Airplane information security protection measure effectiveness evaluation system and method

Abstract

The invention provides an aircraft information security protection measure effectiveness evaluation system and method, and relates to the field of aircraft information security. According to the system, for a specific threat scene of an aircraft, an effectiveness score of a security protection measure is independently evaluated from three aspects of preparation difficulty, attack window and execution difficulty of network attack implementation, the effectiveness score is corrected through dependency analysis, and finally a comprehensive effectiveness score of the security protection measure is obtained. According to the system and the method provided by the invention, the security measure effectiveness evaluation granularity is more detailed, and the quantifiable degree is improved, so that the accuracy of security risk evaluation in an aircraft design stage can be improved.

Description

Technical Field

[0001] The present invention relates to the field of aircraft information security, and in particular provides an aircraft information security protection measure effectiveness evaluation system and method. Background Art

[0002] Aircraft face potential threats from cyberspace at different stages of flight, maintenance and operation. Traditional methods for evaluating the effectiveness of aircraft security protection measures mostly rely on expert systems to conduct empirical qualitative analysis of information security risks of aircraft and systems. This method can evaluate the information security status of aircraft to a certain extent, but it is difficult to provide accurate and quantitative evaluation of the effectiveness of protection measures because it relies too much on the subjective judgment of experts.

[0003] At the same time, with the continuous development of attack technology, the complexity of threats is also increasing. The diversification of attack methods, the improvement of attackers' capabilities, and the high-speed and Internet-based aircraft air-ground communications make simple qualitative assessments insufficient to meet the current needs of aircraft security effectiveness evaluation. Summary of the invention

[0004] The purpose of this application is to solve the problem of effectiveness evaluation of aircraft information security protection measures in the prior art, and to provide an aircraft information security protection measure effectiveness evaluation system and method, which independently evaluates the effectiveness scores of security protection measures from three aspects: the difficulty of preparation for network attacks, the attack window, and the difficulty of execution, and corrects the effectiveness scores based on the dependency analysis between security measures and the upper limit of a single category score, and finally derives the comprehensive effectiveness scores of security measures under specific threat scenarios of aircraft.

[0005] In order to achieve the above-mentioned purpose, the present invention adopts the following technical scheme: an aircraft information security protection measures effectiveness evaluation system, the system comprising:

[0006] Data collection module, used to collect relevant data on aircraft information security protection measures, including network topology, protection strategy, attack path, equipment configuration and potential threat information;

[0007] The preparation measures module is used to assess the difficulty of preparing for a cyberattack and analyze the complexity and feasibility of obtaining the resources required for the attack from the attacker's perspective to generate a corresponding preparation stage effectiveness score;

[0008] The attack timing module is used to analyze the attack window size under specific protection measures to evaluate the time limit of the protection measures on the attacker during the attack process and generate a corresponding time window effectiveness score;

[0009] The execution means module is used to evaluate the difficulty of executing the attack, analyze the interference and detection capabilities of specific protection measures on the attack execution, and thus generate the effectiveness score of the execution stage;

[0010] The comprehensive security effectiveness calculation module is used to integrate the effectiveness scores of the preparation phase, the time window, and the execution phase, and make corrections based on the dependencies between security measures and the upper limit of a single category score to obtain a comprehensive effectiveness score;

[0011] The output module is used to output the comprehensive security effectiveness score and the scoring results of each stage to support the security risk assessment in the aircraft design stage.

[0012] The aircraft information security protection measures effectiveness evaluation system provided by the present invention also has the following technical characteristics: the scoring basis of the preparation measures module includes the required internal information complexity, preparation time requirements and whether special equipment is required.

[0013] The aircraft information security protection measures effectiveness evaluation system provided by the present invention also has such a technical feature that the scoring basis of the attack timing module is the length of the time window available to the attacker under the effect of the protection measures.

[0014] The aircraft information security protection measures effectiveness evaluation system provided by the present invention also has such a technical feature that the scoring basis of the execution means module includes the degree of professional skills required to execute the attack and the demand for special equipment.

[0015] Another object of the present invention is to provide a method for evaluating the effectiveness of aircraft information security protection measures, the evaluation method being implemented based on the effectiveness evaluation system provided by any of the above items, comprising:

[0016] S1: Determine aircraft threat scenarios and corresponding security measures;

[0017] S2: Classify security measures into “preparatory measures”, “timing of attack” and “means of execution”;

[0018] S3: Independent scoring of the effectiveness of security measures according to each category;

[0019] S4: Calculate the effectiveness score of each security measure comprehensively, and make corrections based on the interdependence between security measures to obtain a comprehensive effectiveness score;

[0020] S5: Output the comprehensive effectiveness score and the score results of each stage for security risk assessment in the aircraft design stage.

[0021] The method for evaluating the effectiveness of aircraft information security protection measures provided by the present invention also has the following technical features: In S3:

[0022] The score for “preparatory measures” is based on the complexity of the internal information required, the preparation time, and the need for specialized equipment;

[0023] The scoring of "Attack Opportunity" is based on the length of the time window that the attacker can exploit under the effect of the protection measures;

[0024] Scoring for “Means of Execution” is based on factors including the degree of expertise and specialized equipment required to carry out the attack.

[0025] Beneficial Effects

[0026] The aircraft information security protection measures effectiveness evaluation system and method provided by the present invention independently evaluates the effectiveness scores of security protection measures from three aspects: the difficulty of preparation for implementing a network attack, the attack window, and the difficulty of execution. The effectiveness scores are corrected based on the dependency analysis between security measures and the upper limit of a single category score, and finally the comprehensive effectiveness scores of security measures under aircraft-specific threat scenarios are obtained, thereby improving the accuracy of security risk assessment in the aircraft design stage. BRIEF DESCRIPTION OF THE DRAWINGS

[0027] In order to more clearly illustrate the technical solutions of the embodiments of the present disclosure, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present disclosure. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0028] Figure 1 A framework diagram of an aircraft information security protection measures effectiveness evaluation system provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0029] The present application is further described in detail below in conjunction with the accompanying drawings and examples, but it should be noted that these implementation methods are not limitations of the present application, and equivalent changes or substitutions in functions, methods, or structures made by ordinary technicians in the field based on these implementation methods are all within the scope of protection of the present application.

[0030] In the description of the embodiments of the present application, it should be understood that the terms "center", "longitudinal", "lateral", "up", "down", "front", "back", "left", "right", "vertical", "horizontal", "top", "bottom", "inside", "outside", etc., indicating the orientation or position relationship, are based on the orientation or position relationship shown in the accompanying drawings, and are only for the convenience of describing the creation of the present application and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as a limitation on the creation of the present application.

[0031] In addition, the terms "first", "second", "third", etc. are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Thus, a feature defined as "first", "second", etc. may explicitly or implicitly include one or more of the features. In the description of the invention of this application, unless otherwise specified, the meaning of "plurality" is two or more.

[0032] The terms "installed", "connected" and "connected" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection or an indirect connection through an intermediate medium, or it can be the internal communication of two components. For ordinary technicians in this field, the specific meanings of the above terms in the invention of this application can be understood by specific circumstances.

[0033] like Figure 1 As shown, an embodiment of the present application provides an aircraft information security protection measures effectiveness evaluation system, the system comprising:

[0034] Data collection module, used to collect relevant data on aircraft information security protection measures, including network topology, protection strategy, attack path, equipment configuration and potential threat information;

[0035] The preparation measures module is used to evaluate the difficulty of preparing for a cyber attack and analyze the complexity and feasibility of obtaining the resources required for the attack from the attacker's perspective to generate a corresponding preparation stage effectiveness score, including evaluation of factors such as attack tools, technical difficulty, time requirements, and environmental constraints, to provide support for the effectiveness score of protective measures in the attack preparation stage.

[0036] The attack timing module is used to analyze the attack window size under specific protection measures, that is, the available time or response time of the protection measures during the attack process, so as to evaluate the time limit of the protection measures on the attacker during the attack process and generate the corresponding time window effectiveness score. This module measures the time window for the attacker to complete the attack under the action of different protection measures, and provides a scoring basis for evaluating the effectiveness of the protection measures in delaying or preventing attacks;

[0037] The execution means module is used to evaluate the difficulty of executing an attack, analyze the interference and detection capabilities of specific protective measures on the execution of the attack, and thus generate an execution phase effectiveness score. The analysis focus of this module is to independently evaluate the effectiveness of security measures in the execution phase through aspects such as the degree of interference of protective measures on the execution of the attack, potential detection capabilities, and blocking capabilities;

[0038] The comprehensive security effectiveness calculation module is used to integrate the effectiveness scores of the preparation phase, the time window, and the execution phase, and make corrections based on the dependencies between security measures and the upper limit of a single category score to obtain a comprehensive effectiveness score;

[0039] The output module is used to output the comprehensive security effectiveness score and the scoring results of each stage to support the security risk assessment in the aircraft design stage, provide an intuitive and quantifiable basis for the security risk assessment in the aircraft design stage, and can be further analyzed and improved by designers or security experts.

[0040] In some embodiments, the scoring criteria of the preparedness module include the required internal information complexity, preparation time requirements, and whether special equipment is required.

[0041] In some embodiments, the scoring of the attack opportunity module is based on the length of the time window that the attacker can use under the effect of the protection measures.

[0042] In some embodiments, the scoring criteria of the execution means module include the degree of professional skills and the need for specialized equipment required to execute the attack.

[0043] Based on the same technical concept, a method for evaluating the effectiveness of aircraft information security protection measures is provided. The evaluation method is implemented based on the effectiveness evaluation system provided by any of the above items, and includes:

[0044] S1: Determine aircraft threat scenarios and corresponding security measures;

[0045] S2: Classify security measures into “preparatory measures”, “timing of attack” and “means of execution”;

[0046] S3: Independent scoring of the effectiveness of security measures according to each category;

[0047] S4: Calculate the effectiveness score of each security measure comprehensively, and make corrections based on the interdependence between security measures to obtain a comprehensive effectiveness score;

[0048] S5: Output the comprehensive effectiveness score and the score results of each stage for security risk assessment in the aircraft design stage.

[0049] In some embodiments, in S3:

[0050] The score for “preparatory measures” is based on the complexity of the internal information required, the preparation time, and the need for specialized equipment;

[0051] The scoring of "Attack Opportunity" is based on the length of the time window that the attacker can exploit under the effect of the protection measures;

[0052] Scoring for “Means of Execution” is based on factors including the degree of expertise and specialized equipment required to carry out the attack.

[0053] In some embodiments, a method for evaluating the effectiveness of aircraft information security measures is provided, comprising:

[0054] S1. Determine the aircraft threat scenario and n security measures SM1-SM for the threat scenario n ;

[0055] S2, SM1-SM n Classification.

[0056] First, they are classified into "preparatory measures", "attack timing" and "implementation means". "Preparatory measures" refer to security measures that act on various activities required to carry out an attack (including technical activities and intelligence activities, etc.) and increase the difficulty of preparation; "attack timing" refers to security measures that reduce the possibility of an attack to certain time periods and / or physical locations; "implementation means" refers to security measures that act on all activities that an attacker may take to attack a target;

[0057] Further, based on the previous step, SM1-SM n Subdivide by "reducing exposure" or "protection". "Reducing exposure" refers to reducing the chance of a system, device or network being exposed to potential threats; "protection" refers to how to minimize the impact of an attack or prevent the threat from spreading further when the system or network is attacked.

[0058] Further, based on the previous step, SM1-SM n It is further subdivided into “technical” and “non-technical”. “Technical” refers to equipment or software-based security measures; “non-technical” refers to operational, organizational or procedural security measures.

[0059] S3. According to the above classification, SM1-SM n The effectiveness is evaluated and the effectiveness score is recorded as E SM1 -E SMn , the evaluation principles are as follows:

[0060] For preparation measures: Comprehensive scoring is conducted from the two dimensions of "knowledge" and "equipment". The scoring of the "knowledge" dimension is based on "internal information required" or "preparation time required". The less internal information required (or no internal information required) or the less preparation time required, the lower the score; otherwise, the higher the score. The scoring of the "equipment" dimension is based on "whether special equipment is required". If no equipment is required or the degree of customization of the required equipment is low, the score is low; otherwise, the score is high. The lowest score is 0, and the upper limit of a single security measure is E. p-max-s .

[0061] Regarding the timing of the attack: The scoring of the "timing of the attack" is based on the "length of the time window in which the attack can be carried out". The longer the time window, the lower the score, with the lowest score being 0. Conversely, the higher the score, the upper limit of the score for a single security measure is E. w-max-s .

[0062] For the means of implementation: The scoring of "means of implementation" is comprehensively scored from the two dimensions of "professional skills" and "equipment". The scoring of the "professional skills" dimension is based on "whether experts are needed" or "whether experts in multiple fields are needed". If no experts are needed or the professional level of the experts is low, the score will be lower; otherwise, the score will be higher. The scoring of the "equipment" dimension is based on "whether special equipment is needed". If no equipment is needed or the degree of customization of the equipment is low, the score will be lower; otherwise, the score will be higher. The lowest score is 0 and the upper limit is E. e-max-s .

[0063] S4. Calculate SM1-SM step by step n overall protection effectiveness.

[0064] (1) SM1-SM n Calculate the security effectiveness of each type of security measure step by step and sum them up step by step.

[0065] The steps are generally divided into four steps: Step 1, calculate the protection effectiveness of "exposure reduction-technology"; Step 2, calculate the protection effectiveness of "exposure reduction-non-technology" and sum it with the result of the previous step; Step 3, calculate the protection effectiveness of "protection-technology" and sum it with the result of the previous step; Step 4, calculate the protection effectiveness of "protection-non-technology" and sum it with the result of the previous step.

[0066] Step 1: In the “Exposure Reduction-Technology” category, sum the comprehensive security effectiveness scores of “Preparation Means”, “Optimal Time” and “Implementation Means”, and record the summed score as E1, to obtain the protection effectiveness A1 of the “Exposure Reduction-Technology” category in step 1, A1=E1+0 (0 is the initial protection score);

[0067] Step 2: Similarly, in the “Exposure Reduction-Non-Technical” category, sum the comprehensive security effectiveness scores of “Preparation Measures”, “Optimal Time” and “Implementation Measures”, and record the summed score as E2, to obtain the protection effectiveness A2 of the “Exposure Reduction-Non-Technical” category in step 2, A2=A1+E2;

[0068] Step 3, similarly, in the “protection-technology” category, sum the comprehensive security effectiveness scores of “preparation means”, “optimal timing” and “implementation means”, and record the summed score as E3, to obtain the protection effectiveness A3 of the “protection-technology” category in step 3, A3 = A2 + E3;

[0069] Step 4. Finally, in the “Protection-Non-Technical” category, sum the comprehensive security effectiveness scores of “Preparation Measures”, “Best Opportunity” and “Execution Measures”. The summed score is recorded as E4, and the protection effectiveness A4 of the “Protection-Non-Technical” category in Step 4 is obtained, A4=A3+E4.

[0070] At this point, the summation result A4 of the protection effectiveness is obtained.

[0071] (2) SM1-SM n The effectiveness scores of each category of "preparation means", "optimal timing" and "implementation means" are summed up, and the overflow value of each category's effectiveness and its effectiveness score upper limit is calculated.

[0072] Step 1: Sum the effectiveness of security measures in the “preparatory measures” category and record the result as E p . p The upper limit of the effectiveness of the “preparatory means” (denoted as E p-max ) to obtain the security effectiveness overflow value c of the "preparation means" category p ,c p =max(E p -E p-max ,0)(where max(a,b) is the maximum value of a and b);

[0073] Step 2: Sum the effectiveness of security measures in the “best time” category and record the result as E w . w The upper limit of the effectiveness of the "best time" (denoted as E w-max ) to obtain the security effectiveness overflow value c of the “best time” category. w ,c w =max(E w -E w-max ,0);

[0074] Step 3: Sum the effectiveness of security measures in the “implementation means” category and record the result as E e . e The upper limit of the effectiveness of the “implementation means” (denoted as E e-max ) to obtain the security effectiveness overflow value c of the “best time” category. e ,c e =max(E e -E e-max ,0);

[0075] Step 4: Obtain the total security effectiveness overflow value c = c p +c w +c e .

[0076] (3) Calculate the overall security effectiveness.

[0077] The total security effectiveness (denoted as A) is calculated by dividing SM1-SM n The difference between the effectiveness and value A4 calculated according to the steps and the total security effectiveness overflow value c is calculated, and it does not exceed the upper limit of the total security effectiveness (denoted as E max ), that is, A=min(A4–c,E max )(where min(a,b) is the minimum value of a and b).

[0078] The calculation results of the effectiveness scores are shown in Table 1:

[0079] Table 1: Results of validity score calculation

[0080]

[0081] S5. Use the total effectiveness A to evaluate the effectiveness of comprehensive security measures in specific threat scenarios. The ratio evaluation method (based on A / E max ) or difference evaluation method (based on AE max )Grade and classify security effectiveness.

[0082] The above is only a preferred embodiment of the present application and is not intended to limit the present application. Any modifications, equivalent replacements and improvements made within the spirit and principles of the present application shall be included in the protection scope of the present application. The above is only a preferred implementation of the present application. It should be pointed out that for ordinary technicians in this technical field, several improvements and variations can be made without departing from the technical principles of the present application, and these improvements and variations should also be regarded as the protection scope of the present application.

Claims

1. An aircraft information security protection measures effectiveness evaluation system, characterized in that: The system comprises: Data collection module, used to collect relevant data on aircraft information security protection measures, including network topology, protection strategy, attack path, equipment configuration and potential threat information; The preparation measures module is used to assess the difficulty of preparing for a cyberattack and analyze the complexity and feasibility of obtaining the resources required for the attack from the attacker's perspective to generate a corresponding preparation stage effectiveness score; The attack timing module is used to analyze the attack window size under specific protection measures to evaluate the time limit of the protection measures on the attacker during the attack process and generate a corresponding time window effectiveness score; The execution means module is used to evaluate the difficulty of executing the attack, analyze the interference and detection capabilities of specific protection measures on the attack execution, and thus generate the effectiveness score of the execution stage; The comprehensive security effectiveness calculation module is used to integrate the effectiveness scores of the preparation phase, the time window, and the execution phase, and make corrections based on the dependencies between security measures and the upper limit of a single category score to obtain a comprehensive effectiveness score; The output module is used to output the comprehensive security effectiveness score and the scoring results of each stage to support the security risk assessment in the aircraft design stage.

2. The aircraft information security protection measures effectiveness evaluation system according to claim 1, characterized in that: The preparation measures module is scored based on the complexity of the internal information required, the preparation time required, and whether special equipment is required.

3. The aircraft information security protection measures effectiveness evaluation system according to claim 1, characterized in that: The scoring of the attack timing module is based on the length of the time window that the attacker can exploit under the effect of the protection measures.

4. The aircraft information security protection measures effectiveness evaluation system according to claim 1, characterized in that: The scoring of the execution means module is based on the degree of expertise and the need for specialized equipment required to execute the attack.

5. A method for evaluating the effectiveness of aircraft information security protection measures, characterized in that: The evaluation method is implemented based on the effectiveness evaluation system provided by any one of claims 1 to 4, and includes: S1: Determine aircraft threat scenarios and corresponding security measures; S2: Classify security measures into "preparatory measures", "timing of attack" and "implementation means"; S3: Independent scoring of the effectiveness of security measures according to each category; S4: Calculate the effectiveness score of each security measure comprehensively, and make corrections based on the interdependence between security measures to obtain a comprehensive effectiveness score; S5: Output the comprehensive effectiveness score and the score results of each stage for security risk assessment in the aircraft design stage.

6. The method for evaluating the effectiveness of aircraft information security protection measures according to claim 5, characterized in that: In S3: "Preparatory measures" are scored based on the complexity of the internal information required, preparation time, and the need for specialized equipment; The scoring of "Attack Opportunity" is based on the length of the time window that the attacker can exploit under the effect of the protection measures; Scoring for "Means of Execution" is based on factors including the degree of expertise and specialized equipment required to carry out the attack.

Images