a security testing method, device, system, medium and product for a vehicle-mounted system. Background Art

[0002] The in-vehicle information service system refers to a communication system installed in the vehicle. It is an information interaction or entertainment service device. It can communicate with external terminals or service platforms such as base stations and keys, and with in-vehicle electronic systems such as gateways and ECUs to complete functions such as information collection, data exchange, and command issuance.

[0003] At present, the "Technical Requirements and Test Methods for Information Security of In-Vehicle Information Interaction Systems" has been released. It guides the automotive industry to propose technical requirements and tests for in-vehicle information service systems and has been widely used in the industry. The safety test system designed by existing technologies is pre-installed with test items that meet national standards. Information security tests cover national standards, meet compliance, and save labor and time costs. However, existing technologies have not formed automated tests, but only have corresponding methods for testing. Each test is relatively separate, and most tests require manual intervention, with a low degree of automation. Summary of the invention

[0004] In view of this, the present invention provides a safety testing method, device, system, medium and product for a vehicle-mounted system to solve the problem that the prior art has not formed an automated test, only has a corresponding method for testing, each test is relatively separate, most tests require manual intervention, and the degree of automation is low.

[0005] In a first aspect, the present invention provides a safety testing method for a vehicle-mounted system, which is applied to an artificial intelligence module in a safety testing system for the vehicle-mounted system, wherein the safety testing system for the vehicle-mounted system further comprises an access module and safety testing modules corresponding to different information security testing types of the vehicle-mounted system, wherein the access module establishes a corresponding connection with the vehicle-mounted system based on the requirements of the task to be tested selected by a user, and the artificial intelligence module establishes connections with the access module and the safety testing modules corresponding to each different safety information testing type, respectively. The method comprises: in response to a test instruction of the task to be tested selected by a user, based on the requirements of the task to be tested selected by the user, obtaining first test data corresponding to the vehicle-mounted system through the access module, and / or calling the safety testing module corresponding to the requirements of the task to be tested to perform a test of the corresponding task on the vehicle-mounted system, and obtaining second test data fed back by the corresponding safety testing module after completing the test; based on a pre-integrated vehicle-mounted system safety testing standard, performing a safety analysis on the first test data and / or the second test data to determine a safety test result of the vehicle-mounted system.

[0006] The present invention provides a safety testing method for a vehicle-mounted system. The artificial intelligence module responds to a test instruction of a task to be tested selected by a user, obtains first test data corresponding to the vehicle-mounted system through an access module, and / or calls a safety testing module corresponding to the task to be tested to perform a test of the corresponding task on the vehicle-mounted system, and obtains second test data fed back by the corresponding safety testing module after completing the test. Based on a pre-integrated vehicle-mounted system safety standard, a safety analysis is performed on the first test data and / or the second test data to determine a safety test result of the vehicle-mounted system, thereby realizing automatic safety information testing of the vehicle-mounted system without human intervention.

[0007] In an optional implementation, the security testing modules corresponding to the different information security testing types include at least a hardware security testing module, a communication security testing module, an operating system security testing module, an application software security testing module and a data security testing module.

[0008] The present invention designs security test modules corresponding to different information security test types based on the vehicle-mounted information security standard, which can realize the security test of all information interactions of the vehicle-mounted system and ensure the comprehensiveness of the vehicle-mounted system security test.

[0009] In an optional embodiment, the hardware safety test module is integrated with a tool that can access and operate the debugging port of the vehicle-mounted system. If the task requirement to be tested includes testing the hardware safety of the vehicle-mounted system, the first test data corresponding to the vehicle-mounted system is obtained through the access module, and / or the security test module corresponding to the task requirement to be tested is called to test the corresponding task on the vehicle-mounted system, and the second test data fed back by the corresponding security test module after the test is completed is obtained, including: sending the control information input to the vehicle-mounted system to the hardware safety test module, calling the hardware safety test module to access the debugging interface of the vehicle-mounted system, and inputting the control information into the vehicle-mounted system; obtaining the process data fed back after the hardware safety test module completes the access to the debugging interface of the vehicle-mounted system and inputs the control information, and / or obtaining the development board image in the vehicle-mounted system through the access module, and the access module includes an image acquisition device for connecting to the debugging interface of the vehicle-mounted system to obtain the development board image.

[0010] The present invention tests the hardware security of the vehicle-mounted system. The development board screen can be directly obtained through the access module, and the hardware security test module can be called to access the debugging interface of the vehicle-mounted system and input control information to obtain the overall process data, so as to achieve more comprehensive test data and improve the comprehensiveness of the vehicle-mounted system security test.

[0011] In an optional embodiment, the communication security test module integrates at least network card hardware, a port scanning tool, a packet capture tool and a packet tampering tool. If the task requirement to be tested includes a test on the cellular network security of the vehicle-mounted system, the access module is connected to the cellular network of the vehicle-mounted system, and the first test data corresponding to the vehicle-mounted system is obtained through the access module, and / or, the security test module corresponding to the task requirement to be tested is called to test the corresponding task on the vehicle-mounted system, and the second test data fed back by the corresponding security test module after the test is completed is obtained, including: calling the communication security test module to scan the cellular network address of the vehicle-mounted system and connecting to an open port; obtaining the connection result between the communication security test module and the open port, and / or, controlling the vehicle-mounted system to communicate using the cellular network through the access module, and using the packet capture tool of the communication security test module to capture the data packet in the communication process, and / or, sending the data packet to be tampered to the communication security test module, calling the communication security test module to tamper with the data packet of the vehicle-mounted system based on the data packet to be tampered, and obtaining the response of the vehicle-mounted system to the data packet to be tampered.

[0012] In an optional embodiment, the communication security test module integrates at least WIFI network hardware, WIFI packet capture tools and brute force cracking tools. If the task requirement to be tested includes a test on the WIFI security of the vehicle-mounted system, the access module is connected to the WIFI of the vehicle-mounted system, and the first test data corresponding to the vehicle-mounted system is obtained through the access module, and / or, the security test module corresponding to the task requirement to be tested is called to test the vehicle-mounted system for the corresponding task, and the second test data fed back by the corresponding security test module after the test is completed is obtained, including: entering the WIFI setting interface of the vehicle-mounted system through the access module to obtain WIFI setting information, and / or, changing the WIFI password of the vehicle-mounted system to a password that does not meet the setting requirements through the access module, obtaining response information of the WIFI password change, and / or, calling the communication security test module to brute force crack the WIFI password, obtaining the cracking result of the brute force cracking of the WIFI password by the communication security test module, and / or, calling the communication security test module to capture data packets using WIFI communication.

[0013] In an optional embodiment, the communication security test module integrates at least Bluetooth hardware, a Bluetooth packet capture tool and a port scanning tool. If the task requirement to be tested includes a test on the Bluetooth security of the vehicle-mounted system, the access module is connected to the Bluetooth of the vehicle-mounted system, and the first test data corresponding to the vehicle-mounted system is obtained through the access module, and / or, the security test module corresponding to the task requirement to be tested is called to perform a corresponding task test on the vehicle-mounted system, and the second test data fed back by the corresponding security test module after the test is completed, including: connecting the Bluetooth of the vehicle-mounted system through the access module to obtain the process data of the Bluetooth connection, and / or, calling the communication security test module to traverse the Bluetooth of the vehicle-mounted system to obtain the device connection information of the Bluetooth port, and / or, calling the communication security test module to capture data packets using Bluetooth communication.

[0014] The communication security test of the vehicle-mounted system designed in the present invention is divided into cellular network test, WIFI test and Bluetooth test. Users can select more detailed test tasks, and the artificial intelligence module will then perform corresponding process mode tests based on different test tasks to meet the test requirements of the test tasks.

[0015] In an optional embodiment, the operating system security testing module integrates at least a remote access tool, a software debugging tool and an operating system vulnerability scanning tool, the access module is connected to the operating system in the vehicle-mounted system, and the first test data corresponding to the vehicle-mounted system is obtained through the access module, and / or, the security testing module corresponding to the task to be tested is called to test the vehicle-mounted system with the corresponding task, and the second test data fed back after the corresponding security testing module completes the test is obtained, including: calling the operating system security testing module to access the operating system, obtaining account information in the operating system, and / or, sending the operating system account to the operating system security testing module, calling the operating system security testing module to log in to the system, and obtaining the system login result. If the system login result is password protected, calling the operating system security testing module to perform brute force cracking on the operating system to obtain the operating system cracking result, and / or calling the operating system security testing module. The test module performs a system privilege escalation operation on the operating system account and obtains the result of the system privilege escalation operation, and / or accesses the operating system's operating attribute information through the access module and obtains the access display data of the operating attribute information, wherein the operating attribute information at least includes positioning, text messages and phone calls, and / or sends the information related to the software to be tampered to the operating system security test module, calls the operating system security test module to debug the operating system software based on the information related to the software to be tampered, and obtains the debugging result of the operating system software by the operating system security test module, and / or calls the operating system security test module to perform a system update on the operating system and obtain the response data of the operating system to the system update, and / or calls the operating system security test module to change the log stored in the operating system and obtain the response data of the operating system to the log being changed, and / or calls the operating system security test module to perform a vulnerability scan on the operating system and obtain the vulnerability scan result of the operating system.

[0016] The artificial intelligence module of the present invention automatically calls the access module and / or the operating system security test module to perform security testing on the operating system of the vehicle-mounted system based on the requirements of the task to be tested, thereby realizing fully automatic security testing of the vehicle-mounted system.

[0017] In an optional implementation, the application software security testing module integrates at least an application installation tool, an application address scanning tool, a vulnerability scanning tool, an application reverse tool and an application Internet security detection tool, and obtains the first test data corresponding to the vehicle system through the access module, and / or calls the security testing module corresponding to the task to be tested to test the vehicle system with the corresponding task, and obtains the second test data fed back by the corresponding security testing module after completing the test, including: sending the unauthorized application to the application software security testing module, calling the application software testing module to install the unauthorized application on the vehicle system, obtaining the installation response data of the vehicle system to the unauthorized application, and / or calling the application software security testing module to access Ask the application data storage address so that the application software security test module scans whether there is sensitive information in the application data, obtains the scanning result of the application software security test module on the sensitive information in the data, and / or calls the application software security test module to scan the vulnerabilities of each application of the vehicle system, obtains the vulnerability scanning result of the application software security test module on each application of the vehicle system, and / or calls the application software security test module to use the application reverse tool to detect the security of the application's running code, obtains the detection result of the application software security test module using the application reverse tool on the security of the application's running code, and / or calls the application software security test module to trigger the Internet access function of each application, and obtains the data of each application during the Internet access process.

[0018] The present invention calls various tools in the access module and the application software security test module to implement security testing of the application software in the vehicle-mounted system based on the task requirements to be tested selected by the user.

[0019] In an optional embodiment, the data security test module integrates at least a storage address access tool, a data packet capture tool, a file operation tool, and a data deletion function, and obtains the first test data corresponding to the vehicle-mounted system through the access module, and / or calls the security test module corresponding to the task requirement to be tested to test the vehicle-mounted system for the corresponding task, and obtains the second test data fed back by the corresponding security test module after completing the test, including: calling the data security test module to access the data storage address in the vehicle-mounted system, so that the data security test module detects whether there is sensitive information in the data; obtains the detection result of the data security test module on whether there is sensitive information in the data, and / or calls the data security test module to perform unauthorized operations on the storage files in the vehicle-mounted system, obtains the response data of the vehicle-mounted system to the unauthorized operation of the storage files, and / or calls the data packet capture tool in the data security test module to obtain data packets during the data transmission process, and / or calls the data security test module to delete the target data in the vehicle-mounted system; after responding to the feedback from the data security test module after the target data in the vehicle system is deleted, calls the data security test module to access the data storage address in the vehicle-mounted system to obtain the storage information of the target data in the vehicle-mounted system.

[0020] The present invention can automatically call the access module and the data security detection module by the artificial intelligence module to perform security monitoring based on the task requirements to be tested selected by the user, thereby realizing security testing of the data in the vehicle system.

[0021] In an optional embodiment, the artificial intelligence module integrates safety test models corresponding to different task requirements, and the first test data and / or the second test data are subjected to safety analysis based on the pre-integrated vehicle system safety test standard to determine the safety test result of the vehicle system, including: inputting the first test data and / or the second test data obtained based on the task requirement to be tested into the corresponding safety test model, and outputting the vehicle system safety test result; the safety test model is trained by the following steps: obtaining a test data set for testing the vehicle system corresponding to the current task, the test data set including test data and corresponding safety test results, the test data including normal test process and abnormal test data, and the safety test result is determined by analyzing the test data based on the vehicle system safety test standard; using the test data set for testing the vehicle system corresponding to the current task to train the preset initial safety test model corresponding to the current task, to obtain the trained safety test model corresponding to the current task, so that the trained safety test model corresponding to the current task integrates the normal test process and abnormal test data corresponding to the current task.

[0022] The artificial intelligence module designed in the present invention integrates different security test models corresponding to different information security test types. The security test model integrates normal test processes and abnormal test data corresponding to different tasks. The test data is tested based on the corresponding security test model, and the security test results of the vehicle-mounted system are output. Compared with direct comparison testing based on information security standards, the artificial intelligence module has higher efficiency and higher accuracy.

[0023] In an optional implementation, the first test data corresponding to the vehicle-mounted system is obtained through an access module based on the task requirements to be tested selected by the user, and / or the safety test module corresponding to the task requirements to be tested is called to test the vehicle-mounted system with the corresponding task, and the second test data fed back by the corresponding safety test module after the test is completed is obtained, including: based on the task requirements to be tested selected by the user, determining the normal test process corresponding to the task requirements to be tested; based on the sequence of safety tests in the normal test process, generating a first test instruction, and sending the first test instruction to the access module according to the content of the first test instruction, obtaining the test data corresponding to the vehicle-mounted system through the access module, and / or sending the first test instruction to the safety test module corresponding to the task requirements to be tested to test the corresponding task; wherein, the first test instruction is sent to the access module. A test instruction is sent to the safety test module corresponding to the task requirement to be tested to perform the test of the corresponding task, including: directly calling the safety test module corresponding to the task requirement to be tested to test the vehicle system for the corresponding task, and / or calling the task requirement to be tested to use the abnormal test data in the first test instruction to test the vehicle system for the corresponding task; after obtaining the test data obtained through the access module, and / or the test data fed back by the corresponding safety test module after completing the test, a second test instruction is generated according to the safety test sequence and test data, and the second test instruction is replaced with the first test instruction, and the step of sending the first test instruction to the access module according to the content of the first test instruction is repeated until the normal test process is completed and the first test data and the second test data corresponding to the task requirement to be tested are obtained.

[0024] The artificial intelligence module of the embodiment of the present invention serves as the unified input and output interface of the system. It obtains the resources and permissions of the object under test through the access module, and distributes execution instructions to other test modules in sequence according to the actual task situation. Different test modules execute instructions in parallel and feed back the execution results to the artificial intelligence module for analysis. The unified management by the artificial intelligence module is conducive to the execution control of the entire automated test, accurately analyzes the situation of each execution process, improves the accuracy of the test, and each module operates in parallel to increase the test efficiency.

[0025] In an optional embodiment, the method also includes: in response to self-function error information sent by the safety test module to be corrected, setting the function of the safety test module to be corrected to an unavailable state, and prompting the user with the function error information of the safety test module to be corrected so that the user can correct the error of the safety test module to be corrected. The self-function error information is that each safety test module performs a self-check after the safety test system of the vehicle system is powered on. When it is determined that its own safety test function cannot operate normally, the self-function error information is sent to the artificial intelligence module.

[0026] Each module in the embodiment of the present invention performs a self-check after power-on, which can ensure the normal operation of the safety test and the accuracy of the test results, and avoid incorrect test results caused by errors in the module itself.

[0027] In a second aspect, the present invention provides a safety testing device for a vehicle-mounted system, which is applied to an artificial intelligence module in a safety testing system for a vehicle-mounted system. The safety testing system for the vehicle-mounted system also includes an access module and safety testing modules corresponding to different information security testing types of the vehicle-mounted system. The access module establishes a corresponding connection with the vehicle-mounted system based on the task requirements to be tested selected by a user. The artificial intelligence module establishes connections with the access module and the safety testing modules corresponding to each different security information test type respectively. The device includes: a task testing module, which is used to respond to a test instruction of a task to be tested selected by a user, and based on the task requirements to be tested selected by the user, obtain first test data corresponding to the vehicle-mounted system through the access module, and / or call the safety testing module corresponding to the task requirements to be tested to test the vehicle-mounted system for the corresponding task, and obtain second test data fed back by the corresponding safety testing module after completing the test; a vehicle-mounted system safety testing module, which is used to perform a security analysis on the first test data and / or the second test data based on a pre-integrated vehicle-mounted system safety testing standard, and determine the safety test result of the vehicle-mounted system.

[0028] In a third aspect, the present invention provides a safety testing system for a vehicle-mounted system, wherein the safety testing system for the vehicle-mounted system comprises an artificial intelligence module, an access module, and safety testing modules corresponding to different information security testing types of the vehicle-mounted system, wherein the access module establishes a corresponding connection with the vehicle-mounted system based on the requirements of the task to be tested selected by the user, and the artificial intelligence module establishes connections with the access module and the safety testing modules corresponding to each different security information test type respectively, and the artificial intelligence module comprises: a memory and a processor, the memory and the processor are communicatively connected with each other, computer instructions are stored in the memory, and the processor executes the safety testing method for the vehicle-mounted system of the above-mentioned first aspect or any corresponding embodiment thereof by executing the computer instructions.

[0029] In a fourth aspect, the present invention provides a computer-readable storage medium having computer instructions stored thereon, the computer instructions being used to enable a computer to execute the safety testing method for a vehicle-mounted system of the first aspect or any corresponding embodiment thereof.

[0030] In a fifth aspect, the present invention provides a computer program product, comprising computer instructions for causing a computer to execute the safety testing method for a vehicle-mounted system of the first aspect or any corresponding embodiment thereof.

[0031] The present invention provides a safety testing method for a vehicle-mounted system. The artificial intelligence module responds to a test instruction of a task to be tested selected by a user, obtains first test data corresponding to the vehicle-mounted system through an access module, and / or calls a safety testing module corresponding to the task to be tested to perform a test of the corresponding task on the vehicle-mounted system, and obtains second test data fed back by the corresponding safety testing module after completing the test. Based on a pre-integrated vehicle-mounted system safety standard, a safety analysis is performed on the first test data and / or the second test data to determine a safety test result of the vehicle-mounted system, thereby realizing automatic safety information testing of the vehicle-mounted system without human intervention. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0033] Figure 1 is an example diagram of an integrated tool for access modules according to an embodiment of the present invention;

[0034] Figure 2 is a flowchart of a safety testing method for an in-vehicle system according to an embodiment of the present invention;

[0035] Figure 3 is a flow chart of another safety testing method for an in-vehicle system according to an embodiment of the present invention;

[0036] Figure 4 is a structural example diagram of a safety test system for an in-vehicle system according to an embodiment of the present invention;

[0037] Figure 5 is a functional example diagram of an artificial intelligence module according to an embodiment of the present invention;

[0038] Figure 6 is an example diagram of an integrated tool for a hardware security testing module according to an embodiment of the present invention;

[0039] Figure 7 is an example diagram of an integrated tool for a communication security test module according to an embodiment of the present invention;

[0040] Figure 8 is an example diagram of an integrated tool for an operating system security testing module according to an embodiment of the present invention;

[0041] Fig. 9 is an example diagram of an integrated tool for application software security testing modules according to an embodiment of the present invention;

[0042] Fig.10 is an example diagram of an integrated tool for a data security testing module according to an embodiment of the present invention;

[0043] Fig.11 is an example diagram of the training process of the security test model according to an embodiment of the present invention;

[0044] Fig.12 is a schematic diagram of a safety test system for an in-vehicle system according to an embodiment of the present invention;

[0045] Fig.13 is a structural block diagram of a safety testing device for an in-vehicle system according to an embodiment of the present invention;

[0046] Fig.14 Schematic diagram of the hardware structure of the artificial intelligence module of the embodiment of the present invention. DETAILED DESCRIPTION

[0047] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present invention.

[0048] According to an embodiment of the present invention, an embodiment of a safety testing method for a vehicle-mounted system is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0049] In this embodiment, a security testing method for an in-vehicle system is provided, which is applied to an artificial intelligence module in a security testing system for the in-vehicle system. The security testing system for the in-vehicle system also includes an access module and security testing modules corresponding to different information security testing types of the in-vehicle system. The access module establishes a corresponding connection with the in-vehicle system based on the task requirements to be tested selected by the user, and the artificial intelligence module establishes connections with the access module and the security testing modules corresponding to each different security information testing type. The in-vehicle system may be an in-vehicle information service system, which is only taken as an example.

[0050] The security testing system of the vehicle-mounted system designed in an embodiment of the present invention includes an access module, an artificial intelligence module and security testing modules corresponding to different information security testing types of the vehicle-mounted system, wherein the security testing modules corresponding to the different designed information security testing types are not limited, and can be updated in real time according to the information security testing types involved in the actually released information security technical requirements for the vehicle information interaction system, such as user identity authentication test, security log test, existing network test, hardware security test, encryption test, etc., just as an example, different information security testing types can be designed with corresponding security testing modules, and the security testing module is integrated with the testing tools for the corresponding functional tests.

[0051] The access module designed in the embodiment of the present invention undertakes all wired and wireless connections, information acquisition and transmission, operation execution and other functions, such as Figure 1 As shown, the access module hardware has a high-definition camera, a lighting lamp and a hardware environment with a signal shielding box function. The wireless interface includes a Bluetooth communication interface, a WIFI communication interface, a software-integrated terminal emulation program, a monkey (monkey test, a command line tool that sends a pseudo-random event stream to the system) tool / MonkeyRunner (a tool that comes with the Android SDK, allowing the operation of the device to be controlled or automated testing to be performed on the PC side through the Android API) tool, and various wired interfaces, including a Universal Serial Bus interface (USB), a fieldbus (Controller Area Network, CAN) network interface, an Ethernet network interface, a video interface, a power supply interface and other interfaces. The software has supporting software that supports hardware drivers. As an example only, the access module can be established by the user based on the task requirements to be tested selected by the user. For example, to test the hardware safety test of the vehicle-mounted system, the user, i.e. the staff, can remove the outer shell of the vehicle-mounted system, leaving only the development board, put it in a designated position, and connect it to the power supply interface, video interface and USB interface of the access module. As an example only.

[0052] The artificial intelligence module designed in the embodiment of the present invention is pre-integrated with the latest vehicle-mounted system safety test standards, and establishes independent connections with the access module and the safety test modules corresponding to the various designed safety information test types. The artificial intelligence module can choose to call the access module or the corresponding safety test module for testing based on the requirements of the task to be tested, and obtain the data after the test for analysis and processing to determine the safety test results of the vehicle-mounted system.

[0053] Figure 2 is a flow chart of a safety testing method for a vehicle-mounted system according to an embodiment of the present invention. Figure 2 As shown, the process includes the following steps:

[0054] Step S201, in response to the test instruction of the task to be tested selected by the user, based on the requirements of the task to be tested selected by the user, obtain the first test data corresponding to the vehicle system through the access module, and / or call the safety test module corresponding to the requirements of the task to be tested to test the vehicle system for the corresponding task, and obtain the second test data fed back by the corresponding safety test module after completing the test.

[0055] In the embodiment of the present invention, a user can select a task to be tested in an interactive interface of a security test system of an in-vehicle system. For example, if the network security of the in-vehicle system needs to be tested, the artificial intelligence module can choose to obtain first test data corresponding to the in-vehicle system through an access module based on the test instruction of the task to be tested selected by the user, and / or call a security test module corresponding to the task to be tested to test the in-vehicle system, and obtain second test data fed back after the security test module completes the test. The decision on whether to obtain data through an access module or to call a corresponding security test module for testing can be made according to the actual task to be tested. For example, based on the network security test of the in-vehicle system selected by the user, the artificial intelligence module can decide in advance which tests need to be performed, such as directly obtaining the network address (Internet address) of the in-vehicle system through the access module. Protocol, IP), and can also call the corresponding network security test module to capture data packets during network communication, wherein the artificial intelligence module can automatically determine the target test data corresponding to the task requirement to be tested based on the task requirement to be tested and the different test data corresponding to different task requirements that have been integrated into the artificial intelligence module, and send the target test data to the corresponding security test module, call the security test module to test the vehicle system based on the target test data, and obtain the test result of the vehicle system by the security test module, such as automatically setting the network setting information to be modified in advance, sending the network setting information to be modified to the network security test module, calling the network security test module to modify the network setting based on the network setting information to be modified, and obtaining the vehicle system The test result of the network The response situation of the setting modification is only taken as an example. It can also be determined based on the requirements of the task to be tested that no data to be tested is needed, and the corresponding security test module can be directly called to test the vehicle system. This operation requires the artificial intelligence module to make its own decisions based on the requirements of the task to be tested. If the user only chooses to perform a security test on the network address IP of the vehicle system, the artificial intelligence module can also only obtain the network address IP of the current vehicle system through the access module. Among them, before the access module obtains the first test data corresponding to the vehicle system, or the security test module feeds back the second test data to the artificial intelligence module, it is also necessary to convert the test data into one or several formats, that is, format data that can be analyzed by the artificial intelligence module, so that the artificial intelligence module can analyze the test data, without limitation.

[0056] Step S202 , based on the pre-integrated vehicle system safety test standard, perform safety analysis on the first test data and / or the second test data to determine the safety test result of the vehicle system.

[0057] After the artificial intelligence module of the embodiment of the present invention obtains the test data through the access module and / or the corresponding security testing module, it can determine whether the test data is safe based on its own pre-integrated vehicle system security testing standard, where the vehicle system security testing standard includes various types of data requirements that meet information security. For example, if data is transmitted through the network of the vehicle system, the data needs to be encrypted and the Transport Layer Security Protocol (TLS) version must be correct. The data obtained based on the test can be compared with the data requirements corresponding to the information security in the vehicle system security testing standard. If the attributes such as the operation process and data encryption are consistent with the data requirements for information security, it can be determined that the security test result of the vehicle system is safe, and then it can be prompted to the user through the interactive interface.

[0058] The present embodiment provides a safety testing method for a vehicle-mounted system, in which an artificial intelligence module responds to a test instruction of a task to be tested selected by a user, obtains first test data corresponding to the vehicle-mounted system through an access module, and / or calls a safety testing module corresponding to the task to be tested to perform a test of the corresponding task on the vehicle-mounted system, and obtains second test data fed back by the corresponding safety testing module after the test is completed; based on a pre-integrated vehicle-mounted system safety standard, a safety analysis is performed on the first test data and / or the second test data, the safety test result of the vehicle-mounted system is determined, and automatic safety information testing of the vehicle-mounted system is realized without human intervention.

[0059] In this embodiment, a safety test method for an in-vehicle system is provided, which can be used for an artificial intelligence module in a safety test system of the in-vehicle system. Figure 3 is a flow chart of an artificial intelligence module method in a safety test system of an in-vehicle system according to an embodiment of the present invention. Figure 3 As shown, the process includes the following steps:

[0060] Step S301, in response to the test instruction of the task to be tested selected by the user, based on the requirements of the task to be tested selected by the user, obtain the first test data corresponding to the vehicle system through the access module, and / or call the safety test module corresponding to the requirements of the task to be tested to test the vehicle system for the corresponding task, and obtain the second test data fed back by the corresponding safety test module after completing the test.

[0061] Specifically, the security testing modules corresponding to different information security testing types include at least a hardware security testing module, a communication security testing module, an operating system security testing module, an application software security testing module and a data security testing module.

[0062] The embodiment of the present invention can be based on the requirements of "GB T 40856-2021 Technical Requirements and Test Methods for Information Security of In-Vehicle Information Interaction Systems", and use artificial intelligence to perform arbitration. Many test tools are integrated in the equipment to perform auxiliary testing, and the safety test results of the in-vehicle system are automatically obtained, such as Figure 4 As shown, the designed vehicle system safety test system includes an artificial intelligence module, which dominates the control and decision-making in the vehicle system safety test process; an access module, which is used to connect the vehicle system, including CAN, Ethernet, WIFI, Bluetooth and other parts that need to be accessed, and can also obtain relevant information such as hardware chips and wiring on the components, and transmit data after connection; a hardware security test module, which implements the test of hardware security corresponding to the standard; a communication security test module, which implements the test of communication security corresponding to the standard; an application software security test module, which implements the test of application software security corresponding to the standard; a data security test module, which implements the test of data security corresponding to the standard. For example, the various functional modules in the vehicle system safety test system can be updated in real time according to the published vehicle system information security standard. The overall process of the vehicle system safety test method is to connect the access module to the vehicle system by wire / wireless, obtain the pictures of the development board and the chip through the camera, and the artificial intelligence module identifies and processes them, calls the various hardware security, communication security, operating system security and other test modules for testing, obtains the test data and combines it with artificial intelligence for comprehensive analysis, and outputs the vehicle system safety test results.

[0063] The present invention designs security test modules corresponding to different information security test types based on the vehicle-mounted information security standard, which can realize the security test of all information interactions of the vehicle-mounted system and ensure the comprehensiveness of the vehicle-mounted system security test.

[0064] Furthermore, the hardware safety test module is integrated with a tool that can access and operate the debugging port of the vehicle-mounted system. If the task requirement to be tested includes testing the hardware security of the vehicle-mounted system, the first test data corresponding to the vehicle-mounted system is obtained through the access module, and / or the security test module corresponding to the task requirement to be tested is called to test the corresponding task on the vehicle-mounted system, and the second test data fed back by the corresponding security test module after the test is completed is obtained, including: sending the control information input into the vehicle-mounted system to the hardware safety test module, calling the hardware safety test module to access the debugging interface of the vehicle-mounted system, and inputting the control information into the vehicle-mounted system; obtaining the process data fed back after the hardware safety test module completes the access to the debugging interface of the vehicle-mounted system and inputs the control information, and / or obtaining the development board image in the vehicle-mounted system through the access module, and the access module includes an image acquisition device for connecting to the debugging interface of the vehicle-mounted system to obtain the development board image.

[0065] like Figure 5As shown, the artificial intelligence module designed in the embodiment of the present invention leads the operation of the test and mainly has three functions: recognition, analysis and processing. It has the function of intelligent image recognition and analysis, recognizes the debug port, recognizes the development board and the chip. The identifiable information includes the chip, the silk screen on the chip, the chip pins, and the development board wiring. The use of artificial intelligence for recognition is only an example.

[0066] like Figure 6 As shown, the hardware security test module designed in the embodiment of the present invention mainly performs access test of the debugging interface, integrates the terminal emulation program (Secure CRT), serial port connection software (putty), and Android Debug Bridge (AndroidDebug Bridge, adb) tool to realize the functions of accessing the debugging port, inputting commands, and outputting results. As an example only, the tools integrated in the hardware security test module can be updated in real time according to the existing updated task requirements and information security standards. If the user chooses to test the hardware security of the vehicle-mounted system, the vehicle-mounted system shell can be removed in advance, only the development board can be retained, and it can be placed in the designated position, connected to the power supply interface, video interface, and USB interface of the access module, and the vehicle-mounted system can be powered and the terminal can be displayed.

[0067] After starting the test, the artificial intelligence module can call the hardware security test module to access the debugging interface of the vehicle system, obtain the access process data and access results of the debugging interface. If the access result is determined to be a successful access, the control information input to the vehicle system can be set first, and the control information can be sent to the hardware security test module. The hardware security test module is called to input the control information into the vehicle system, and after obtaining the input or executing the command, the content displayed on the vehicle system screen is judged to determine whether the screen content displays a password restriction. The vehicle information security standard requires that after the control command is entered, an interface for entering a password should appear. If there is a password input interface, it means that there is a password restriction, and it is determined that the security requirements are met. If there is no password input interface, it is determined that the security requirements are not met, or the hardware security test module is If the access to the vehicle system fails, it can also be determined that the security requirements are met. This is just an example. The access module is connected to the debugging interface of the vehicle system, and can obtain the development board screen through a high-definition camera. The artificial intelligence module uses the development board screen obtained by the access module to perform intelligent identification to determine whether there are exposed pins, exposed communication lines and chip silk screens, and determine whether the security requirements are met, and record the security test results. Users can choose to test the hardware security as a whole. The artificial intelligence module will test the above test methods in sequence to obtain the hardware security test results. Users can also choose detailed hardware security test requirements, such as only performing hardware testing on the development board. In this case, the artificial intelligence does not need to call the hardware test module, but only needs to obtain the development board screen through the access module for intelligent identification. This is just an example.

[0068] The present invention tests the hardware security of the vehicle-mounted system. The development board screen can be directly obtained through the access module, and the hardware security test module can be called to access the debugging interface of the vehicle-mounted system and input control information to obtain the overall process data, so as to achieve more comprehensive test data and improve the comprehensiveness of the vehicle-mounted system security test.

[0069] Furthermore, the communication security test module integrates at least network card hardware, port scanning tools, packet capture tools and data packet tampering tools. If the task to be tested requires the security of the cellular network of the vehicle-mounted system, the access module connects to the cellular network of the vehicle-mounted system, and the artificial intelligence module calls the communication security test module to scan the cellular network address of the vehicle-mounted system and connects to the open port; obtains the connection result between the communication security test module and the open port, and / or controls the vehicle-mounted system to communicate using the cellular network through the access module, and uses the packet capture tool of the communication security test module to capture the data packets in the communication process, and / or sends the data packets to be tampered to the communication security test module, calls the communication security test module to tamper with the data packets of the vehicle-mounted system based on the data packets to be tampered, and obtains the response of the vehicle-mounted system to the tampered data packets.

[0070] like Figure 7 As shown, the hardware of the communication security test module designed in the embodiment of the present invention is integrated with Bluetooth, WIFI, wireless network card, bus development hardware (CAN open environment, CANoe), etc., and the software is integrated with network data packet capture tool (dump the traffic on a network, tcpdump), wireshark, network packet analysis software (burpsuite), HTTP packet capture tool (fiddle), Bluetooth packet capture tool, WIFI packet capture tool, adb, port scanning tool and supporting hardware driver supporting software, and has the functions of packet transfer and tampering of Bluetooth, WIFI, cellular network, CAN, Ethernet, etc., just as an example, the Bluetooth, WIFI, cellular network, CAN network, and Ethernet of the test object can be connected through the access module.

[0071] In response to the user's choice to test the cellular network of the vehicle-mounted system, after connecting to the cellular network of the vehicle-mounted system through the access module, the security test system of the vehicle-mounted system and the vehicle-mounted system are in a unified network, and the artificial intelligence module calls the communication security test module to scan the cellular network address of the vehicle-mounted system, that is, the cellular network IP of the vehicle-mounted system, and then can view the ports developed by it and connect them one by one, and finally can obtain the connection result between the communication security test module and the open port; the artificial intelligence module can also trigger the vehicle-mounted system to communicate with the background through the cellular network through the access module, and call the packet capture tool of the communication security test module to capture the data packets in the communication process for analysis, to check whether there is security authentication, encryption, TLS protocol version and record the test results; the artificial intelligence module can also respond to the user's selected test requirements for whether the vehicle-mounted system data packet can be tampered with, automatically forge the data packet to be tampered and send it to the communication security test module, so as to call the communication security test module to tamper with or replay the data packet of the vehicle-mounted system based on the data packet to be tampered, and finally, obtain the response of the vehicle-mounted system to the data packet to be tampered, and record the test results.

[0072] Furthermore, the communication security test module at least integrates WIFI network hardware, WIFI packet capture tools and brute force cracking tools. If the task to be tested requires a test of the WIFI security of the vehicle system, the access module connects to the WIFI of the vehicle system, and the artificial intelligence module enters the WIFI setting interface of the vehicle system through the access module to obtain WIFI setting information, and / or changes the WIFI password of the vehicle system to a password that does not meet the setting requirements through the access module, obtains response information of the WIFI password change, and / or calls the communication security test module to brute force crack the WIFI password, obtains the cracking result of the brute force cracking of the WIFI password by the communication security test module, and / or calls the communication security test module to capture data packets communicated using WIFI.

[0073] In response to the user's choice to test the WIFI of the vehicle-mounted system, the artificial intelligence module can enter the WIFI setting interface of the vehicle-mounted system through the access module to obtain WIFI setting information, wherein the WIFI setting information may include whether there is a password setting, the default password, and the set password. The artificial intelligence module checks whether the set password meets the complexity requirements and records the security test results. The artificial intelligence module can change the WIFI password of the vehicle-mounted system to a password that does not meet the setting requirements through the access module, such as a weak password, and obtain the response information of the vehicle-mounted system to the WIFI password change after the password is changed, wherein the response information can be the interface of the vehicle-mounted system, check whether the change is successful, or prompt that the password does not meet the setting requirements and other information, record the test results, the artificial intelligence module can also call the communication security test module to perform brute force cracking on the WIFI password, check whether the cracking is successful, record the test results, and can also call the communication security test module to capture data packets using WIFI communication. The artificial intelligence module analyzes the captured data packets to see whether they are encrypted, whether security protocols are used, etc., and records whether the test results meet the security requirements.

[0074] Furthermore, the communication security test module integrates at least Bluetooth hardware, a Bluetooth packet capture tool and a port scanning tool. If the task to be tested includes a test of the Bluetooth security of the vehicle-mounted system, the access module connects to the Bluetooth of the vehicle-mounted system, and the artificial intelligence module connects to the Bluetooth of the vehicle-mounted system through the access module to obtain the process data of the Bluetooth connection, and / or calls the communication security test module to traverse the Bluetooth of the vehicle-mounted system to obtain the device connection information of the Bluetooth port, and / or calls the communication security test module to capture data packets using Bluetooth communication.

[0075] In response to the user's choice to test the Bluetooth of the vehicle-mounted system, the artificial intelligence module can use the access module to connect to the Bluetooth of the vehicle-mounted system and view the process data of the Bluetooth connection. It can determine whether there is pairing authentication in the process. As an example only, the test results are recorded. The artificial intelligence module can also call the communication security test module to traverse the Bluetooth of the vehicle-mounted system, obtain the device connection data of the Bluetooth port, determine whether there are other hidden devices, record the test results, and call the communication security test module to capture data packets using Bluetooth communication, analyze them, check whether the communication data is encrypted, analyze the security mode used, and record the test results.

[0076] The communication security test of the vehicle-mounted system designed in the present invention is divided into cellular network test, WIFI test and Bluetooth test. Users can select more detailed test tasks, and the artificial intelligence module will then perform corresponding process mode tests based on different test tasks to meet the test requirements of the test tasks.

[0077] Furthermore, the operating system security testing module at least integrates a remote access tool, a software debugging tool and an operating system vulnerability scanning tool. The access module is connected to the operating system in the vehicle system. The artificial intelligence module calls the operating system security testing module to access the operating system and obtains the account information in the operating system, and / or sends the operating system account to the operating system security testing module, calls the operating system security testing module to log in to the system, and obtains the system login result. If the system login result is password protected, calls the operating system security testing module to perform brute force cracking on the operating system and obtains the operating system cracking result, and / or calls the operating system security testing module to perform system privilege escalation operation on the operating system account and obtains the system privilege escalation operation result, and / or accesses the operating system through the access module. The system may further comprise the following steps: collecting, scanning and displaying operation attribute information, obtaining access display data of the operation attribute information, wherein the operation attribute information includes at least positioning, text messages and phone calls, and / or sending information related to the software to be tampered with to the operating system security test module, calling the operating system security test module to debug the operating system software based on the information related to the software to be tampered with, and obtaining the debugging result of the operating system software by the operating system security test module, and / or calling the operating system security test module to perform a system update on the operating system, and obtaining the response data of the operating system to the system update, and / or calling the operating system security test module to change the log stored in the operating system, and obtaining the response data of the operating system to the log being changed, and / or calling the operating system security test module to perform a vulnerability scan on the operating system, and obtaining the vulnerability scan result of the operating system.

[0078] like Figure 8 As shown, the software of the operating system security testing module integrates remote access tools, software debugging tools and operating system vulnerability scanning tools, and has the functions of viewing the system, brute force cracking, system privilege escalation, debugging software, tampering with the system, tampering with the upgrade package, etc.

[0079] In response to the user's choice to perform a security test on the operating system of the vehicle system, the artificial intelligence module connects to the operating system through the access module, and can call the access tool in the operating system security test module to view the account information of the operating system, check whether there are redundant accounts in the operating system, and record the test results; the artificial intelligence module sends the found account to the operating system security test module, where the account does not include a password, calls the operating system security test module to log in to the system, and obtains the system login result. The artificial intelligence module determines whether the operating system is password protected based on the system login result. For example, if the login is not successful, it means that there is password protection and the security requirements are met. At this time, the operating system security test module can continue to be called to perform brute force cracking on the operating system to obtain the cracking result of the operating system. If the cracking is not successful, it means that the security requirements are met; the artificial intelligence module can also call the operating system security test module to perform system privilege escalation operations on the operating system accounts, obtain the system privilege escalation operation results, check whether the privilege escalation is successful, and record the test results; the artificial intelligence module can also access the file permissions of the operating system through the access module to check whether they are reasonably allocated; the access module can also be called to access the operating system The artificial intelligence module can also send the information about the software to be tampered to the operating system security test module, wherein the information about the software to be tampered may include but is not limited to tampering with the secure boot code, operating system signature, trusted root, etc., and call the operating system security test module to debug the operating system based on the information about the software to be tampered, and obtain the debugging results; the artificial intelligence module can also call the operating system security test module to update the operating system, wherein the content of the system update may include but is not limited to updating the upgrade package content, reducing the upgrade package version or changing the signature, etc., and obtain the operating system's response data to the system update; the artificial intelligence module can also call the operating system security test module to read the log storage address, try to delete and overwrite the log, and obtain the operating system's response data to the log being changed; the artificial intelligence module can also call the operating system security test module to scan the operating system for vulnerabilities and obtain the results of the vulnerability scan of the operating system. Among them, the user can choose to test the operating system security as a whole, or choose any detailed security test. The artificial intelligence only needs to respond to the task to be tested selected by the user, and call the access module or the operating system security test module accordingly, just as an example.

[0080] The artificial intelligence module of the present invention automatically calls the access module and / or the operating system security test module to perform security testing on the operating system of the vehicle-mounted system based on the requirements of the task to be tested, thereby realizing fully automatic security testing of the vehicle-mounted system.

[0081] Furthermore, the application software security testing module integrates at least an application installation tool, an application address scanning tool, a vulnerability scanning tool, an application reverse tool and an application Internet security detection tool. The artificial intelligence module sends the unauthorized application to the application software security testing module, calls the application software testing module to install the unauthorized application on the vehicle system, obtains the installation response data of the vehicle system to the unauthorized application, and / or calls the application software security testing module to access the application data storage address so that the application software security testing module scans whether there is sensitive information in the application data, obtains the scanning result of the application software security testing module on the sensitive information in the data, and / or calls the application software security testing module to perform vulnerability scanning on each application of the vehicle system, obtains the vulnerability scanning result of the application software security testing module on each application of the vehicle system, and / or calls the application software security testing module to use the application reverse tool to detect the security of the application's running code, obtains the detection result of the application software security testing module using the application reverse tool on the security of the application's running code, and / or calls the application software security testing module to trigger the Internet access function of each application, and obtains the data of each application during the Internet access process.

[0082] like Fig. 9 As shown, the software of the application software security testing module designed in the embodiment of the present invention integrates application (application, app) vulnerability scanning tools, app detection tools, session content analysis tools, app reverse tools, binary reverse tools, app code scanning tools, app debugging tools, fuzz testing tools, process communication interception tools, network data capture tools, and has the functions of scanning sensitive information, installing apps, scanning vulnerabilities, detecting apps accessing the Internet, etc., just as an example.

[0083] In response to the user's choice to conduct a security test on the application software of the vehicle system, the artificial intelligence module connects to the vehicle system through the access module, automatically sends the pre-installed unauthorized application to the application software security testing module, calls the application software testing module to install the unauthorized application on the vehicle system, and then obtains the vehicle system's response data to the installation of the unauthorized application; the artificial intelligence module calls the application software security testing module to access the data storage address of the application software, scans whether there is sensitive information in the data, and obtains the scanning results of the sensitive information in the data by the application software security testing module; the artificial intelligence module can call the adb tool in the application software security testing module to export the application in the vehicle system, and scan each application for vulnerabilities, and obtain the vulnerability scanning results of each application in the vehicle system by the application software security testing module; the artificial intelligence module can also call the application software security testing module based on the task requirements selected by the user to use the application reverse tool to reverse the application software, check whether the debugging mode is familiar, and traverse the software code to check whether there is sensitive information or whether other security parameters are reasonable; the artificial intelligence module can also call the application software security testing module to trigger the Internet access function of each application to check whether the Internet access process is safe.

[0084] The present invention calls various tools in the access module and the application software security test module to implement security testing of the application software in the vehicle-mounted system.

[0085] Furthermore, the data security testing module integrates at least a storage address access tool, a data packet capture tool, a file operation tool, and a data deletion function. The artificial intelligence module calls the data security testing module to access the data storage address in the vehicle system, so that the data security testing module detects whether there is sensitive information in the data; obtains the detection result of the data security testing module on whether there is sensitive information in the data, and / or calls the data security testing module to perform unauthorized operations on the storage files in the vehicle system, obtains the response data of the vehicle system to the unauthorized operations on the storage files, and / or calls the data packet capture tool in the data security testing module to obtain data packets during the data transmission process, and / or calls the data security testing module to delete the target data in the vehicle system; after responding to the feedback from the data security testing module after completing the deletion of the target data in the vehicle system, calls the data security testing module to access the data storage address in the vehicle system to obtain the storage information of the target data in the vehicle system.

[0086] like Fig.10 As shown, the data security test module software designed in the embodiment of the present invention integrates adb and network packet capture tools, and has the functions of accessing memory, accessing, tampering, deleting files, capturing network data packets, and analyzing data packets.

[0087] In response to the user's choice to perform a security test on the data of the vehicle-mounted system, the artificial intelligence module can call the data security test module to access the data storage address, check whether there is sensitive information in the data, and record the security test results; the artificial intelligence module can also call the data security test module to perform unauthorized operations on the storage files in the vehicle-mounted system. Unauthorized operations may include but are not limited to unauthorized access, tampering and deletion operations, and obtain the response data of the vehicle-mounted system to the unauthorized operation of the storage file; the artificial intelligence module can also trigger the data transmission function, and call the packet capture tool of the data security test module to obtain the data packet, and check whether the data in the captured data packet is encrypted or protected by other security measures; the artificial intelligence module can also trigger the data destruction function of the vehicle-mounted system, and then return to the storage address to check whether the data is successfully destroyed, and record the test results. Users can choose to conduct a comprehensive test on data security based on actual needs, or only test a certain detailed task. The artificial intelligence module only needs to choose to call the access module and the data security test module based on the task to be tested selected by the user. This is just an example.

[0088] The present invention calls various tools in the access module and the data security test module to implement security testing of data in the vehicle-mounted system.

[0089] Step S302 : Based on the pre-integrated vehicle system safety test standard, a safety analysis is performed on the first test data and / or the second test data to determine a safety test result of the vehicle system.

[0090] Specifically, the artificial intelligence module integrates security test models corresponding to different task requirements. The above step S302 includes:

[0091] Step S3021: input the first test data and / or the second test data obtained based on the requirements of the task to be tested into the corresponding safety test model, and output the vehicle system safety test result.

[0092] Among them, the safety test model is trained through the following steps: obtaining a test data set for the vehicle system test corresponding to the current task, the test data set includes test data and corresponding safety test results, and the safety test results are determined by analyzing the test data based on the vehicle system safety test standard; using the test data set for the vehicle system test corresponding to the current task to train the preset initial safety test model corresponding to the current task, and obtain the trained safety test model corresponding to the current task, so that the trained safety test model corresponding to the current task integrates the normal test process and abnormal test data corresponding to the current task, wherein the test data includes the normal test process and abnormal test data.

[0093] The artificial intelligence module designed in the embodiment of the present invention dominates the operation of the security test, which integrates security test models corresponding to different information types, wherein there is no limitation on the number of security test modules integrated and the corresponding prediction functions. Each information security test type may correspond to a security test model, or each small task test under each security test type may correspond to a security test model. For example, based on the communication security test type, it may correspond to a security test model, or the cellular network, WIFI and Bluetooth tests may each correspond to a security test model, or each small task test under the cellular network test may correspond to a security test model. This is just an example.

[0094] Previously, the security test model needs to be trained. The training set is mainly composed of pictures and texts, and should include development boards, chips, silk screens, wiring, and feedback results in different situations. For different functions to be implemented, corresponding training sets should be given for training. For example, if image recognition function is required, pictures of various scenes are used as training sets. The functions can refer to the description in the subsequent test process. All recognition, analysis, and processing logic should be completed by the artificial intelligence module, such as Fig.11 As shown, for the training of the security test model, a large amount of relevant data needs to be collected first. Before the relevant data is used for training the model, the data needs to be preprocessed, including cleaning, annotation and conversion, so that the data is more suitable for model learning. Then, according to the task requirements and the characteristics of the data, a suitable artificial intelligence model is selected, including but not limited to neural networks, decision trees or support vector machines. After selecting a suitable artificial intelligence model based on actual application needs, the preprocessed data can be used to train the model. The training process can adjust the parameters of the model to minimize the loss function or maximize the prediction accuracy to obtain a trained security test model. Based on the trained security test model, the validation set or test set can be used to evaluate the trained model to measure the performance of the model. Then, according to the evaluation results, the security test model is adjusted and optimized, such as adjusting the model parameters or trying different model structures or training methods, as an example.

[0095] In the actual training process of the security test model, the test data may include normal test processes and abnormal test data. The initial security test model corresponding to the current task is trained using the test data set of the vehicle system test corresponding to the current task. For example, the initial security test model is trained using the normal test process, so that the security test model can perform security and normal test processes in sequence during subsequent tests. For example, when performing a security test on the normal login operation of the operating system, the corresponding normal process is to obtain the account information of the operating system, log in to the operating system based on the account information, and then determine whether there is password protection. If there is password protection, brute force cracking of the system is performed to determine whether the brute force cracking is successful. This is only used as an example. For example, to ensure the sequence and accuracy of the tests; using abnormal test data to train the security test model can enable the security test model to determine which test data are abnormal. For example, if the WIF password setting requirement is a strong password, the abnormal data is a weak password. When the security test model is trained with a weak password, the security test model determines that the password is a weak password based on the security test result. The weak password can be integrated so that when the system's WIFI password setting requirements are tested later, the integrated weak password can be sent to the communication security test module for a WIFI password setting requirement test. Finally, the test result is obtained, that is, the response of the vehicle system to the input weak password, whether it agrees to modify or prompts that the password requirement is incorrect. This is just an example.

[0096] The optimized model can be deployed in practical applications, such as using the model for prediction or decision-making in the software system. The training model training is relatively complex, and the types of training sets can be reduced through customized development. For example, for a single manufacturer's in-vehicle information interaction system, the development version specifications are relatively fixed, the chip range used is small, and the wiring situation is small, so the collection of training set images can be reduced, thereby reducing the complexity of collection. At the same time, the artificial intelligence module needs to have an analysis function. After the recognition is completed, the extracted information is analyzed, such as silk screen information analysis. The silk screen is generally the manufacturer's information, but no relevant information or other available information of the interface identification is allowed. The interface related information is also realized through intelligent recognition. The extracted information needs to be searched on the Internet to check whether there is relevant public information, and the keywords are identified to identify whether the identification information is related to the debugging port, chip reading, writing, and other related identification information that can be read and written to the chip. Finally, the processing is carried out to process the order of the test, and the different test phenomena or feedback results are processed to form the test results.

[0097] The artificial intelligence module designed in the present invention integrates different security test models corresponding to different information security test types. The security test model integrates normal test processes and abnormal test data corresponding to different tasks. The test data is tested based on the corresponding security test model, and the security test results of the vehicle-mounted system are output. Compared with direct comparison testing based on information security standards, the artificial intelligence module has higher efficiency and higher accuracy.

[0098] In an optional implementation, based on the task requirements to be tested selected by the user, first test data corresponding to the vehicle system is obtained through the access module, and / or, the safety test module corresponding to the task requirements to be tested is called to test the vehicle system with the corresponding task, and second test data fed back by the corresponding safety test module after the test is completed is obtained, including: based on the task requirements to be tested selected by the user, a normal test process corresponding to the task requirements to be tested is determined; based on the sequence of safety tests in the normal test process, a first test instruction is generated, and according to the content of the first test instruction, the first test instruction is sent to the access module, the test data corresponding to the vehicle system is obtained through the access module, and / or the first test instruction is sent to the safety test module corresponding to the task requirements to be tested to test the corresponding task; wherein, the first test instruction is sent to the safety test module corresponding to the task requirements to be tested to test the corresponding task; The test instruction is sent to the safety test module corresponding to the task to be tested to perform the test of the corresponding task, including: directly calling the safety test module corresponding to the task to be tested to test the vehicle system for the corresponding task, and / or calling the task to be tested to use the abnormal test data in the first test instruction to test the vehicle system for the corresponding task; after obtaining the test data obtained through the access module, and / or the test data fed back by the corresponding safety test module after completing the test, a second test instruction is generated according to the safety test sequence and test data, and the second test instruction is replaced with the first test instruction, and the step of sending the first test instruction to the access module according to the content of the first test instruction is repeated until the normal test process is completed and the first test data and the second test data corresponding to the task to be tested are obtained.

[0099] In the embodiment of the present invention, after the artificial intelligence module responds to the task requirements to be tested selected by the user, it can determine the normal test process corresponding to the task requirements to be tested based on the pre-trained security test model corresponding to the task requirements to be tested, that is, based on the security test sequence in the normal test process, the execution instructions are distributed to the access module and / or the corresponding security test module in sequence, and different test modules execute instructions in parallel, and the execution results are fed back to the artificial intelligence module for analysis. For example, the artificial intelligence module generates a first test instruction corresponding to the first test based on the security test sequence, and determines whether the content of the first test instruction is information that can be directly obtained through the access module, or whether the test tool in the security test module is directly called for testing, or whether the abnormal test data required for the task needs to be sent to the security test module, and then the security test module performs the test of the corresponding task.

[0100] After determining the content of the first test instruction, the first test instruction can be sent to the corresponding module for security testing of the corresponding instruction. After the test is completed, the access module and / or the corresponding security test module will feed back the test data, i.e., the execution result, to the artificial intelligence module. The artificial intelligence module can obtain the test data, analyze and make decisions, and then generate a second test instruction. Based on the content of the second test instruction, the access module and / or the corresponding security test module is called to perform the corresponding test to obtain the test data. The above steps are repeated until the normal test process is completed and the overall test data of the normal test process is obtained. The test data and execution results under each test instruction can also be obtained.

[0101] The artificial intelligence module of the embodiment of the present invention serves as the unified input and output interface of the system. It obtains the resources and permissions of the object under test through the access module, and distributes execution instructions to other test modules in sequence according to the actual task situation. Different test modules execute instructions in parallel and feed back the execution results to the artificial intelligence module for analysis. The unified management by the artificial intelligence module is conducive to the execution control of the entire automated test, accurately analyzes the situation of each execution process, improves the accuracy of the test, and each module operates in parallel to increase the test efficiency.

[0102] In an optional embodiment, the artificial intelligence module responds to its own functional error information sent by the security test module to be corrected, sets the function of the security test module to be corrected to an unavailable state, and prompts the user with the functional error information of the security test module to be corrected, so that the user can correct the error in the security test module to be corrected.

[0103] Among them, the self-function error information is that each safety test module performs a self-check after the safety test system of the vehicle system is powered on. When it is determined that its own safety test function cannot operate normally, the self-function error information is sent to the artificial intelligence module.

[0104] Each module in the embodiment of the present invention performs a self-check after power-on to detect whether the function is operating normally. If there is an error, the detailed parameters of the relevant error will be directly transmitted to the artificial intelligence module. The artificial intelligence module will display the error information and set the function of the corresponding module to an unavailable state. It will be available only after the error is corrected later. This can ensure the normal operation of the safety test and the accuracy of the test results, and avoid incorrect test results caused by module errors themselves.

[0105] like Fig.12 As shown, in this embodiment, a safety testing system for a vehicle-mounted system is also provided, which includes an artificial intelligence module, an access module, and safety testing modules corresponding to different information security testing types of the vehicle-mounted system, such as safety testing module 1, safety testing module 2...safety testing module n. As an example only, the access module establishes a corresponding connection with the vehicle-mounted system based on the task requirements to be tested selected by the user, and the artificial intelligence module establishes connections with the access module and the safety testing modules corresponding to each different security information test type respectively. The artificial intelligence module includes: a memory and a processor, the memory and the processor are communicatively connected to each other, computer instructions are stored in the memory, and the processor executes the safety testing method for the vehicle-mounted system described in the above embodiment by executing the computer instructions. For detailed description, please refer to the above embodiment, which will not be repeated here.

[0106] In this embodiment, a safety test device for a vehicle-mounted system is also provided, which is used to implement the above-mentioned embodiments and preferred implementation modes, and the descriptions that have been made will not be repeated. As used below, the term "module" can implement a combination of software and / or hardware for a predetermined function. Although the devices described in the following embodiments are preferably implemented in software, the implementation of hardware, or a combination of software and hardware, is also possible and conceivable.

[0107] The present embodiment provides a safety test device for an in-vehicle system, which is applied to an artificial intelligence module in a safety test system for the in-vehicle system. The safety test system for the in-vehicle system also includes an access module and safety test modules corresponding to different information security test types of the in-vehicle system. The access module establishes a corresponding connection with the in-vehicle system based on the task requirements to be tested selected by the user, and the artificial intelligence module establishes connections with the access module and the safety test modules corresponding to different safety information test types, such as Fig.13As shown, it includes: a task testing module 1301, which is used to respond to the test instructions of the task to be tested selected by the user, and based on the requirements of the task to be tested selected by the user, obtain the first test data corresponding to the vehicle system through the access module, and / or call the safety test module corresponding to the requirements of the task to be tested to test the corresponding task on the vehicle system, and obtain the second test data fed back by the corresponding safety test module after completing the test; a vehicle system safety testing module 1302, which is used to perform safety analysis on the first test data and / or the second test data based on the pre-integrated vehicle system safety testing standard, and determine the safety test result of the vehicle system.

[0108] The further functional description of each of the above modules and units is the same as that of the above corresponding embodiments and will not be repeated here.

[0109] The safety testing device of the vehicle-mounted system in this embodiment is presented in the form of a functional unit, where the unit refers to an ASIC (Application Specific Integrated Circuit) circuit, a processor and memory that executes one or more software or fixed programs, and / or other devices that can provide the above functions.

[0110] The embodiment of the present invention also provides an artificial intelligence module having the above Fig.13 Safety test setup for the in-vehicle system shown.

[0111] See also Fig.14 , Fig.14 is a schematic diagram of the structure of an artificial intelligence module provided by an optional embodiment of the present invention, such as Fig.14 As shown, the artificial intelligence module includes: one or more processors 10, a memory 20, and interfaces for connecting various components, including high-speed interfaces and low-speed interfaces. The various components are connected to each other using different buses for communication, and can be installed on a common motherboard or installed in other ways as needed. The processor can process instructions executed in the artificial intelligence module, including instructions stored in or on the memory to display graphical information of the GUI on an external input / output device (such as a display device coupled to the interface). In some optional embodiments, if necessary, multiple processors and / or multiple buses can be used together with multiple memories and multiple memories. Similarly, multiple artificial intelligence modules can be connected, and each device provides part of the necessary operations (for example, as a server array, a group of blade servers, or a multi-processor system). Fig.14 A processor 10 is taken as an example.

[0112] The processor 10 may be a central processing unit, a network processor or a combination thereof. The processor 10 may further include a hardware chip. The hardware chip may be a dedicated integrated circuit, a programmable logic device or a combination thereof. The programmable logic device may be a complex programmable logic device, a field programmable gate array, a general purpose array logic or any combination thereof.

[0113] The memory 20 stores instructions executable by at least one processor 10, so that at least one processor 10 executes the method shown in the above embodiment.

[0114] The memory 20 may include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required by at least one function; the data storage area may store data created according to the use of the artificial intelligence module, etc. In addition, the memory 20 may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some optional embodiments, the memory 20 may optionally include a memory remotely arranged relative to the processor 10, and these remote memories may be connected to the artificial intelligence module via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0115] The memory 20 may include a volatile memory, such as a random access memory; the memory may also include a non-volatile memory, such as a flash memory, a hard disk or a solid state drive; the memory 20 may also include a combination of the above types of memory.

[0116] The artificial intelligence module also includes an input device 30 and an output device 40. The processor 10, the memory 20, the input device 30 and the output device 40 can be connected via a bus or other means. Fig.14 The example of connecting through bus is taken in the following.

[0117] The input device 30 can receive input digital or character information, and generate key signal input related to the user settings and function control of the artificial intelligence module, such as a touch screen, a keypad, a mouse, a track pad, a touch pad, an indicator bar, one or more mouse buttons, a trackball, a joystick, etc. The output device 40 may include a display device, an auxiliary lighting device (e.g., an LED) and a tactile feedback device (e.g., a vibration motor), etc. The above-mentioned display device includes but is not limited to a liquid crystal display, a light emitting diode, a display and a plasma display. In some optional embodiments, the display device can be a touch screen.

[0118] The embodiment of the present invention also provides a computer-readable storage medium. The method according to the embodiment of the present invention can be implemented in hardware, firmware, or can be implemented as a computer code that can be recorded in a storage medium, or can be implemented as a computer code that is originally stored in a remote storage medium or a non-temporary machine-readable storage medium and will be stored in a local storage medium through a network download, so that the method described herein can be stored in such software processing on a storage medium using a general-purpose computer, a dedicated processor, or programmable or dedicated hardware. Among them, the storage medium can be a magnetic disk, an optical disk, a read-only storage memory, a random access memory, a flash memory, a hard disk or a solid-state hard disk, etc.; further, the storage medium can also include a combination of the above types of memories. It can be understood that a computer, a processor, a microprocessor controller, or programmable hardware includes a storage component that can store or receive software or computer code. When the software or computer code is accessed and executed by a computer, a processor, or hardware, the method shown in the above embodiment is implemented.

[0119] A part of the present invention may be applied as a computer program product, such as a computer program instruction, which, when executed by a computer, can call or provide the method and / or technical solution according to the present invention through the operation of the computer. Those skilled in the art should understand that the existence of the computer program instruction in a computer-readable medium includes, but is not limited to, a source file, an executable file, an installation package file, etc., and accordingly, the way in which the computer program instruction is executed by the computer includes, but is not limited to: the computer directly executes the instruction, or the computer compiles the instruction and then executes the corresponding compiled program, or the computer reads and executes the instruction, or the computer reads and installs the instruction and then executes the corresponding installed program. Here, the computer-readable medium may be any available computer-readable storage medium or communication medium accessible to the computer.

[0120] Although the embodiments of the present invention have been described in conjunction with the accompanying drawings, those skilled in the art may make various modifications and variations without departing from the spirit and scope of the present invention, and such modifications and variations are all within the scope defined by the appended claims.

Claims

1. A safety testing method for an in-vehicle system, characterized in that: An artificial intelligence module applied to a safety test system of an in-vehicle system, wherein the safety test system of the in-vehicle system further comprises an access module and safety test modules corresponding to different information security test types of the in-vehicle system, wherein the access module establishes a corresponding connection with the in-vehicle system based on the task requirements to be tested selected by the user, and the artificial intelligence module establishes connections with the access module and the safety test modules corresponding to different safety information test types respectively, wherein the method comprises: In response to the test instruction of the task to be tested selected by the user, based on the task requirements selected by the user, the first test data corresponding to the vehicle system is obtained through the access module, and / or the safety test module corresponding to the task requirements is called to test the vehicle system for the corresponding task, and the second test data fed back by the corresponding safety test module after the test is completed is obtained; Based on the pre-integrated vehicle system safety test standard, a safety analysis is performed on the first test data and / or the second test data to determine a safety test result of the vehicle system.

2. The method according to claim 1, characterized in that The security testing modules corresponding to the different information security testing types include at least a hardware security testing module, a communication security testing module, an operating system security testing module, an application software security testing module and a data security testing module.

3. According to the method of claim 2, the hardware security test module is integrated with a tool that can access and operate the debugging port of the vehicle system. If the task requirement to be tested includes testing the hardware security of the vehicle system, the first test data corresponding to the vehicle system is obtained through the access module, and / or the security test module corresponding to the task requirement to be tested is called to test the vehicle system for the corresponding task, and the second test data fed back by the corresponding security test module after the test is completed is obtained, including: Sending control information input to the vehicle-mounted system to the hardware security test module, calling the hardware security test module to access the debugging interface of the vehicle-mounted system, and inputting the control information to the vehicle-mounted system; Obtaining the process data fed back after the hardware safety test module completes access to the debugging interface of the vehicle system and inputs the control information, and / or, The development board image in the vehicle-mounted system is acquired through the access module, and the access module includes an image acquisition device for connecting with the debugging interface of the vehicle-mounted system to acquire the development board image.

4. The method according to claim 2, characterized in that: The communication security test module at least integrates a network card hardware, a port scanning tool, a packet capture tool and a packet tampering tool. If the task to be tested requires a test on the cellular network security of the vehicle-mounted system, the access module is connected to the cellular network of the vehicle-mounted system, and the first test data corresponding to the vehicle-mounted system is obtained through the access module, and / or the security test module corresponding to the task to be tested is called to test the vehicle-mounted system for the corresponding task, and the second test data fed back by the corresponding security test module after the test is completed is obtained, including: Call the communication security test module to scan the cellular network address of the vehicle system and connect to the open port; Obtaining the connection results between the communication security test module and the open port, and / or, Control the vehicle system to communicate via the cellular network through the access module, and use the packet capture tool of the communication security test module to capture data packets during the communication process, and / or, The data packet to be tampered is sent to the communication security test module, and the communication security test module is called to tamper with the data packet of the vehicle system based on the data packet to be tampered, and the response of the vehicle system to the data packet to be tampered is obtained.

5. The method according to claim 2, characterized in that: The communication security test module at least integrates WIFI network hardware, WIFI packet capture tools and brute force cracking tools. If the task requirement to be tested includes a test on the WIFI security of the vehicle system, the access module connects to the WIFI of the vehicle system, and the first test data corresponding to the vehicle system is obtained through the access module, and / or the security test module corresponding to the task requirement to be tested is called to test the vehicle system for the corresponding task, and the second test data fed back by the corresponding security test module after the test is completed is obtained, including: Access the vehicle system WIFI setting interface through the access module to obtain WIFI setting information, and / or, Change the WIFI password of the vehicle system to a password that does not meet the setting requirements through the access module, obtain the response information of the WIFI password change, and / or, Call the communication security test module to perform brute force cracking on the WIFI password, obtain the cracking result of the communication security test module performing brute force cracking on the WIFI password, and / or, Call the communication security test module to capture data packets using WIFI communication.

6. The method according to claim 2, characterized in that The communication security test module at least integrates Bluetooth hardware, Bluetooth packet capture tools and port scanning tools. If the task to be tested requires a Bluetooth security test on the vehicle-mounted system, the access module connects to the Bluetooth of the vehicle-mounted system, and the first test data corresponding to the vehicle-mounted system is obtained through the access module, and / or the security test module corresponding to the task to be tested is called to test the vehicle-mounted system for the corresponding task, and the second test data fed back by the corresponding security test module after the test is completed is obtained, including: Connect the Bluetooth of the vehicle system through the access module to obtain the process data of the Bluetooth connection, and / or, Call the communication security test module to traverse the Bluetooth of the vehicle system and obtain the device connection information of the Bluetooth port, and / or, Call the communication security test module to capture data packets using Bluetooth communication.

7. The method according to claim 2, characterized in that The operating system security test module at least integrates a remote access tool, a software debugging tool and an operating system vulnerability scanning tool, the access module is connected to the operating system in the vehicle system, the first test data corresponding to the vehicle system is obtained through the access module, and / or the security test module corresponding to the task requirement to be tested is called to test the vehicle system for the corresponding task, and the second test data fed back by the corresponding security test module after the test is completed is obtained, including: Calling the operating system security test module to access the operating system and obtain account information in the operating system, and / or, Send the operating system account to the operating system security test module, call the operating system security test module to log in to the system, and obtain the system login result. If the system login result is password protected, calling the operating system security test module to perform brute force cracking on the operating system to obtain the operating system cracking result, and / or, Calling the operating system security test module to perform a system privilege escalation operation on the operating system account, obtaining the system privilege escalation operation result, and / or, Accessing the operating system's operating attribute information through the access module to obtain access display data of the operating attribute information, wherein the operating attribute information at least includes location, text messages and phone calls, and / or, Sending the information related to the software to be tampered to the operating system security testing module, calling the operating system security testing module to debug the operating system software based on the information related to the software to be tampered, obtaining the debugging result of the operating system software by the operating system security testing module, and / or, Calling the operating system security test module to perform a system update on the operating system, obtaining the operating system's response data to the system update, and / or, Calling the operating system security test module to modify the log stored in the operating system, obtaining the operating system's response data to the log modification, and / or, The operating system security test module is called to scan the operating system for vulnerabilities and obtain the vulnerability scanning results of the operating system.

8. The method according to claim 2, characterized in that: The application software security testing module integrates at least an application installation tool, an application address scanning tool, a vulnerability scanning tool, an application reverse engineering tool, and an application Internet security detection tool. The access module obtains the first test data corresponding to the vehicle system, and / or calls the security testing module corresponding to the task to be tested to test the vehicle system for the corresponding task, and obtains the second test data fed back by the corresponding security testing module after completing the test, including: Sending the unauthorized application to the application software security testing module, calling the application software testing module to install the unauthorized application on the vehicle system, obtaining the vehicle system's installation response data to the unauthorized application, and / or, Call the application software security test module to access the application data storage address, so that the application software security test module scans whether there is sensitive information in the application data, Obtain the scanning results of the application software security testing module on sensitive information in the data, and / or, Calling the application software security testing module to perform vulnerability scans on various applications of the vehicle system, obtaining vulnerability scan results of the application software security testing module on various applications of the vehicle system, and / or, Calling the application software security testing module to detect the security of the application's running code using the application reverse tool, obtaining the detection result of the application software security testing module on the security of the application's running code using the application reverse tool, and / or, The application software security test module is called to trigger the Internet access function of each application and obtain the data of each application during the Internet access process.

9. The method according to claim 2, characterized in that: The data security test module at least integrates a storage address access tool, a data packet capture tool, a file operation tool, and a data deletion function. The access module obtains the first test data corresponding to the vehicle-mounted system, and / or calls the security test module corresponding to the task requirement to be tested to test the vehicle-mounted system for the corresponding task, and obtains the second test data fed back by the corresponding security test module after completing the test, including: Calling the data security test module to access the data storage address in the vehicle system, so that the data security test module detects whether there is sensitive information in the data; Obtain the detection result of the data security test module on whether there is sensitive information in the data, and / or, Calling the data security test module to perform unauthorized operations on the storage files in the vehicle system, obtaining the response data of the vehicle system to the unauthorized operations on the storage files, and / or, Calling the data packet capture tool in the data security test module to obtain data packets during data transmission, and / or, Call the data security test module to delete the target data in the vehicle system; After responding to feedback from the data security test module after the target data in the vehicle system is deleted, the data security test module is called to access the data storage address in the vehicle system to obtain the storage information of the target data in the vehicle system.

10. The method according to any one of claims 1 to 9, characterized in that: The artificial intelligence module integrates safety test models corresponding to different task requirements, and the safety analysis of the first test data and / or the second test data based on the pre-integrated vehicle system safety test standard is performed to determine the safety test result of the vehicle system, including: Inputting the first test data and / or the second test data acquired based on the requirements of the task to be tested into the corresponding safety test model, and outputting the vehicle system safety test result; The safety test model is trained through the following steps: Obtain a test data set for testing the vehicle system corresponding to the current task, wherein the test data set includes test data and corresponding safety test results, wherein the test data includes a normal test process and abnormal test data, and the safety test results are determined by analyzing the test data based on the vehicle system safety test standard; The initial safety test model corresponding to the preset current task is trained using the test data set for testing the vehicle system corresponding to the current task to obtain a trained safety test model corresponding to the current task, so that the trained safety test model corresponding to the current task integrates the normal test process and abnormal test data corresponding to the current task.

11. The method according to claim 10, characterized in that The method of acquiring first test data corresponding to the vehicle system through an access module based on the task requirement to be tested selected by the user, and / or calling a safety test module corresponding to the task requirement to be tested to test the vehicle system for the corresponding task, and acquiring second test data fed back by the corresponding safety test module after completing the test, includes: Based on the task requirement to be tested selected by the user, determine the normal test process corresponding to the task requirement to be tested; Based on the safety test sequence in the normal test process, a first test instruction is generated, and according to the content of the first test instruction, the first test instruction is sent to the access module, and the test data corresponding to the vehicle system is obtained through the access module, and / or the first test instruction is sent to the safety test module corresponding to the task to be tested to perform the test of the corresponding task; Among them, sending the first test instruction to the safety test module corresponding to the task requirement to be tested to test the corresponding task includes: directly calling the safety test module corresponding to the task requirement to be tested to test the vehicle system for the corresponding task, and / or calling the task requirement to be tested to test the vehicle system for the corresponding task using the abnormal test data in the first test instruction; After obtaining the test data obtained through the access module and / or the test data fed back by the corresponding security test module after completing the test, a second test instruction is generated according to the security test sequence and the test data, and the second test instruction is replaced with the first test instruction. The step of sending the first test instruction to the access module according to the content of the first test instruction is repeated until the normal test process is completed and the first test data and the second test data corresponding to the requirements of the task to be tested are obtained.

12. The method according to claim 1, characterized in that The method further comprises: In response to the self-function error information sent by the safety test module to be corrected, the function of the safety test module to be corrected is set to an unavailable state, and the function error information of the safety test module to be corrected is prompted to the user so that the user can correct the error of the safety test module to be corrected. The self-function error information is that each safety test module performs a self-check after the safety test system of the vehicle-mounted system is powered on. When it is determined that its own safety test function cannot operate normally, the self-function error information is sent to the artificial intelligence module.

13. A safety test device for a vehicle-mounted system, characterized in that: An artificial intelligence module applied to a safety test system of an on-board system, wherein the safety test system of the on-board system further comprises an access module and safety test modules corresponding to different information security test types of the on-board system, wherein the access module establishes a corresponding connection with the on-board system based on the task requirements to be tested selected by the user, and the artificial intelligence module establishes connections with the access module and the safety test modules corresponding to each different security information test type, respectively, and the device comprises: A task testing module, which is used to respond to a test instruction of a task to be tested selected by a user, obtain first test data corresponding to the vehicle system through an access module based on the task requirements to be tested selected by the user, and / or call a safety test module corresponding to the task requirements to test the vehicle system for the corresponding task, and obtain second test data fed back by the corresponding safety test module after completing the test; The vehicle system safety test module is used to perform safety analysis on the first test data and / or the second test data based on a pre-integrated vehicle system safety test standard to determine a safety test result of the vehicle system.

14. A safety test system for an in-vehicle system, characterized in that: The safety testing system of the vehicle-mounted system includes an artificial intelligence module, an access module and safety testing modules corresponding to different information security testing types of the vehicle-mounted system. The access module establishes a corresponding connection with the vehicle-mounted system based on the requirements of the task to be tested selected by the user. The artificial intelligence module establishes connections with the access module and the safety testing modules corresponding to each different security information test type respectively. The artificial intelligence module includes: a memory and a processor. The memory and the processor are communicatively connected with each other. Computer instructions are stored in the memory. The processor executes the computer instructions to execute the safety testing method of the vehicle-mounted system described in any one of claims 1 to 12.

15. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a computer to execute the safety testing method for the vehicle-mounted system according to any one of claims 1 to 12.

16. A computer program product, characterized in that The method comprises computer instructions, wherein the computer instructions are used to cause a computer to execute the safety testing method for the vehicle-mounted system according to any one of claims 1 to 12.

Images