Vulnerability testing method and device of vehicle-mounted system, electronic equipment and storage medium

Abstract

The invention relates to a vulnerability testing method and device for a vehicle-mounted system, electronic equipment and a storage medium. The method comprises the following steps: analyzing a vulnerability library of a target vehicle-mounted system, and determining a plurality of vulnerability categories and the number of vulnerabilities contained in each vulnerability category; based on a preset coverage strategy, determining a combination coverage degree according to the plurality of vulnerability categories and the number of vulnerabilities contained in each vulnerability category, selecting a vulnerability category meeting a preset number from the plurality of vulnerability categories as a target parameter according to the combination coverage degree, and generating a target vulnerability combination test case set based on the target parameter; and identifying the security risk of the target vehicle-mounted system by using a target attack path set generated based on the target vulnerability combination test case set. Therefore, based on the vehicle-mounted vulnerability library, the vulnerabilities are combined and the attack chain is constructed by adopting a combined test idea, so that the problems of overlarge sample space and low test efficiency in the existing vehicle-mounted system vulnerability test technology are solved, and the number of test cases is remarkably reduced, thereby improving the test efficiency.

Images