An embedded system information security test method and related device

Abstract

The application belongs to the technical field of information security testing, and discloses an embedded system information security testing method and related device. The airborne embedded system is classified, and the test items and the combined test tool set are automatically determined according to the classification level. Then, the tool is started to perform information security testing and collect the standardized processing results, so as to generate the final test results. The method uses the system classification to accurately match the test requirements, automatically integrates the originally scattered penetration and flow analysis tools to adapt to the heterogeneous deployment architecture such as binary, virtual machine or containerization, and replaces the manual selection and combination of tools through a unified scheduling platform, thereby simplifying the test process. The method significantly improves the test efficiency and collaboration, reduces the environmental compatibility and deployment complexity of field testing, enhances the portability and flexibility, effectively solves the problems of scattered tools, inconvenient deployment and low efficiency, and meets the actual needs of airborne embedded system field information security testing.

Description

Technical Field

[0001] This invention belongs to the field of information security testing technology, and in particular relates to an embedded system information security testing method and related apparatus. Background Technology

[0002] Information security testing is a key technology that uses a systematic approach to assess the security of computer systems, networks, or applications, discover potential vulnerabilities, and verify defense capabilities. It integrates automated tools, manual review, and penetration testing techniques, with the core objective of ensuring the confidentiality, integrity, and availability of data (the CIA triad). Embedded systems, due to their close connection to hardware, real-time requirements, resource constraints, diverse threats, complex application scenarios, and the need to comply with stringent security standards, exhibit significant unique characteristics in information security testing. The testing process must comprehensively cover various security threats, conform to relevant security standards, and simultaneously consider security protocol compatibility and the complexity of test environment construction. Airborne embedded systems, as a crucial application scenario for embedded systems, require information security testing that encompasses security review items such as software code auditing and rule set review, vulnerability discovery items such as asset detection and vulnerability scanning, and simulated attack items such as penetration testing and attack-defense confrontation. This is a vital link in ensuring the safe and stable operation of airborne systems. With the increasing intelligence and openness of airborne embedded systems, the data security threats they face are becoming increasingly prominent, and the requirements for the convenience and efficiency of information security testing are constantly increasing.

[0003] Currently, the testing tools used in field information security testing of airborne embedded systems have many problems and shortcomings: First, the tools are scattered. Penetration testing tools (such as Metasploit) and traffic analysis tools (such as Wireshark) need to be installed independently, resulting in poor environment compatibility and increasing the complexity of test preparation. Second, there are significant limitations in tool deployment. Testing tools are mostly deployed on local servers and cannot be taken out due to equipment constraints, making it difficult to support field testing. Taking multiple devices to the field would significantly increase time and labor costs, and some field tests require the tools to be deployed on-site, further limiting the use of physical testing equipment. Third, the deployment architecture is heterogeneous. Testing tools include various deployment forms such as binary executable files, virtual machine images, and containerization, increasing the difficulty of tool management and collaborative use. Fourth, the tools run independently, lacking a unified scheduling platform. During the testing process, manual selection and combination of tools are required, resulting in low efficiency. Furthermore, current research on portable information security testing devices for airborne embedded systems is limited and lacks maturity both domestically and internationally. Existing portable designs mostly focus on the device enclosure structure. For example, portable automated terminal testing devices mainly include protection components, testing components, and mobility components. Some portable testing devices only integrate fixed industrial control protocol testing functions. There are very few portable information security testing devices that can integrate various information security testing capabilities and adapt to multiple deployment forms, which cannot meet the actual needs of field testing of airborne embedded systems.

[0004] It is evident that existing technologies lack a portable testing device that can integrate multiple information security testing tools, adapt to heterogeneous deployment architectures, be easy to carry and use in the field, and have unified scheduling capabilities. This makes it difficult to solve the problems of tool dispersion, inconvenient deployment, and low efficiency in field information security testing of airborne embedded systems, and fails to meet the needs of actual testing work. Summary of the Invention

[0005] This invention provides an embedded system information security testing method and related apparatus. This method can effectively solve the problems of scattered tools, inconvenient deployment, and low efficiency in field information security testing of airborne embedded systems, and meet the needs of actual testing work.

[0006] To achieve the above objectives, the present invention adopts the following technical solution: An embedded system information security testing method, applied to field information security testing of airborne embedded systems, includes: Classify airborne embedded systems, obtain corresponding classification levels, determine test items based on classification levels, and automatically combine test toolsets. Launch the testing tools in the testing toolset to perform information security testing on the airborne embedded system and generate test results; The test results generated by each testing tool are summarized and standardized to generate the final information security test results.

[0007] Furthermore, the process of classifying airborne embedded systems and obtaining corresponding classification levels includes: The impact of an attack on flight missions and the degree of dependence on the network were selected as classification factors. The two classification factors were quantitatively scored, and the classification level of the airborne embedded system was determined based on the sum of the scores.

[0008] Furthermore, the specific rules for the quantitative scoring are as follows: The impact of an attack on flight missions can be categorized as severe, moderate, or minor. Among them, the most serious impact is awarded the first score, the moderate impact is awarded the second score, and the minor impact is awarded the third score; The degree of dependence on the network can be categorized as high, moderate, or weak. Among them, high dependence is awarded the fourth score, moderate dependence is awarded the fifth score, and weak dependence is awarded the sixth score; First score > Second score > Third score; Fourth score > Fifth score > Sixth score; Calculate the total score corresponding to the two classification factors, and determine the corresponding classification level of the airborne embedded system based on the total score. In addition, each test project comes pre-installed with at least one testing tool, including software code auditing tools, static code analysis tools, open source component analysis tools, asset detection tools, vulnerability scanning tools, fuzzing tools, penetration testing tools, and wireless security scanning tools.

[0009] Furthermore, the testing tools in the testing toolset are activated to perform information security testing on the airborne embedded system, generating test results, including: The corresponding startup command is used according to the deployment mode of the testing tool, which includes binary deployment, containerized deployment, and virtual machine deployment; the information security testing tool's dynamic loading module has built-in commonly used dependency libraries, which are called as needed when the testing tool is started; The airborne embedded system is subjected to information security testing based on the dependent libraries called, and test results are generated.

[0010] Furthermore, the process of launching the testing tools in the testing toolset set to perform information security testing on the airborne embedded system and generate test results also includes: During the testing tool's operation, dependency and conflict issues are handled; at the same time, test-related data is updated offline.

[0011] Furthermore, the handling of dependency conflicts during the operation of the testing tool includes: Based on the pre-configured conflict rule base, before starting the testing tool, the dependency list of the testing tool is compared with the conflict rule base. If a dependency conflict is found, the runtime environment isolation is automatically triggered. If the dependency conflict is not in the conflict rule base, an error message is displayed so that manual intervention can be performed to isolate the runtime environment and add the corresponding dependency conflict to the conflict rule base. The offline update of test-related data is performed using either USB synchronization or encrypted Bluetooth synchronization. Encrypted Bluetooth synchronization uses the AES-128 symmetric encryption algorithm, and pairing key negotiation uses ECCP-256. Data transmission employs CRC16 cyclic redundancy check or SHA-256 hash check. The test-related data includes a knowledge base, a rule base, and a virus database.

[0012] Furthermore, the process of summarizing and standardizing the test results generated by each testing tool to generate the final information security test results includes: The system retrieves raw test data by calling the API interface of various testing tools, converts the heterogeneous output format of the raw test data into a standard JSON format, parses the unified format data and extracts common fields, fills in missing fields, and then summarizes and generates the final information security test results, including problem description, risk level and problem location.

[0013] An embedded system information security testing system, applied to field information security testing of airborne embedded systems, includes: The information security testing strategy adaptive engine module is used to classify airborne embedded systems, obtain the corresponding classification level, determine test items based on the classification level, and automatically combine test toolsets. The information security testing tool dynamic loading module is used to launch the testing tools in the testing toolset, perform information security testing on the airborne embedded system, and generate test results; The information security test result aggregation module is used to summarize and standardize the test results generated by various testing tools to generate the final information security test results.

[0014] An embedded system information security testing device, comprising: Memory, used to store computer programs; A processor is used to implement the above-described embedded system information security testing method when executing the computer program.

[0015] A computer-readable storage medium storing a computer program, which, when executed by a processor, is used to implement the above-described embedded system information security testing method.

[0016] Compared with the prior art, the present invention has the following beneficial effects: This invention provides a method for information security testing of embedded systems. It categorizes airborne embedded systems and automatically determines test items and combined test toolsets based on the classification level. The tools are then launched to perform information security tests, and the standardized processing results are aggregated to generate the final test results. This method utilizes system classification to accurately match test requirements, automatically integrates previously scattered penetration testing and traffic analysis tools to adapt to heterogeneous deployment architectures such as binary, virtual machine, or containerized systems, and simplifies the testing process by replacing manual tool selection and combination with a unified scheduling platform. This method significantly improves testing efficiency and collaboration, reduces environmental compatibility and deployment complexity in field testing, enhances portability and flexibility, and effectively solves problems such as tool fragmentation, inconvenient deployment, and low efficiency, meeting the actual needs of information security testing of airborne embedded systems in the field. Attached Figure Description

[0017] Figure 1 The following is a flowchart illustrating the implementation of an embedded system information security testing method according to an embodiment of the present invention. Figure 2 This is a core flowchart of an embedded system information security testing method provided in an embodiment of the present invention; Figure 3 This is a schematic diagram of the structure of an embedded system information security testing system provided in an embodiment of the present invention. Detailed Implementation

[0018] To further understand the content of this invention, the invention will be described in detail below with reference to the accompanying drawings and specific embodiments. It should be understood that the embodiments are merely illustrative and not limiting of the invention.

[0019] The technical terms involved in this invention are explained below: Portable: refers to devices or tools that are compact in design, small in size, and easy to carry and use on the go.

[0020] Embedded systems are specialized microelectronic systems based on computer technology. Their design goal is to embed computing functions into devices or machinery to meet specific task requirements, enabling functions such as automated control, data processing, and communication. These systems typically feature small size, low power consumption, and high real-time performance, and can be customized for specific application scenarios.

[0021] Airborne equipment: refers to the various equipment and technical systems installed on aircraft to ensure flight safety, improve performance, and complete specific tasks.

[0022] Information security testing refers to the process of comprehensively assessing and verifying the security of information systems such as computers, networks, software, and databases. Its main purpose is to identify security vulnerabilities or potential risks within the system and to verify, through technical means, whether these vulnerabilities could lead to information security incidents (such as data breaches or system attacks). Ultimately, based on the test results, improvement suggestions are proposed to enhance the overall security of the system.

[0023] As described in the background section, current field testing tools for information security testing of airborne embedded systems suffer from the following problems: First, the tools are scattered: penetration testing tools (such as Metasploit) and traffic analysis tools (such as Wireshark) need to be installed separately, resulting in poor environment compatibility; Second, tool deployment limitations: The testing tools are deployed on local servers and cannot be taken out due to equipment limitations, which makes them unsuitable for field testing; or multiple devices need to be taken to the field, increasing time and labor costs; some field tests may also require the testing tools to be deployed to the other party's site, making them even less suitable for the use of physical testing equipment; Third, heterogeneous deployment architecture: including various deployment forms such as binary executable files, virtual machine images and containerization; Fourth, tools operate independently: each testing tool lacks a unified scheduling platform, requiring manual selection and combination of testing tools.

[0024] It is evident that this hardware-dependent, heterogeneous model significantly increases the complexity and coordination costs of field testing.

[0025] To address the aforementioned issues, this embodiment provides an embedded system information security testing method. This method integrates various testing tools into a portable testing device, eliminating limitations imposed by field locations and equipment form factors. This improves the work quality and efficiency for testers, saving time and labor costs. Furthermore, this method is primarily applied to field testing of airborne embedded systems, identifying information security issues at the network protocol, operating system, database, firmware, and application levels. This enhances the security and reliability of airborne embedded systems, increases the efficiency of information security testing, and reduces maintenance costs.

[0026] For example, such as Figure 2 As shown, this embodiment provides an embedded system information security testing method, including: Classify airborne embedded systems, obtain corresponding classification levels, determine test items based on classification levels, and automatically combine test toolsets. Launch the testing tools in the testing toolset to perform information security testing on the airborne embedded system and generate test results; The test results generated by each testing tool are summarized and standardized to generate the final information security test results.

[0027] The method provided in this embodiment will be further explained below: It should be noted that currently, portable devices for information security testing of embedded systems are lacking, resulting in a technological lag in information security testing of airborne equipment in the aviation field. This testing method can save installation and deployment time for testing tools, reduce the risk of omissions when manually selecting testing tools, and eliminate the need to carry multiple testing devices to the field, thereby effectively improving overall testing efficiency and security.

[0028] For example, testing airborne embedded systems, especially in the field, can promptly identify potential vulnerabilities and security issues, improving their security and robustness. It should be noted that this method is implemented using a portable information security testing device, which needs to be installed in a portable mobile server or high-performance laptop. The device can be configured with a high-performance CPU, large-capacity memory, and high-speed solid-state storage. The entire device features a small size and lightweight design, allowing for easy portability and mobile deployment in the field. It also comes standard with multiple network ports, USB ports, serial ports, and other rich interfaces, enabling rapid connection to various airborne embedded devices and the systems under test in the field. This device is designed from the perspective of information security testers. Specific implementation steps are as follows: Figure 1 As shown, the specific steps are as follows: S1. First, based on their criticality to flight missions and their impact on network dependence, airborne embedded systems are categorized into Class I, Class II, and Class III. Different pre-set test items correspond to the classification levels of Class I, Class II, and Class III. For each test item, at least one test tool is pre-installed. The information security testing strategy adaptive engine module determines the test items based on the classification of the airborne embedded system under test and automatically combines the test toolset. The specific steps are as follows: First, airborne embedded systems are classified based on specific factors, such as the degree of impact on flight missions after an attack and the degree of dependence on the network. Airborne embedded systems are divided into Class I, Class II, and Class III. This process can be determined manually based on experience or through quantitative scoring. Quantitative scoring is as follows: 3 points for a severe impact on flight missions after an attack (e.g., endangering flight safety or causing sensitive data leakage); 2 points for a moderate impact on flight missions after an attack (e.g., not affecting flight safety but with some functional limitations, or causing general data leakage); and 1 point for a minor impact on flight missions after an attack (e.g., not affecting flight safety or only causing non-critical data leakage). High dependence on the network (critical functions obtain data from external networks, data interaction and other behaviors are highly dependent on the network, and cannot work normally if the network is down or fluctuates), 3 points; moderate dependence on the network (critical functions do not rely on data from external networks, non-critical functions need to obtain data from external networks, and network downtime or fluctuations affect some functions), 2 points; weak dependence on the network (basically does not obtain data from external networks, and network downtime or fluctuations have little or no impact on functions), 0 or 1 point. The value range for Class I devices is [5,6]. If an attack severely impacts flight missions and has a high degree of dependence on the network, it belongs to Class I devices. The value range for Class II devices is [3,4]. If an attack has a moderate impact on flight missions and a moderate degree of dependence on the network, it belongs to Class II devices. The value range for Class III devices is [1,2]. If an attack has a minor impact on flight missions and a weak degree of dependence on the network, it belongs to Class III devices. Different test items are pre-set according to the classification levels of Class I, Class II and Class III; Each test item is pre-installed with at least one testing tool. For example, software code auditing tools include Peking University COBOT and SAST; vulnerability scanning tools include Nessus and NSFOCUS's RSAS. The information security testing strategy adaptive engine module determines the test items based on the classification level of the airborne embedded system under test and automatically combines the test toolset.

[0029] Information security testing projects include security review projects such as software code auditing, rule set review, data security review, and log review; vulnerability discovery projects such as asset detection, vulnerability scanning, and fuzzing; and simulated attack projects such as penetration testing and attack-defense confrontation. The information security testing strategy adaptive engine module pre-configures different test projects for different categories. Suggested test project examples for categories I, II, and III are shown in Table 1: Table 1 lists the test items corresponding to different classification levels.

[0030] Table 1 shows the information security testing projects being conducted. "○" is mandatory, "○" is optional. It is not required.

[0031] Pre-installed testing tools support commercial off-the-shelf, open-source, and self-developed tools, and support different deployment models, such as binary deployment, containerized deployment, and virtual machine deployment. At least one testing tool product is deployed for each type of testing project.

[0032] The information security testing strategy adaptive engine module determines the test items based on the classification of the airborne embedded system to be tested (e.g., Class III). For Class III, the test items include document review, software code audit, open source component analysis, data security review, configuration check, asset detection, and vulnerability scanning. Then, for each type of test, at least one testing tool is used, and a list of testing tools is automatically generated.

[0033] As another preferred embodiment, after the classification level is determined, a dynamic adjustment mechanism is also included, which works in conjunction with the initial classification and the determination of test items, specifically as follows: During testing, risk and vulnerability information is extracted from the test results in real time. If a high-risk vulnerability is found (such as a vulnerability that could directly lead to the interruption of a flight mission), the classification level of the airborne embedded system is automatically upgraded, and corresponding high-level test items and testing tools (such as adding fuzz testing tools and network intrusion simulation tools) are added simultaneously. If no medium- or high-risk vulnerabilities are found after a period of testing, the classification level is appropriately downgraded, redundant test items are reduced, and test time is optimized. This mechanism solves the problem that the initial classification is based solely on static factors and cannot adapt to dynamic risk changes during testing. In conjunction with the initial classification quantitative scoring mechanism, it achieves the linkage of "static classification - dynamic adjustment - precise testing," which ensures the comprehensiveness of testing while avoiding over-testing, and improves the flexibility and targeting of field testing.

[0034] S2. Start the test tools one by one according to the combined set of test tools.

[0035] Testing tools may include different deployment types, such as binary deployment, containerized deployment, virtual machine deployment, etc., and different deployment types use corresponding startup commands; The information security testing tool's dynamic loading module includes commonly used dependency libraries. If a dependency library is needed during startup, it is invoked. To avoid dependency conflicts, a conflict detection mechanism is implemented with a pre-configured conflict rule base, pre-setting known dependencies that could conflict between tools. Before starting the tool, its dependency list is compared to the pre-configured conflict rule base. If a conflict is detected, runtime environment isolation is automatically triggered, such as by running it on a separate virtual machine. If the dependency conflict is not in the pre-configured rule base, manual intervention is initiated after an error message is displayed to isolate the testing tool's runtime environment and add the conflict to the conflict rule base. Once started, the test tool performs information security tests on the airborne embedded system. The order of calling the tools is not restricted, and multiple test tools can be run simultaneously. Offline updates to data such as knowledge bases, rule bases, and virus databases can be implemented via USB or encrypted Bluetooth synchronization. The encrypted Bluetooth algorithm can use AES-128 symmetric encryption, and the pairing key negotiation uses ECC P-256. Data transmission can employ algorithms such as CRC16 to perform cyclic redundancy check on the entire data frame. The receiving end recalculates the checksum and compares it; if inconsistent, the transmission is considered an error and discarded. Alternatively, SHA-256 can be used for offline data packet hash verification to prevent tampering and damage. By employing transmission, encryption, and verification methods, the security issues of data updates and synchronization in field environments without network access are addressed.

[0036] Furthermore, the process of calling the testing tools also includes external environment adaptation and optimization, which works in conjunction with the deployment of the testing tools and the calling of dependency libraries, specifically: To address the complex environments of airborne field testing (such as electromagnetic interference, temperature fluctuations, and network instability), the system automatically detects current environmental parameters before the testing tool starts and adjusts its operating mode accordingly: when strong electromagnetic interference is detected, an anti-interference transmission protocol is activated to double-encrypt the test data (combining AES-128 and CRC16 checks, reusing the encryption algorithm with the aforementioned offline update encryption mechanism to reduce resource consumption); when the temperature exceeds a preset range, the operating frequency of the testing tool is adjusted to prevent tool crashes due to high temperatures; when the network is unstable, it automatically switches to offline testing mode, and synchronizes the test data to the aggregation module after the network recovers. This optimization mechanism, in conjunction with existing testing tool deployment and dependency library calls, solves the pain points of unstable testing tool operation and data transmission loss caused by complex field environments, improves the field adaptability of the technical solution, complements the existing offline update mechanism, and further enhances the reliability of testing.

[0037] S3. After the testing tools complete the testing, the test results generated by different tools are summarized and standardized. This can be achieved by integrating and calling the API interfaces of each tool to automatically retrieve the raw test data. After obtaining the raw test results, the information security test result aggregation module converts the heterogeneous output formats of different tools (such as XML, HTML, custom text, CSV, etc.) into the standard JSON format, completing the data format normalization. Then, based on the unified format, the test results are parsed to extract common fields, such as common core fields such as problem description, risk level, and problem type extracted from the results of each tool, as the basic data for aggregation. Then, missing fields are filled in. For fields not output by some tools (such as problem reproduction path, problem impact, etc.), default values ​​are filled in or rules are added according to the tool characteristics and problem type. The summary includes information such as problem description, problem type, problem risk level, problem impact, problem location, problem reproduction path, problem discovery time, and the testing tools used to discover the problem. After summarizing, an information security test result is generated, which displays all problems discovered by all testing tools in this test, allowing for manual verification of whether the problems actually exist, and outputs the final information security test result.

[0038] As another preferred embodiment, this testing method also includes a real-time monitoring and dynamic intervention mechanism for the testing process, which works in conjunction with the testing tool startup and dependency conflict handling. The specific steps are as follows: The system collects real-time operational status parameters of testing tools (including CPU utilization, memory usage, test progress, data transfer rate, etc.) and core operational metrics of the airborne embedded system (including bus communication status, task scheduling priority, storage resource usage, etc.) to establish a two-dimensional monitoring model. When any parameter exceeds a preset threshold, it automatically associates with the dependency conflict rule base to determine whether it is caused by dependency conflict, resource overload, or system anomaly. If it is a dependency conflict, it triggers environment isolation; if it is a resource overload, it dynamically adjusts the resource allocation ratio of the testing tool; if it is a system anomaly, it pauses the corresponding test project and saves the test breakpoint. After the anomaly is resolved, the test is resumed based on the breakpoint. This mechanism can avoid data loss caused by test interruption, reduce invalid test consumption, and work in conjunction with the existing test process to achieve a closed loop of "test-monitoring-intervention-recovery", which greatly improves the stability and efficiency of field testing.

[0039] Furthermore, after the final information security test results are generated, a risk tracing and closed-loop rectification linkage mechanism is also included, which works in conjunction with the standardized processing of results aggregation, specifically: Based on standardized test results, the system automatically correlates monitoring data, dependency call records, and vulnerability detection logs from the testing process to pinpoint the root causes of vulnerabilities (such as dependency library version compatibility issues, code security vulnerabilities, and abnormal runtime environments), and generates targeted remediation suggestions. Simultaneously, a remediation tracking module is established to record remediation measures and progress. After remediation is completed, the system automatically calls the corresponding testing tools for re-inspection. If the re-inspection passes, the process is closed; otherwise, it returns to the source and re-adjustment plan. This mechanism, in conjunction with standardized result aggregation, achieves full-process linkage from "result generation - risk tracing - remediation tracking - re-inspection closure," overcoming the shortcomings of existing technologies that can only generate test results but cannot achieve closed-loop vulnerability management. This improves the practicality and implementability of the testing plan, while providing data support for subsequent security optimization of airborne embedded systems. It forms a full-link collaboration with initial classification and testing tool invocation, maximizing the value of information security testing.

[0040] For example, such as Figure 3As shown, this embodiment also provides an embedded system information security testing system, which is applied to the field information security testing of airborne embedded systems. It includes: an information security testing strategy adaptive engine module, which is used to classify airborne embedded systems, obtain corresponding classification levels, determine test items according to classification levels, and automatically combine test toolsets. The information security testing tool dynamic loading module is used to launch the testing tools in the testing toolset, perform information security testing on the airborne embedded system, and generate test results; An information security test result aggregation module is used to summarize and standardize the test results generated by various testing tools to generate the final information security test result. This invention also provides an embedded system information security testing device, comprising: a memory for storing a computer program; and a processor for executing the computer program to implement the steps of the embedded system information security testing method.

[0041] The present invention also provides a computer program product, including a computer program / instructions, which, when executed by a processor, implement the steps of the embedded system information security testing method.

[0042] When the processor executes the computer program, it implements the steps of the above-mentioned embedded system information security test, such as: classifying the airborne embedded system, obtaining the corresponding classification level, determining the test items according to the classification level, and automatically combining the test toolset. Launch the testing tools in the testing toolset to perform information security testing on the airborne embedded system and generate test results; The test results generated by each testing tool are summarized and standardized to generate the final information security test results.

[0043] For example, the computer program can be divided into one or more modules / units, which are stored in the memory and executed by the processor to complete the present invention. The one or more modules / units can be a series of computer program instruction segments capable of performing preset functions, wherein the instruction segments describe the execution process of the computer program in the embedded system information security testing device. For example, the computer program can be divided into an information security testing strategy adaptive engine module, an information security testing tool dynamic loading module, and an information security testing result aggregation module; the specific functions are as follows: the information security testing strategy adaptive engine module is used to classify the airborne embedded system, obtain the corresponding classification level, determine the test items according to the classification level, and automatically combine the test toolset; the information security testing tool dynamic loading module is used to launch the test tools in the test toolset, perform information security testing on the airborne embedded system, and generate test results; the information security testing result aggregation module is used to summarize and standardize the test results generated by each test tool to generate the final information security test result. The embedded system information security testing device can be a desktop computer, laptop, handheld computer, or cloud server, etc. The embedded system information security testing device may include, but is not limited to, a processor and a memory. Those skilled in the art will understand that the above are examples of embedded system information security testing equipment and do not constitute a limitation on embedded system information security testing equipment. It may include more components than those described above, or combine certain components, or different components. For example, the embedded system information security testing equipment may also include input / output devices, network access devices, buses, etc.

[0044] The processor referred to can be a Central Processing Unit (CPU), or other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor can be a microprocessor, or any conventional processor. The processor is the control center for the embedded system information security testing, connecting various parts of the embedded system information security testing equipment via various interfaces and lines.

[0045] The memory can be used to store the computer program and / or module. The processor implements various functions of the embedded system information security testing device by running or executing the computer program and / or module stored in the memory and calling the data stored in the memory.

[0046] The memory may primarily include a program storage area and a data storage area. The program storage area may store the operating system and at least one application program required for a function (such as sound playback, image playback, etc.). The data storage area may store data created based on the use of the mobile phone (such as audio data, phonebook, etc.). Furthermore, the memory may include high-speed random access memory and non-volatile memory, such as hard disks, RAM, plug-in hard disks, smart media cards (SMC), secure digital cards (SD cards), flash cards, at least one disk storage device, flash memory device, or other volatile solid-state storage devices.

[0047] The present invention also provides a computer-readable storage medium storing a computer program, which, when executed by a processor, implements the steps of the embedded system information security testing method described above.

[0048] If the modules / units integrated in the embedded system information security testing system are implemented as software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium.

[0049] Based on this understanding, the present invention can implement all or part of the processes in the above-described embedded system information security testing method, or it can be accomplished by a computer program instructing related hardware. The computer program can be stored in a computer-readable storage medium, and when executed by a processor, it can implement the steps of the above-described embedded system information security testing method. The computer program includes computer program code, which can be in the form of source code, object code, executable file, or a preset intermediate form, etc.

[0050] The computer-readable storage medium may include: any entity or device capable of carrying the computer program code, recording media, USB flash drive, portable hard drive, magnetic disk, optical disk, computer memory, read-only memory (ROM), random access memory (RAM), electrical carrier signal, telecommunication signal, and software distribution medium, etc.

[0051] It should be noted that the content contained in the computer-readable storage medium may be appropriately increased or decreased according to the requirements of legislation and patent practice in the jurisdiction. For example, in some jurisdictions, according to legislation and patent practice, the computer-readable storage medium does not include electrical carrier signals and telecommunication signals.

[0052] Compared with existing testing methods, this invention provides an embedded system information security testing method and related apparatus, which have the following advantages: First, deploying, configuring, and testing multiple security testing tools individually in the field typically takes 0.5 to 3 days per test. Portable information security testing devices, however, come pre-installed with various testing tools, eliminating the need for repeated field deployments. They are ready to use upon arrival and power-on, reducing deployment time to 10-20 minutes. Compared to traditional testing methods, portable information security testing devices save time on field installation and deployment, improving testing efficiency. Secondly, based on the classification of airborne embedded systems, dynamic combination and automatic matching of test tools are achieved. Field testing eliminates the need for manual selection of test items and tools, as the portable information security testing device automatically adapts to test scenarios and toolsets. This effectively avoids subjective biases caused by manual selection of items and tools, reduces issues such as human error in missing tests, mismatches, and omissions, and improves the completeness of test coverage and the accuracy of configuration. Third, by relying on the pre-installed and built-in dependency libraries of the testing tools, combined with runtime isolation technology, the differences in heterogeneous software and hardware environments in the field are uniformly shielded. This avoids problems such as version dependency conflicts, port occupation, and resource contention between different testing tools and between tools and the field environment from the bottom layer. This can reduce the probability of conflicts in the field testing environment and the failure rate of tool operation, and improve the reliability of testing.

[0053] The above embodiments are merely one of the implementation methods for achieving the technical solution of the present invention. The scope of protection claimed by the present invention is not limited to this embodiment, but also includes any variations, substitutions and other implementation methods that can be easily conceived by those skilled in the art within the scope of the technology disclosed in the present invention.

[0054] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and not to limit it. Although the present invention has been described in detail with reference to the above embodiments, those skilled in the art should understand that modifications or equivalent substitutions can still be made to the specific implementation of the present invention. Any modifications or equivalent substitutions that do not depart from the spirit and scope of the present invention should be covered within the protection scope of the present invention.

Claims

1. An embedded system information security testing method, applied to field information security testing of airborne embedded systems, characterized in that, include: Classify airborne embedded systems, obtain corresponding classification levels, determine test items based on classification levels, and automatically combine test toolsets. Launch the testing tools in the testing toolset to perform information security testing on the airborne embedded system and generate test results; The test results generated by each testing tool are summarized and standardized to generate the final information security test results.

2. The embedded system information security testing method according to claim 1, characterized in that, The process of classifying airborne embedded systems and obtaining corresponding classification levels includes: The impact of an attack on flight missions and the degree of dependence on the network were selected as classification factors. The two classification factors were quantitatively scored, and the classification level of the airborne embedded system was determined based on the sum of the scores.

3. The embedded system information security testing method according to claim 2, characterized in that, The specific rules for the quantitative scoring are as follows: The impact of an attack on flight missions can be categorized as severe, moderate, or minor. Among them, the most serious impact is awarded the first score, the moderate impact is awarded the second score, and the minor impact is awarded the third score; The degree of dependence on the network can be categorized as high, moderate, or weak. Among them, high dependence is awarded the fourth score, moderate dependence is awarded the fifth score, and weak dependence is awarded the sixth score; First score > Second score > Third score; Fourth score > Fifth score > Sixth score; Calculate the total score corresponding to the two classification factors, and determine the corresponding classification level of the airborne embedded system based on the total score. In addition, each test project comes pre-installed with at least one testing tool, including software code auditing tools, static code analysis tools, open source component analysis tools, asset detection tools, vulnerability scanning tools, fuzzing tools, penetration testing tools, and wireless security scanning tools.

4. The embedded system information security testing method according to claim 1, characterized in that, Launch the testing tools in the testing toolset to perform information security testing on the airborne embedded system and generate test results, including: The corresponding startup command is used according to the deployment mode of the testing tool, which includes binary deployment, containerized deployment, and virtual machine deployment; the information security testing tool's dynamic loading module has built-in commonly used dependency libraries, which are called as needed when the testing tool is started; The airborne embedded system is subjected to information security testing based on the dependent libraries called, and test results are generated.

5. The embedded system information security testing method according to claim 1, characterized in that, The testing tools in the aforementioned startup testing toolset, during the process of performing information security testing on the airborne embedded system and generating test results, also include: During the testing tool's operation, dependency and conflict issues are handled; at the same time, test-related data is updated offline.

6. The embedded system information security testing method according to claim 5, characterized in that, The handling of dependency conflicts during the operation of the testing tool includes: Based on the pre-configured conflict rule base, before starting the testing tool, the dependency list of the testing tool is compared with the conflict rule base. If a dependency conflict is found, the runtime environment isolation is automatically triggered. If the dependency conflict is not in the conflict rule base, an error message is displayed so that manual intervention can be performed to isolate the runtime environment and add the corresponding dependency conflict to the conflict rule base. The offline update of test-related data is performed using either USB synchronization or encrypted Bluetooth synchronization. Encrypted Bluetooth synchronization uses the AES-128 symmetric encryption algorithm, and pairing key negotiation uses ECC P-256. Data transmission employs CRC16 cyclic redundancy check or SHA-256 hash check. The test-related data includes a knowledge base, a rule base, and a virus database.

7. The embedded system information security testing method according to claim 1, characterized in that, The process of summarizing and standardizing the test results generated by each testing tool to generate the final information security test results includes: The system retrieves raw test data by calling the API interface of various testing tools, converts the heterogeneous output format of the raw test data into a standard JSON format, parses the unified format data and extracts common fields, fills in missing fields, and then summarizes and generates the final information security test results, including problem description, risk level and problem location.

8. An embedded system information security testing system, applied to field information security testing of airborne embedded systems, characterized in that, include: The information security testing strategy adaptive engine module is used to classify airborne embedded systems, obtain the corresponding classification level, determine test items based on the classification level, and automatically combine test toolsets. The information security testing tool dynamic loading module is used to launch the testing tools in the testing toolset, perform information security testing on the airborne embedded system, and generate test results; The information security test result aggregation module is used to summarize and standardize the test results generated by various testing tools to generate the final information security test results.

9. An embedded system information security testing device, characterized in that, include: Memory, used to store computer programs; A processor, configured to implement the embedded system information security testing method according to any one of claims 1-7 when executing the computer program.

10. A computer-readable storage medium storing a computer program, characterized in that, When the computer program is executed by the processor, it is used to implement the embedded system information security testing method according to any one of claims 1-7.

Images