Information security test method and device, electronic equipment and storage medium

Abstract

The invention provides an information security test method and device, electronic equipment and a storage medium. The method comprises the following steps: acquiring a to-be-tested information authorization path combination; based on the to-be-tested information authorization path combination, obtaining screen video stream information, a plurality of types of communication protocol information and a plurality of pieces of in-vehicle interaction information of a to-be-detected vehicle; and inputting the screen video stream information, the plurality of types of communication protocol information and the plurality of vehicle-machine interaction information into a pre-trained test strategy generation model, and outputting an information security test report conforming to a preset standard, thereby avoiding manual operation, improving the test coverage rate and test efficiency, and reducing errors at the same time.

Description

Technical Field

[0001] This application relates to the field of vehicle technology, and in particular to an information security testing method, apparatus, electronic device, and storage medium. Background Technology

[0002] Modern intelligent connected vehicles contain a large amount of information, including sensitive data such as user identity information, driving data, and geographical location. Without effective information security testing, hackers could exploit vulnerabilities in the vehicle's infotainment system to steal or tamper with data, or even remotely control the vehicle, seriously threatening user privacy and personal safety.

[0003] Currently, vehicle information security testing mainly relies on manual operation, which is completed by selecting preset scripts or manually inputting data. Afterwards, testers manually check the obtained test results against industry standard rules one by one to determine the compliance of the test results.

[0004] However, due to the increasingly complex combination of information authorization paths in vehicle systems, it is difficult to conduct information security tests on all authorized paths in the vehicle system by relying on manual operation, resulting in insufficient test coverage. Moreover, relying on manual operation is inefficient and prone to errors. Summary of the Invention

[0005] In view of this, this application aims to propose an information security testing method, apparatus, electronic device, and storage medium to solve the problems of insufficient test coverage caused by the reliance on manual operation in current vehicle information security testing, which makes it difficult to achieve information security testing of all authorized paths in the vehicle system. Moreover, the reliance on manual operation is inefficient and prone to errors. The specific technical solution is as follows: According to a first aspect of this application, an information security testing method is provided, the method comprising: Obtain the authorized path combination for the information to be tested; Based on the information authorization path combination to be tested, obtain the screen video stream information of the vehicle to be tested, several types of communication protocol information and several vehicle-machine interaction information; The screen video stream information, several types of communication protocol information, and several types of vehicle-machine interaction information are input into a pre-trained test strategy generation model, and an information security test report that meets preset standards is output.

[0006] Optionally, after obtaining the screen video stream information, several types of communication protocol information, and several vehicle-to-machine interaction information of the vehicle to be tested based on the information authorization path combination to be tested, the method further includes: The first timestamp of the screen video stream information is obtained, and the second timestamp of several types of communication protocol information is obtained, with different second timestamps for different communication protocol information; Obtain the transmission delay of different channels for different communication protocols; For any of the aforementioned communication protocol information, the channel transmission delay corresponding to the communication protocol information is fed into a preset timestamp alignment algorithm, and then the first timestamp and the second timestamp of the communication protocol information are aligned using the preset timestamp alignment algorithm.

[0007] Optionally, based on the information authorization path combination to be tested, the screen video stream information of the vehicle to be tested, several types of communication protocol information, and several vehicle-machine interaction information are obtained, including: Obtain the authorized path combination of the trained information in the test strategy generation model; For any information authorization path in the combination of information authorization paths to be tested, determine whether the information authorization path belongs to the trained information authorization path combination; If so, based on the information authorization path to be tested, obtain the screen video stream information of the vehicle to be tested, several types of communication protocol information and several vehicle-machine interaction information; If not, obtain the relevant information pre-marked by the information authorization path and update the pre-marked relevant information to the test strategy generation model.

[0008] Optionally, after inputting the screen video stream information, several types of communication protocol information, and several types of vehicle-to-machine interaction information into a pre-trained test strategy generation model and outputting an information security test report that conforms to preset standards, the method further includes: The information security test report is used to determine whether there are information vulnerabilities in the screen video stream information, the various types of communication protocol information, and the various types of vehicle-machine interaction information. If present, obtain the severity score of the information vulnerability and the timeout operation deduction score, and obtain the number of newly added authorized path combinations of trained information after comparing the current test and the previous test; The severity score, the timeout penalty, and the number of newly added combinations of the trained information authorized paths are substituted into a preset reward function to obtain the final score. The final score will be used to determine whether the test strategy generation model should be adjusted based on the information security test report.

[0009] Optionally, the formula for the reward function is as follows:

[0010] Wherein, ΔCov is the number of new authorized path combinations of trained information after comparing the current test with the previous test, ΔVuln is the severity score of the information vulnerability, ΔT is the timeout operation deduction score of the information vulnerability, ω1 is the corresponding weight of ΔCov, ω2 is the corresponding weight of ΔVuln, and ω3 is the corresponding weight of ΔT.

[0011] Optionally, the communication protocol includes a controller area network (CAN) communication protocol, an Ethernet communication protocol, and a Bluetooth communication protocol. The information security test report includes the anomaly type of the CAN message, and the CAN message is transmitted based on the CAN communication protocol. The steps for obtaining the anomaly type of the controller area network (CLAN) packets in the information security test report include: Determine whether the communication protocol information contains a controller area network (CLAN) message; If so, the pre-set controller LAN packet mutation identification algorithm is used to identify the controller LAN packet and obtain an anomaly identification score. The anomaly identification score is used to determine the anomaly type of the controller LAN packet; Add the anomaly type to the information security test report that meets the preset standards.

[0012] Optionally, the step of inputting the screen video stream information, several types of communication protocol information, and several types of vehicle-machine interaction information into a pre-trained test strategy generation model, and outputting an information security test report that conforms to preset standards, further includes: The screen video stream information is determined by the combination of the information authorization path to be tested, the combination of several types of communication protocol information and several types of vehicle-machine interaction information, and the test cases obtained based on the combination method; After inputting the screen video stream information, several types of communication protocol information and several types of vehicle-machine interaction information into a pre-trained test strategy generation model, different protocol fields corresponding to different test cases are obtained. The importance scores for different protocol fields are obtained through a preset priority sorting algorithm. The order of testing different test cases is determined by the importance scores. Based on the test sequence, different test cases are tested in the test strategy generation model, and an information security test report that meets the preset standards is output.

[0013] According to a second aspect of this application, an information security testing apparatus is provided, the apparatus comprising: The first acquisition module is used to acquire the authorized path combination of the information to be tested; The second acquisition module is used to acquire screen video stream information, several types of communication protocol information and several vehicle-machine interaction information of the vehicle to be tested based on the information authorization path combination to be tested. The input / output module is used to input the screen video stream information, several types of communication protocol information and several types of vehicle-machine interaction information into a pre-trained test strategy generation model, and output an information security test report that meets preset standards.

[0014] According to another aspect of this application, an electronic device is also provided, comprising: processor; Memory used to store the processor's executable instructions; The processor is configured to execute the instructions to implement the information security testing method described above.

[0015] According to another aspect of the present invention, a readable storage medium is also provided, on which a computer program is stored, which, when executed by a processor, implements the steps of the information security testing method described above.

[0016] The information security testing method provided in this application obtains the authorized path combination of the information to be tested. By automatically obtaining the authorized path combination, it avoids the problem of human error in overlooking complex paths, ensuring that the test covers all possible interaction scenarios and improving the test coverage. At the same time, it limits the subsequent data acquisition scenarios and avoids obtaining invalid data. Based on the authorized path combination of the information to be tested, it obtains the screen video stream information, several types of communication protocol information, and several vehicle-machine interaction information of the vehicle to be tested. By obtaining multiple types of data, multi-dimensional security detection of the vehicle system can be performed during subsequent model detection, reducing blind spots. Moreover, obtaining multiple types of communication protocol information can be used for subsequent compliance verification of cross-level data streams. The screen video stream information, several types of communication protocol information, and several vehicle-machine interaction information are input into a pre-trained test strategy to generate a model, which outputs an information security test report that meets preset standards. The information security test is performed using the pre-trained test strategy to generate a model and automatically outputs the test results. This can replace traditional manual operation, shorten the test cycle, and automatically generate reports based on preset standards, further avoiding reliance on manual operation, improving efficiency and reducing errors.

[0017] The above description is only an overview of the technical solution of this application. In order to better understand the technical means of this application and to implement it in accordance with the contents of the specification, and to make the above and other objects, features and advantages of this application more obvious and understandable, specific embodiments of this application are given below. Attached Figure Description

[0018] Various other advantages and benefits will become apparent to those skilled in the art upon reading the following detailed description of preferred embodiments. The accompanying drawings are for illustrative purposes only and are not intended to limit the scope of this application. Furthermore, the same reference numerals denote the same parts throughout the drawings. In the drawings: Figure 1 This is a flowchart of the steps of an information security testing method provided in this application; Figure 2 yes Figure 1 The flowchart shown is a step 102 of an information security testing method provided in this application; Figure 3 yes Figure 1 The flowchart shown is a step 103 of an information security testing method provided in this application; Figure 4 This is a schematic diagram of the structure of an information security testing device provided in this application; Figure 5 This is a schematic diagram of the structure of an electronic device provided in this application. Detailed Implementation

[0019] To make the objectives, technical solutions, and advantages of this application clearer, the various embodiments of this application will be described in detail below with reference to the accompanying drawings. However, those skilled in the art will understand that many technical details have been provided in the various embodiments of this application to facilitate a better understanding of the application. However, the technical solutions claimed in this application can be implemented even without these technical details and with various variations and modifications based on the following embodiments. The division of the various embodiments below is for ease of description and should not constitute any limitation on the specific implementation of this application. The various embodiments can be combined with and referenced by each other without contradiction.

[0020] Traditional vehicle infotainment system (VMS) data security testing processes rely on manual operation. According to Clause 5.2.3 of GB / T 44495 "Automotive Data Processing Security Requirements," achieving "full authorization path coverage" requires manually triggering over 2000 authorization operations, which is time-consuming. Furthermore, because paths are subject to updates and changes, it's impossible to ensure complete verification of all user authorization scenarios (such as privacy policy pop-ups and data collection switches), resulting in insufficient path testing coverage. In addition, existing testing methods cannot simultaneously monitor VMS screen operation logs (such as UI click events) and underlying Controller Area Network (CAN) messages and Ethernet communication data. This makes it difficult to verify the compliance of cross-level data flows (such as whether the system still illegally uploads data after the user refuses authorization). Moreover, the compliance determination of test results still relies on manual comparison with standard documents (such as Clause 7.1.2 of GB / T 44495), which is prone to human error. Based on the above problems, this application proposes an information security testing method. (Refer to...) Figure 1 The diagram illustrates a flowchart of an information security testing method provided in this application, the method comprising: Step 101: Obtain the authorized path combination of the information to be tested.

[0021] The information authorization path in this application refers to the complete chain of permission application, verification, and execution involved when a user or external system accesses sensitive data or functions of the vehicle system through different interaction methods. The information authorization path combination includes at least one information authorization path.

[0022] For example, if the test scenario involves a map application requesting location permissions, the authorization path for the information to be tested is: user clicks on the navigation app → a permission request pop-up appears → user selects "Allow" → system records the authorization status → app obtains GPS data via API → data is transmitted to the map service via CAN bus. If the test scenario involves OTA upgrade package signature verification, the authorization path for the information to be tested is: vehicle system receives OTA server push → verifies upgrade package digital signature → after verification, writes to the Electronic Control Unit (ECU) → requests restart after upgrade completion. If the test scenario involves third-party application data sharing, the authorization path for the information to be tested is: music app requests "read user account" + "write to external storage" → user grants authorization → app encrypts and stores account information to SD card → another malicious app reads data from SD card.

[0023] As can be seen, the output of each step in the information authorization path is the input of the next step (e.g., the system only records the status after the user selects "allow"). Each step may have vulnerabilities (e.g., pop-ups can be bypassed, API calls are not authenticated, and CAN data is not encrypted). Therefore, it is necessary to test information security vulnerabilities based on the combination of information authorization paths.

[0024] This application uses automated testing tools to automatically obtain the information authorization path combinations to be tested. Since the path is usually composed of user operation flow, system interface call and backend communication protocol, this application uses test strategy to generate a model to build a permission interaction matrix during subsequent testing to ensure that each combination is verified, thereby discovering deep vulnerabilities such as "allowing location permissions but not encrypting transmission".

[0025] Step 102: Based on the information authorization path combination to be tested, obtain the screen video stream information of the vehicle to be tested, several types of communication protocol information and several vehicle-machine interaction information.

[0026] This application acquires the screen video stream information of the vehicle under test through a High Definition Multimedia Interface (HDMI) splitter. The resolution and refresh rate of the acquired screen video stream information can be specified, for example, specifying a resolution of 1080P (1920×1080 pixels) and a refresh rate of 60Hz. The acquired video stream information includes the set of controls on the screen of the vehicle under test, the display of permission pop-ups, and user operation feedback (such as page redirection after clicking a control). Communication protocol types include Controller Area Network (CAN) / CAN FD communication protocol, Bluetooth communication protocol, and Ethernet communication protocol. Vehicle-to-everything (V2X) interaction information includes user input actions, such as clicking and swiping screen controls and pop-ups, inputting voice commands, protocol injection, and may also include the current permission status of different information in the vehicle (such as permission to obtain location information, permission to obtain vehicle speed information, etc.) and network connection status (such as current data being transmitted in parallel via CAN and Bluetooth).

[0027] After acquiring multi-source data, this application also performs time synchronization between the screen video stream information and several types of communication protocol information to ensure accurate alignment between the screen video stream and data from different communication protocols. The specific steps include: Obtain the first timestamp of the screen video stream information, and obtain the second timestamp of several types of communication protocol information. The second timestamps are different for different communication protocol information. Obtain the transmission delay of different channels for different communication protocols; For any communication protocol information, the channel transmission delay corresponding to the communication protocol information is fed into a preset timestamp alignment algorithm, and then the first timestamp and the second timestamp of the communication protocol information are aligned using the preset timestamp alignment algorithm.

[0028] The formula (1) for the preset timestamp alignment algorithm is as follows:

[0029] (1) in, It is the alignment result of screen video stream information and communication protocol information. It is the first timestamp of the screen video stream information. It is the second timestamp of the communication protocol information. It is the channel transmission delay of communication protocol information. It is a function of channel transmission delay. Since the second timestamps of different communication protocol information are different, and the channel transmission delays of different communication protocol information are different, alignment needs to be performed based on each type of communication protocol information.

[0030] For example, the first timestamp of the captured screen video stream is the exact time when the user operation (such as clicking the "Authorize" button) occurs (e.g., 16:30:45.123), the second timestamp of the captured CAN bus message is 16:30:45.126, and the second timestamp of the captured HTTP request is 16:30:45.130. The delay of the CAN bus is 5ms (the delay value depends on the size of the load, so it can be changed according to the actual situation). HTTP(S): Due to the TCP handshake delay, it may reach 50~200ms. When aligning the CAN bus message with the screen video stream, the first timestamp of the screen video stream is 16:30:45.123, the second timestamp of the CAN bus message is 16:30:45.126, and the delay of the CAN bus is 5ms. These values ​​are substituted into formula (1) for time alignment.

[0031] By aligning timestamps, scattered video, bus, and network data can be integrated into a unified timeline event sequence, achieving millisecond-level synchronization between screen operations and underlying protocols. It can also perform precise causal relationship analysis (such as confirming whether user operations (such as clicks) actually triggered subsequent protocol behaviors (such as CAN commands)), compare the execution order of different protocols, provide timestamp evidence chains, and discover hidden vulnerabilities (such as detecting whether data has been leaked before authorization).

[0032] It should be noted that, in step 102, as... Figure 2 As shown: Step 1021: Obtain the authorized path combination of trained information in the test strategy generation model.

[0033] Step 1022: For any information authorization path in the information authorization path combination to be tested, determine whether the information authorization path belongs to the trained information authorization path combination.

[0034] Step 1023: If yes, then based on the information authorization path to be tested, obtain the screen video stream information of the vehicle to be tested, several types of communication protocol information and several vehicle-machine interaction information.

[0035] Step 1024: If not, obtain the relevant information pre-marked by the information authorization path and update the pre-marked relevant information to the test strategy generation model.

[0036] In determining whether each path in the information authorization path combination to be tested exists in the trained information authorization path combination, feature matching can be performed. For example, the triggering conditions, permission types, and protocol dependencies of the path to be tested can be compared. Then, a confidence threshold is set. If the similarity of the feature comparison is greater than the confidence threshold, the information authorization path to be tested is determined to belong to the trained information authorization path combination. For example, the trained information authorization path combinations stored in the test strategy generation model include the standard path "Map APP requests location permission → User authorization → CAN bus transmits GPS data". The path combination to be tested is "Voice assistant requests contacts → User voice confirmation → BLE transmits contact data". Feature matching is performed with the above standard path. Because the matching degree is greater than the confidence threshold, it is determined to be known. If not, security experts analyze the new path, mark key nodes (such as permission verification points, data transmission protocols), add the marked data to the training set, and optimize the model.

[0037] The above operations not only allow for direct automated testing of trained paths, saving time spent on repetitive manual analysis, but also enable continuous learning of newly added authorized paths from the vehicle's infotainment system through dynamic model updates. Furthermore, reports are only output for authorized paths with high model confidence, avoiding human error in judgment.

[0038] Step 103: Input the screen video stream information, several types of communication protocol information and several vehicle-machine interaction information into the pre-trained test strategy generation model, and output an information security test report that meets the preset standards.

[0039] The information security test report of this application will include testing screen video stream information, several types of communication protocol information, and several vehicle-to-everything (V2X) interaction information under the information authorization path combination to be tested. This will determine the existence of information vulnerabilities. After confirming the existence of vulnerabilities, the severity of the vulnerabilities will be assessed, and a score will be given using the CVSS (Common Vulnerability Scoring System) standard. This application also sets a reward function and determines the adjustment strategy for the model based on the reward function. The specific steps include: The information security test report is used to determine whether there are information vulnerabilities in screen video stream information, several types of communication protocol information, and several vehicle-machine interaction information. If present, obtain a severity score for the information vulnerability and a deduction for timeout operations, and obtain the number of new combinations of trained information authorization paths after comparing the current test with the previous test; The final score is obtained by substituting the severity score, the timeout penalty, and the number of newly added authorized paths based on the trained information into the preset reward function. The final score determines whether the test strategy generation model should be adjusted based on the information security test report.

[0040] The formula (2) for the reward function is as follows: (2) Wherein, ΔCov is the number of new authorized path combinations of trained information after comparing the current test with the previous test, ΔVuln is the severity score of the information vulnerability, ΔT is the timeout operation deduction score of the information vulnerability, ω1 is the corresponding weight of ΔCov, ω2 is the corresponding weight of ΔVuln, and ω3 is the corresponding weight of ΔT.

[0041] The determination of whether to adjust the model based on the final score of the reward function requires setting a judgment score threshold (one or more thresholds can be set according to requirements; this application does not specify a particular threshold). When the final score of the reward function is greater than the judgment score threshold, the model is considered to be performing well, and no adjustment is needed. When the final score of the reward function is less than the minimum judgment score threshold, the testing strategy needs to be optimized (e.g., increasing the protocol detection depth). The adjustment strategy includes increasing training samples for high-frequency vulnerability types, optimizing automated scripts for timeout operations (e.g., parallelizing protocol analysis), and if many new paths are added but the vulnerability detection rate is low, then ω1 is decreased and ω2 is increased, etc.

[0042] For example, a high-risk vulnerability was detected in the current test: CAN bus command injection caused the engine to stall. The value of ΔVuln is 9. There were 3 timeouts, resulting in a deduction of 15 points. The number of newly added information authorization path combinations is 5, ω1 is 0.6, ω2 is 0.3, and ω3 is 0.1. After substituting into the reward function, the final score is 0.6×5+0.3×9+0.1×15=7.2. The set judgment score threshold is 7. Since 7.2>7, the model is considered to be performing well and no adjustment is needed. However, because of the existence of a high-risk vulnerability, the model can be configured to specifically enhance the CAN protocol detection module.

[0043] The above steps can identify vulnerabilities that require urgent attention by obtaining a severity score for the information vulnerability, force the model to avoid redundant detection by obtaining timeout deductions, and drive the model to explore unknown attack surfaces and adapt to vehicle system updates by adding path rewards.

[0044] It should be noted that, during the training of the test strategy generation model in this application, the authorized paths and test results obtained by testing based on the authorized paths are obtained through historical data. The authorized paths and corresponding test results are used as the training set to train the test strategy generation model. Then, when a new authorized path is obtained, the test results are labeled based on expert experience or experimental results, and the corresponding data is updated to the model.

[0045] In addition, since the communication protocols include Controller Area Network (CAN) communication protocols, Ethernet communication protocols, and Bluetooth communication protocols, the generated information security test report can include the anomaly types of CAN messages, which are transmitted based on CAN communication protocols. The steps for obtaining the anomaly types of CAN messages in the information security test report in this application include: Determine whether the communication protocol information contains controller area network (CLAN) messages; If so, the default Controller Area Network (CAN) packet mutation identification algorithm is used to identify the CAN packets and obtain the anomaly identification score. The anomaly identification score is used to determine the anomaly type of the controller area network (LAN) packets; Add the exception type to the information security test report that meets the preset standards.

[0046] The formula (3) for the controller area network packet mutation identification algorithm is as follows: (3) in, It is the output value of the controller LAN packet mutation identification. It is the message identifier of the controller area network. It is an ID blur mask. It is the message data of the controller area network. It is the coefficient of variation (increasing as the test progresses). =rand(-127,128). rand(-127,128) means randomly selecting a value from the integer range (-127,128) and assigning it to the variable Δ.

[0047] It should be noted that the above describes the identification of anomalies in CAN messages. Therefore, it is possible to first confirm whether CAN bus data is included in the collected communication protocol information by identifying protocol features and matching hardware interfaces. Then, the controller area network message mutation identification algorithm in the test strategy generation model is used to detect potential attack or fault modes in CAN messages and output anomaly identification scores. Different anomaly identification scores correspond to different anomaly types. The anomaly types are added to the information security test report that meets the preset standards. For ease of traceability, additional information can be added accordingly. You can also add corresponding recommendations to the report.

[0048] By using the above settings to identify various CAN attack methods (such as injection, spoofing, and flooding), accurate attack detection can be achieved, while providing data support for subsequent model optimization.

[0049] In addition, the test strategy generation model can also be configured with anomaly detection algorithms for other types of communication protocols, which are not specifically limited here.

[0050] After inputting the collected data into the model, this application further divides the testing into different sequences based on the different combinations of data during the model testing process. Specifically, step 103, as follows... Figure 3 As shown: Step 1031: Determine the combination of screen video stream information, several types of communication protocol information and several vehicle-machine interaction information through the combination of information authorization paths to be tested, and obtain test cases based on the combination method.

[0051] For example, the authorization path is for the voice assistant to access the address book. The combination of multi-source data collected includes screen video stream → user voice authorization pop-up, communication protocol information → BLE transmission of address book data, vehicle system interaction information → microphone recording log. The test cases obtained can be: Test Case 1: verify whether BLE data is encrypted after voice authorization, and Test Case 2: detect whether the microphone is muted when unauthorized.

[0052] Step 1032: Input the screen video stream information, several types of communication protocol information and several vehicle-machine interaction information into the pre-trained test strategy generation model, and then obtain the different protocol fields corresponding to different test cases.

[0053] Step 1033: Obtain the importance scores corresponding to different protocol fields using a preset priority sorting algorithm. The priority sorting algorithm formula (4) in this application is as follows: (4) in, yes The importance value, where N is the total number of fields in all current protocols, and d is the damping coefficient. It is the protocol field currently in the i-th position. It means yes Adjacent fields, yes Importance value, It is a field The number of connections.

[0054] Step 1034: Determine the testing order of different test cases based on their importance scores.

[0055] After determining the different importance scores of different communication protocols, this application needs to sort the test cases in descending or ascending order of importance scores, with higher scores corresponding to higher priorities. Then, the test order of the test cases is determined in descending order of priority.

[0056] Step 1035: Based on the test order, test different test cases in the test strategy generation model and output an information security test report that meets the preset standards.

[0057] In the above steps, by setting priorities, high-risk protocol fields (such as BLE address book) can be tested first, avoiding wasting time on low-risk items (such as air conditioning CAN signal), and also improving the efficiency of automated testing of the model.

[0058] The information security testing method provided in this application obtains the authorized path combination of the information to be tested. By automatically obtaining the authorized path combination, it avoids the problem of human error in overlooking complex paths, ensuring that the test covers all possible interaction scenarios and improving the test coverage. At the same time, it limits the subsequent data acquisition scenarios and avoids obtaining invalid data. Based on the authorized path combination of the information to be tested, it obtains the screen video stream information, several types of communication protocol information, and several vehicle-machine interaction information of the vehicle to be tested. By obtaining multiple types of data, multi-dimensional security detection of the vehicle system can be performed during subsequent model detection, reducing blind spots. Moreover, obtaining multiple types of communication protocol information can be used for subsequent compliance verification of cross-level data streams. The screen video stream information, several types of communication protocol information, and several vehicle-machine interaction information are input into a pre-trained test strategy to generate a model, which outputs an information security test report that meets preset standards. The information security test is performed using the pre-trained test strategy to generate a model and automatically outputs the test results. This can replace traditional manual operation, shorten the test cycle, and automatically generate reports based on preset standards, further avoiding reliance on manual operation, improving efficiency and reducing errors.

[0059] Reference Figure 4 The diagram shows a structural schematic of an information security testing device provided in this application, the device comprising: The first acquisition module 201 is used to acquire the information authorization path combination to be tested.

[0060] The second acquisition module 202 is used to acquire the screen video stream information, several types of communication protocol information and several vehicle-machine interaction information of the vehicle to be tested based on the information authorization path combination to be tested.

[0061] The input / output module 203 is used to input screen video stream information, several types of communication protocol information and several vehicle-machine interaction information into a pre-trained test strategy generation model, and output an information security test report that meets preset standards.

[0062] Optionally, the information security testing equipment may also include: The third acquisition module is used to acquire the first timestamp of the screen video stream information and the second timestamp of several types of communication protocol information. The second timestamps are different for different communication protocol information.

[0063] The fourth acquisition module is used to acquire the transmission delay of different channels for different communication protocols.

[0064] The timestamp alignment module is used to, for any communication protocol information, take the channel transmission delay corresponding to the communication protocol information into a preset timestamp alignment algorithm, and then align the first timestamp and the second timestamp of the communication protocol information through the preset timestamp alignment algorithm.

[0065] Optionally, the second acquisition module 202 specifically includes: The first acquisition submodule is used to acquire the authorized path combination of trained information in the test strategy generation model.

[0066] The first judgment submodule is used to determine whether any information authorization path in the information authorization path combination to be tested belongs to the trained information authorization path combination.

[0067] The second acquisition submodule is used to acquire, if yes, the screen video stream information, several types of communication protocol information and several vehicle-machine interaction information of the vehicle to be tested based on the information authorization path to be tested.

[0068] The update submodule is used to obtain the relevant information pre-marked for the information authorization path if not, and update the pre-marked relevant information to the test strategy generation model.

[0069] Optionally, the information security testing equipment may also include: The judgment module is used to determine whether there are information vulnerabilities in screen video stream information, several types of communication protocol information, and several vehicle-machine interaction information based on the information security test report.

[0070] The fifth acquisition module is used to acquire the severity score of the information vulnerability and the timeout operation deduction score if it exists, and to acquire the number of newly added authorized path combinations of trained information after comparing the current test and the previous test.

[0071] The reward function module is used to input the number of new additions, which is a combination of severity score, timeout penalty, and authorized path of trained information, into a preset reward function to obtain the final score.

[0072] The adjustment module is used to determine whether to adjust the test strategy generation model based on the final score and the information security test report.

[0073] Optionally, the formula for the reward function is as follows:

[0074] Wherein, ΔCov is the number of new authorized path combinations of trained information after comparing the current test with the previous test, ΔVuln is the severity score of the information vulnerability, ΔT is the timeout operation deduction score of the information vulnerability, ω1 is the corresponding weight of ΔCov, ω2 is the corresponding weight of ΔVuln, and ω3 is the corresponding weight of ΔT.

[0075] Optionally, the communication protocols include Controller Area Network (CAN) communication protocols, Ethernet communication protocols, and Bluetooth communication protocols. The information security test report includes the anomaly types of CAN messages, which are transmitted based on CAN communication protocols.

[0076] The steps to obtain the anomaly types of controller area network (CAN) packets in an information security test report include: The second judgment submodule is used to determine whether the communication protocol information contains controller area network messages.

[0077] The message recognition submodule is used to identify Controller Area Network (CAN) messages using a preset CAN message mutation identification algorithm if the condition is met, and to obtain an anomaly identification score.

[0078] The anomaly determination submodule is used to determine the anomaly type of controller LAN packets based on the anomaly identification score.

[0079] Add a submodule to add exception types to the information security test report that conforms to preset standards.

[0080] Optionally, the input / output module 203 specifically includes: The combination method determination submodule is used to determine the combination method of screen video stream information, several types of communication protocol information and several vehicle-machine interaction information by combining the information authorization path to be tested, as well as the test cases obtained based on the combination method.

[0081] The third acquisition submodule is used to input screen video stream information, several types of communication protocol information and several vehicle-machine interaction information into a pre-trained test strategy generation model, and then obtain different protocol fields corresponding to different test cases.

[0082] The fourth submodule is used to obtain the importance scores corresponding to different protocol fields through a preset priority sorting algorithm. The test order determination submodule is used to determine the test order of different test cases based on their importance scores.

[0083] The output submodule is used to test different test cases in the test strategy generation model based on the test order, and output an information security test report that conforms to preset standards.

[0084] The information security testing device provided in this application acquires the authorized path combination of the information to be tested. By automatically acquiring the authorized path combination, it avoids the problem of human error in overlooking complex paths, ensuring that the test covers all possible interaction scenarios and improving the test coverage. At the same time, it limits the subsequent data acquisition scenarios and avoids the acquisition of invalid data. Based on the authorized path combination of the information to be tested, it acquires the screen video stream information, several types of communication protocol information, and several vehicle-machine interaction information of the vehicle to be tested. By acquiring multiple types of data, multi-dimensional security detection of the vehicle system can be performed during subsequent model detection, reducing blind spots. Moreover, acquiring multiple types of communication protocol information can be used for subsequent compliance verification of cross-level data streams. The screen video stream information, several types of communication protocol information, and several vehicle-machine interaction information are input into a pre-trained test strategy to generate a model, which outputs an information security test report that meets preset standards. The information security test is performed using the pre-trained test strategy to generate a model and automatically outputs the test results. This can replace traditional manual operation, shorten the test cycle, and automatically generate reports based on preset standards, further avoiding reliance on manual operation, improving efficiency and reducing errors.

[0085] Reference Figure 5 This application also provides an electronic device, such as Figure 5 As shown, it includes a processor 301, a communication interface 302, a memory 303, and a communication bus 304, wherein the processor 301, the communication interface 302, and the memory 303 communicate with each other through the communication bus 304. Processor 301, memory 303 for storing processor-executable instructions; The processor 301 is configured to execute the instructions to implement the information security testing method described above: Obtain the authorized path combination for the information to be tested; Based on the information authorization path combination to be tested, obtain the screen video stream information of the vehicle to be tested, several types of communication protocol information and several vehicle-machine interaction information; The screen video stream information, several types of communication protocol information, and several types of vehicle-machine interaction information are input into a pre-trained test strategy generation model, and an information security test report that meets preset standards is output.

[0086] The communication bus mentioned above can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. This communication bus can be divided into address bus, data bus, control bus, etc. For ease of illustration, only one thick line is used to represent it in the diagram, but this does not mean that there is only one bus or one type of bus.

[0087] The communication interface is used for communication between the aforementioned terminal and other devices.

[0088] The memory may include random access memory (RAM) or non-volatile memory, such as at least one disk storage device. Optionally, the memory may also be at least one storage device located remotely from the aforementioned processor.

[0089] The processors mentioned above can be general-purpose processors, including central processing units (CPUs), network processors (NPs), etc.; they can also be digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, or discrete hardware components.

[0090] In another embodiment provided in this application, a computer-readable storage medium is also provided, on which a computer program is stored, which, when executed by a processor, implements any of the information security testing methods described in the above embodiments.

[0091] In the above embodiments, implementation can be achieved, in whole or in part, through software, hardware, firmware, or any combination thereof. When implemented in software, it can be implemented, in whole or in part, as a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, all or part of the processes or functions described in this application are generated. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another. For example, the computer instructions can be transmitted from one website, computer, server, or data center to another website, computer, server, or data center via wired (e.g., coaxial cable, fiber optic, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) means. The computer-readable storage medium can be any available medium accessible to a computer or a data storage device such as a server or data center that integrates one or more available media. The available medium can be a magnetic medium (e.g., floppy disk, hard disk, magnetic tape), an optical medium (e.g., DVD), or a semiconductor medium (e.g., a solid-state drive (SSD)).

[0092] It should be noted that, in this document, relational terms such as "first" and "second" are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes said element.

[0093] The various embodiments in this specification are described in a related manner. Similar or identical parts between embodiments can be referred to mutually. Each embodiment focuses on describing the differences from other embodiments. In particular, the system embodiments are basically similar to the method embodiments, so the description is relatively simple; relevant parts can be referred to the descriptions of the method embodiments.

[0094] The above description is merely a preferred embodiment of this application and is not intended to limit the scope of protection of this application. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this application are included within the scope of protection of this application.

Claims

1. An information security testing method, characterized in that, The method includes: Obtain the authorized path combination for the information to be tested; Based on the information authorization path combination to be tested, obtain the screen video stream information of the vehicle to be tested, several types of communication protocol information and several vehicle-machine interaction information; The screen video stream information, several types of communication protocol information, and several types of vehicle-machine interaction information are input into a pre-trained test strategy generation model, and an information security test report that meets preset standards is output.

2. The method according to claim 1, characterized in that, After obtaining the screen video stream information, several types of communication protocol information, and several vehicle-to-machine interaction information of the vehicle under test based on the information authorization path combination to be tested, the method further includes: The first timestamp of the screen video stream information is obtained, and the second timestamp of several types of communication protocol information is obtained, with different second timestamps for different communication protocol information; Obtain the transmission delay of different channels for different communication protocols; For any of the aforementioned communication protocol information, the channel transmission delay corresponding to the communication protocol information is fed into a preset timestamp alignment algorithm, and then the first timestamp and the second timestamp of the communication protocol information are aligned using the preset timestamp alignment algorithm.

3. The method according to claim 1, characterized in that, The method, based on the authorized path combination of the information to be tested, obtains the screen video stream information of the vehicle to be tested, several types of communication protocol information, and several vehicle-machine interaction information, including: Obtain the authorized path combination of the trained information in the test strategy generation model; For any information authorization path in the combination of information authorization paths to be tested, determine whether the information authorization path belongs to the trained information authorization path combination; If so, based on the information authorization path to be tested, obtain the screen video stream information of the vehicle to be tested, several types of communication protocol information and several vehicle-machine interaction information; If not, obtain the relevant information pre-marked by the information authorization path and update the pre-marked relevant information to the test strategy generation model.

4. The method according to claim 1, characterized in that, After inputting the screen video stream information, several types of communication protocol information, and several types of vehicle-machine interaction information into a pre-trained test strategy generation model, and outputting an information security test report that meets preset standards, the method further includes: The information security test report is used to determine whether there are information vulnerabilities in the screen video stream information, the various types of communication protocol information, and the various types of vehicle-machine interaction information. If present, obtain the severity score of the information vulnerability and the timeout operation deduction score, and obtain the number of newly added authorized path combinations of trained information after comparing the current test and the previous test; The severity score, the timeout penalty, and the number of newly added combinations of the trained information authorized paths are substituted into a preset reward function to obtain the final score. The final score will be used to determine whether the test strategy generation model should be adjusted based on the information security test report.

5. The method according to claim 4, characterized in that, The formula for the reward function is as follows: Wherein, ΔCov is the number of new authorized path combinations of trained information after comparing the current test with the previous test, ΔVuln is the severity score of the information vulnerability, ΔT is the timeout operation deduction score of the information vulnerability, ω1 is the corresponding weight of ΔCov, ω2 is the corresponding weight of ΔVuln, and ω3 is the corresponding weight of ΔT.

6. The method according to claim 1, characterized in that, The communication protocols include Controller Area Network (CAN) communication protocol, Ethernet communication protocol, and Bluetooth communication protocol. The information security test report includes the anomaly types of CAN messages, which are transmitted based on the CAN communication protocol. The steps for obtaining the anomaly type of the controller area network (CLAN) packets in the information security test report include: Determine whether the communication protocol information contains a controller area network (CLAN) message; If so, the pre-set controller LAN packet mutation identification algorithm is used to identify the controller LAN packet and obtain an anomaly identification score. The anomaly identification score is used to determine the anomaly type of the controller LAN packet; Add the anomaly type to the information security test report that meets the preset standards.

7. The method according to claim 1, characterized in that, The step of inputting the screen video stream information, several types of communication protocol information, and several types of vehicle-machine interaction information into a pre-trained test strategy generation model, and outputting an information security test report that conforms to preset standards, further includes: The screen video stream information is determined by the combination of the information authorization path to be tested, the combination of several types of communication protocol information and several types of vehicle-machine interaction information, and the test cases obtained based on the combination method; After inputting the screen video stream information, several types of communication protocol information and several types of vehicle-machine interaction information into a pre-trained test strategy generation model, different protocol fields corresponding to different test cases are obtained. The importance scores for different protocol fields are obtained through a preset priority sorting algorithm. The order of testing different test cases is determined by the importance scores. Based on the test sequence, different test cases are tested in the test strategy generation model, and an information security test report that meets the preset standards is output.

8. An information security testing device, characterized in that, The device includes: The first acquisition module is used to acquire the authorized path combination of the information to be tested; The second acquisition module is used to acquire the screen video stream information, several types of communication protocol information and several vehicle-machine interaction information of the vehicle to be tested based on the information authorization path combination to be tested. The input / output module is used to input the screen video stream information, several types of communication protocol information and several types of vehicle-machine interaction information into a pre-trained test strategy generation model, and output an information security test report that meets preset standards.

9. An electronic device, characterized in that, include: processor; Memory used to store processor-executable instructions; The processor is configured to execute the instructions to implement the information security testing method as described in any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that, When the instructions in the storage medium are executed by the processor of the mobile terminal, the mobile terminal is able to perform the information security testing method as described in any one of claims 1 to 7.

Images