Cybersecurity Penetration Testing Platform

Abstract

To provide a method, system and non-transitory computer-readable medium used for testing a plurality of circuits to determine open surfaces.SOLUTION: The method includes: receiving one or more of attack techniques and known open surfaces; carrying out attacks on a circuit to determine vulnerable surfaces of the circuit; when new open surfaces exist in the circuit, determining updating an attack plan based on the new open surfaces; carrying out the attack plan; generating a report of the open and vulnerable surfaces; and updating a repository to include new attack techniques against newly discovered open surfaces of the circuit.SELECTED DRAWING: Figure 5

Description

[Background technology]

[0001] Many modern devices are designed to be connected to the Internet and the surrounding infrastructure. For example, modern cars, trains, airplanes, farm equipment, and drones are all A variety of wired and wireless interfaces that enable many different system functions The present invention provides a rolling computer cluster having a

[0002] Each of these systems may include one or more interfaces to the Internet or other networks. interface, making it vulnerable to attacks on open surfaces This makes such devices the most important targets for cyber attacks. This could result in data theft from various components of the device, as well as This can cause malfunctions of systems within the equipment.

[0003] As just one example, the automotive industry is concerned about the risk of cyberattacks damaging components (e.g. electronic control units). The company is trying to protect the electronic control unit (ECU) and the telematics control unit (TCU) However, it is necessary to ensure that these techniques are effective in fending off cyber attacks. For example, automobile manufacturers may choose to use hardware, The implementation of various components, including firmware and software, is secure from cyber attacks. It is necessary to ensure that Summary of the Invention

[0004] Therefore, systems that test components for vulnerability to exploits and attacks must be developed. It is needed.

[0005] The illustrative embodiments are best understood from the following detailed description when read in conjunction with the accompanying drawing figures. It is well understood that the various features are not necessarily drawn to scale. In practice, the dimensions may be arbitrarily increased or decreased for clarity of discussion. Wherever practical and wherever useful, like reference numerals refer to like elements. do. [Brief description of the drawings]

[0006] [Figure 1] FIG. 1 is a simplified block diagram illustrating a vehicle and its connection sources with various types of communication systems. [Diagram 2] FIG. 1 is a simplified block diagram illustrating a test system configured to identify open surfaces in components within an automobile, according to a representative embodiment. [Diagram 3] FIG. 1 is a simplified block diagram of a test automation platform in accordance with a representative embodiment. [Figure 4] 3 is a simplified block diagram of various aspects of the test system of FIG. 2 in accordance with a representative embodiment. [Diagram 5] 1 is a simplified flow diagram of a method for testing equipment to identify open surfaces in components within an automobile, according to a representative embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0007] In the following detailed description, for purposes of explanation and not limitation, representative embodiments disclosing specific details are set forth. A typical embodiment is described to provide a thorough understanding of one embodiment according to the present teachings. The descriptions of known systems, devices, materials, methods of operation and methods of manufacture are provided as illustrative examples. In some cases, the above-mentioned aspects may be omitted so as not to obscure the scope of the invention. Certain systems, devices, materials and methods are within the scope of the present teachings and are described in representative embodiments. The terminology used herein is intended to describe specific embodiments. It is understood that the terms used herein are for purposes of illustration only and are not intended to be limiting. These definitions as commonly understood and accepted in the art of the present teachings. This is in addition to the technical and scientific meaning of the terms specified.

[0008] The terms "first," "second," "third," etc. are used herein to refer to various elements or components. Although these elements or components may be used to describe It will be understood that these terms should not be construed as limiting the scope of the invention. It is used only to distinguish an element from another element or component. Therefore, as discussed below, A first element or component may be combined with a second element or component without departing from the teachings of the inventive concept. They may also be called components.

[0009] The terminology used herein is for the purpose of describing particular embodiments only. The scope of the present specification and the appended claims is not intended to be limiting. As used herein, the singular terms "a," "an," and "the" are used interchangeably herein. Unless the context clearly indicates otherwise, both the singular and the plural are intended to be included. In addition, the terms "comprise" and / or similar terms are used. As used herein, the term refers to the specified features, elements, and / or components. Although expressly indicated, one or more other features, elements, components, and / or groups thereof may be included. As used herein, the term "and / or" does not exclude the presence or addition of "Or" includes all combinations of one or more of the associated listed items.

[0010] Unless otherwise noted, an element or component may be referred to as "connected" to another element or component. When a statement is made that "is" or "combined with" another element or component, it means that that element or component An element may be directly connected or coupled to another element or component, or may be coupled to an intervening element or component. It will be understood that there may be components present, i.e., these terms and The term similar refers to a combination of two elements or components connected by one or more intermediate elements or components. On the other hand, it is also understood that an element or component may be used to When we say "directly connected" to an element or component, this means that the two elements or components This only includes cases where elements are connected to each other without intermediate or intervening elements or components. There are.

[0011] In view of the above, the present disclosure is directed to various aspects, embodiments and / or specific features or portions thereof. Through one or more of its components, one or more of the advantages specifically mentioned below may be obtained. For purposes of illustration and not limitation, specific details are not set forth. The illustrated exemplary embodiment is described to provide a thorough understanding of one embodiment according to the present teachings. However, while departing from the specific details disclosed herein, it is to be understood that the present disclosure is not to be construed as limiting the present invention. Other embodiments are within the scope of the following claims. Descriptions of the components and methods may be omitted so as not to obscure the description of the example embodiments. Such methods and apparatus are within the scope of this disclosure.

[0012] As used herein, an "open surface" refers to a surface that is accessible to unauthorized users ("attackers"). ") may attempt to input data into an environment or extract data from an environment. As described more fully herein, an open surface is a part of a discovery process or Identified after a reconnaissance process.

[0013] As used herein, "attack surface" refers to the sum of all open surfaces. It is a combination of the above.

[0014] As used herein, a "weak surface" refers to a surface that is secured to the system and method of the present teachings. It is a breached open surface.

[0015] Various embodiments of the present disclosure address the open surface area in which components of a system are vulnerable to cyber attacks. Cyber ​​security penetration testing to determine whether or not a company has US20100232633A1 - System, method and apparatus for performing cyber security penetration testing - Google Patents According to the teachings, a component first determines whether it is vulnerable to a new attack (i.e. The attack plan is then used to determine whether any open areas exist. Depending on the results of the survey, the plan of attack can be updated to include newly discovered openings. After the attack plan is completed, the attack is executed against the components and the resource is contacted for update of the attack plan. A regression test is performed. A report is prepared. Based on this report, measures are taken to eliminate the weak points of the components. In particular, the database will be updated based on this report, and all the This database includes any vulnerabilities or openings that further attacks may have. It is constantly updated to include the latest Sploit knowledge.

[0016] According to an exemplary embodiment, a method for testing a plurality of circuits to determine open surfaces is disclosed. The method includes receiving one or more of an attack technique and a known opening, and detecting the circuit. To determine the vulnerable side of the circuit and to detect whether a new open side exists in the circuit, determining to update the attack plan based on the new opening when the attack is completed; Implementing plans, creating reports of openings and vulnerabilities, and updating repositories , including new attack techniques against newly discovered open surfaces of the circuit.

[0017] According to another exemplary embodiment, a system for testing a plurality of components to determine an open surface is provided. The system includes a memory for storing executable instructions and a method for reading and writing executable instructions from the memory. and a processor configured to execute the issued instructions. The instructions, when executed by a processor, may be used to exploit attack techniques, known and performing an attack on the circuit to obtain the determining a weak surface and, when a new open surface exists in the circuit, determining a new open surface based on the new open surface; Deciding to update the attack plan based on the open surface and Creating vulnerability reports and updating the repository with newly discovered open areas of the circuit and include new attack techniques against the

[0018] A non-transitory computer-readable storage medium storing machine-executable instructions executable on a processor. A storage medium, the machine-executable instructions, when executed by a processor, performing a method for detecting one or more of an attack technique and a known opening surface, performing an attack on the circuit to determine vulnerabilities of the circuit; and When a face is present in the circuit, it is decided to update the attack plan based on the newly open face. to implement plans of attack; to prepare reports of openings and vulnerabilities; Update the gitry to include new attack techniques against newly discovered open surfaces in the circuit and a non-transitory computer-readable storage medium comprising:

[0019] FIG. 1 illustrates a vehicle 101 and its sources of connectivity to various types of communication systems. 1 shows a simplified block diagram of a communication system 100 that may be used in a vehicle. Note that the base station 103 can be connected to the base station 103 via the wireless link 102. The wireless link is illustratively a Long Term Evolution (LTE) 4G link. However, other communication protocols are contemplated. The base stations are connected to a service provider 104. The service provider 104 is further connected to the Internet 105. The OEM backend system 106 comprises a data center of an automobile manufacturer. The back-end system collects the telematics and communicates with the vehicle from the data center. It has a tactile reaction.

[0020] Within the communication system is a vehicle 101. Testing of various components of the vehicle 101 is performed It should be noted that these are merely examples and that other devices for performing tests in accordance with the present teachings are contemplated. More generally, the present teachings may be used to provide a method for detecting and preventing atherosclerosis, either on the attacking or open side, as discussed below. Consider many types of equipment that have components that can be subject to cyber attacks through By way of example and not limitation, a vehicle 101 may be provided instead of or in addition to the vehicle 101. Thus, the communication system 100 may include an airplane, a train, a bus, a boat, or a ship. More generally, the present teachings are applicable to components of the so-called Internet of Things (IoT). Each of these devices and appliances, as well as other similar devices and appliances, has an attack surface It has many components that can be subject to cyber attacks either through their internal or external surfaces. The present teachings allow testing with a constantly updated attack plan before an attack is launched. This can be implemented to enable appropriate measures to be taken.

[0021] In particular, connections within or to the vehicle 101 are made using a wired protocol. These types of wired connections and their associated protocols are not limited to: The list is shown in Figure 1.

[0022] As can be seen from the above, attacks can be made through a wireless connection to the automobile 101 or through a wired connection. Regardless of the attack, cyber attacks can be generated that involve the exposed surfaces of various components of the vehicle. New attacks are occurring with alarming frequency.

[0023] As shown in FIG. 1, the automobile 101 includes a number of components. These components include hardware, software, and and / or a combination thereof, as used herein, As shown in FIG. 1, a vehicle 101 includes several Each ECU and each TCU may include a microprocessor. and a memory, the memory storing code / instructions executable by the microprocessor. and the stored data.

[0024] Automobile 101 includes wireless in-vehicle 4G / LTE connectivity components (OTA), vehicle security components, Component (SEC), Head End Unit (HEU) connected to ECU bus, Global Positioning System Receiver (GPS), Wireless Fidelity based on IEEE802.11x (Wi-Fi i) Components: Bluetooth / Bluetooth based on IEEE802.15x h low energy (BT / BTLE) connection components, near-field communication components (NF C) and Dedicated Short Range Communications components (DSRC) Each of these components includes a memory (not shown) that contains one or more modules. Each of these modules has associated functions that correspond to a particular function of the component. Contains a set of processor-executable instructions.

[0025] As can be seen above, each of these components of the vehicle 101 has an open surface. The method, system and non-transitory The computer readable medium may include a method for detecting such weak points in components of the vehicle 101. This makes it possible to carry out cyber attacks on the offensive side or data manipulation or other operations on the open side. or to take action to prevent data theft. Advantageously, various representative implementations According to an embodiment, the attack plan is continuously updated and the new attack plan is updated in accordance with the methodology described herein. In particular, the teachings provide a repeat of the previous test, The updated attack plan also includes a new attack method to detect and report on newly discovered attacks. It includes additional tests to build a larger test suite that, once run, can detect regressions. This will later be used as an application test.

[0026] FIG. 2 illustrates a method for identifying open surfaces in components within an automobile, according to a representative embodiment. FIG. 2 is a simplified block diagram of a test system 200 configured as described with respect to FIG. Certain aspects of the communication system 100 are common to those of the test system 200. Therefore, it is not always necessary to repeat the explanation.

[0027] The test system 200 includes an enterprise platform 204 having a memory of test reports 202. Generally, the enterprise platform 201 includes a test system 200. Coordinate sequential testing of test components.

[0028] The test system further incorporates the Test Automation Platform (TAP) 203 The TAP 203 uses a regression test suite (regr As explained more fully below, TAP 203 includes 2, a processor (not shown in FIG. 2) and, when executed by the processor, a test system The computer code that implements all of the connections between the various hardware components of the system 200. and a memory containing code / instructions. These codes control the various levels of the test system 200. This includes, but is not limited to, protocol specific libraries that allow the connection of There is none.

[0029] In one exemplary embodiment, the enterprise platform includes a processor in the enterprise platform. The TAP203 processor may also be used to execute the Large companies have many types of components under test. Since there are multiple sources, there are multiple TAPs (not shown) that are used to test the components. For example, in a representative embodiment targeted at automotive testing, the ECU may be For disparate functions in motor vehicles (e.g. engine control, driver assistance, body and chassis, etc.) Since ECUs are developed in parallel, ECU testing is performed using multiple TAPs and within a single enterprise platform. The platform or enterprise platform consolidates and aggregates the test results of each TAP. This enterprise platform will integrate the layout (network) of all ECUs in the car. and visualize the results of individual ECU tests. connects to individual TAP databases via the customer's network infrastructure By doing so, each ECU's individual Access the results of the result.

[0030] The test system 200 is an IP / cellular network emulator (network emulator). Emulator) 206 and Wi-Fi Bluetooth Station Emulator (Station As described more fully herein, The emulator 206 and the station emulator communicate with the component under test. The emulator 206 includes hardware and software that enables A hardware component that is a network-specific connection gateway (e.g., a network emulator) These configurations include A configuration element is a hardware component that connects to a specific interface on the device under test (DUT). Thus, one end of the gateway provides a hardware HW interface. protocol-specific (connected towards the DUT) and connected to the computer that will execute the attack. The other end is a generic (e.g. TCP / IP interface using an RJ45 connector) ).

[0031] The test system 200 includes a security tool kit (tool kit) 208. The security tool kit 208 is a read-only memory (ROM), Random Access Memory (RAM), magnetic disk storage media, optical storage media, flash memory may include one or more machine-readable non-transitory storage media, such as a In various embodiments, the security tool kit 208 may be a program for the TAP 203. The security tool stores code / instructions in memory that are executed by the processor. The kit 208 is operated by the processor of the TAP 203 and performs security test Test Suite 209 and Application Threat Intelligence Based on the code / instructions stored in the Intelligent Threat Intelligence (Intelligence and Threat Intelligence) database 210 It is an execution engine that carries out various attacks.

[0032] Application Threat Intelligence Database 210 is a security tool The kit 208 can then execute attacks to determine the open surfaces of the component under test. Security database containing a repository of known signatures / details of malware and vulnerabilities, such as Intelligent Database Services. Application Threat Intelligence The database includes such vulnerability definitions (metadata level, high-level descriptions of vulnerabilities). On the other hand, Security Test Suite 209 includes the definition of Security Tool More generally, A test suite is a set of components being tested (multiple instances), which are discussed more fully below. The attack plan includes a specific plan of attack for the target (or targets in some cases).

[0033] The tests are performed on the components under test by the test system 200. , Application Threat Intelligence Database 210 and Security Test S Malware and vulnerability signatures / details stored in Eat 209 are available in the tested configuration. Executed by security toolkit 208 to find open surfaces in an element Moreover, new test cases are added for newly discovered open areas to prevent regressions. The application test suite is then added to the application test suite and the tests are run against those open surfaces during execution of the test system 200. In particular, the test cases are executed on the DUT (e.g., ECU, TCU). An attack is a type of test case that is executed in a scanning There are also test cases of the surveillance or reconnaissance type.

[0034] Moreover, these new test cases are executed and analyzed during the execution of the test system 200. As new attacks or openings are discovered, they are added to the regression test suite 204. will be added.

[0035] By way of example, the application threat intelligence database 210 may include a lead-on ROM, Random Access Memory (RAM), Magnetic Disk Storage Media, Optical One or more machine-readable non-volatile memory devices, such as a storage medium, flash memory device, or similar storage medium. In various embodiments, the application threat intelligence may include a temporary storage medium. The database 210 is executed by a processor provided in the TAP 203. instructions that are executed by the processor (alone or in conjunction with the security toolkit 208 and the security Stores data that can be operated on (along with the security test suite 209) It is possible.

[0036] As shown in FIG. 2, the test system 200 includes a hardware-in-the-loop (HIL) 219. The HIL219 allows the ECU and TCU to operate outside the vehicle. This is a commercial system. The HIL219 system is configured and controlled by TAP203. Thus, the user can easily execute the process of executing attacks against each DUT. It allows for automation.

[0037] The test system 200 is connected to a test ECU 216 in a vehicle internal network 221. The attack is configured to be launched through the TCU 213 and the gateway 215. The test system 200 includes a station via a network access device (NAD). The attack is also configured to launch through an application emulator 207.

[0038] The vehicle internal network 221 is connected to the components found within the vehicle at the manufacturing site (e.g. , ECU) network. Executing an attack on the vehicle internal network 221 By this, any open areas in the test ECU (or other components) are identified and remedial measures are taken. It can be done.

[0039] As shown in FIG. 2, the test system 200 of the present teachings may be used after production is completed or for routine service. It is envisioned that the vehicle 220 will be used in conjunction with the vehicle 220 during the delivery of the service. By way of illustration, the vehicle network interface may be configured to: And the vehicle can be tested after it is in service. As described more fully below, the test system 200 Regularly update attacks against target components to identify and The present teachings provide a method for detecting and detecting the presence of a complication of the present invention, so that treatment action can be taken. Test systems are constantly updated with the latest malware and vulnerability signatures / details The method is configured to:

[0040] FIG. 3 illustrates a test automation platform (TAP) according to a representative embodiment. 3 is a simplified block diagram of a test automation platform 300. 2. Some specific aspects of the TAP 300 described with respect to FIGS. There may be aspects in common with 0, so they will not necessarily be repeated.

[0041] The TAP 300 includes a processor 301, a memory 302 that stores ongoing attacks, and The processor 301 includes a regression test suite 303. 305 and the code / instructions stored in the database 304 via a user interface The test automation platform 300 is adapted to execute A communication bus 307 is used to communicate with the various components.

[0042] According to an exemplary embodiment, the database 304 includes a security toolkit 20 8, Security Test Suite 209, Application Threat Intelligence Data The above includes a base 210, a customer threat library 211, and a customer threat database 212. As described above, tests are performed on the components under test by the test system 200. and a database 304 (e.g., an application threat intelligence database Malware and vulnerability information stored in the Security Test Suite 210 and Security Test Suite 209) Signatures / details are processed using the Security Toolkit 208 software. The test is performed by the tester 301 to find open surfaces in the component under test.

[0043] The processor 301 executes instructions stored in the memory 302 and the database 304. Any hardware device that can process raw data in another way while also The processor 301 executes these instructions to perform the functions described herein. In addition, the processor 301 may be configured to implement some or all of the methods described. Distributing the memory across multiple devices, for example, This allows for the method to be implemented in a necessarily distributed fashion as required.

[0044] Processor 301 is a tangible, non-transitory entity that represents one or more processors. As used herein, the term "non-transient" refers to a permanent change in state. should not be interpreted as a characteristic, but as a characteristic of a state that continues for a period of time. The term "non-transient" specifically refers to something that is only temporary at any place and at any time. Negating transitory characteristics such as non-existent carriers or signals or other forms of characteristics The processor is an article of manufacture and / or a machine component. The subroutine 301 performs the functions described in the various embodiments herein. Processor 301 is a general-purpose processor. It can be a chip or part of an application specific integrated circuit (ASIC). The processor 301 may be a microprocessor, a microcomputer, or a processor chip. , Controller, Microcontroller, Digital Signal Processor (DSP), State Machine or a programmable logic device. The processor 301 may be a field programmable gate array (FPGA) or the like. Logic circuits including programmable gate arrays (PGAs) or discrete gates and / or transistors It may also be (or may not include) another type of circuitry that includes transistor logic. The processor 301 may be a central processing unit (CPU) or a graphics processor. It can be a fixed processing unit (GPU) or both. In addition, any of the processors described herein may be implemented using multiple processors, parallel processors, or the like. Multiple processors may be included in a single device. Or it may be included in multiple devices or may be combined with those devices. .

[0045] The memory 302 and database 304 may be, for example, a cache memory or a system memory. Thus, the memory 302, the regression test The test suite 303 and database 304 each include As discussed above and below, static random access memory (SRAM) RAM), Dynamic RAM (DRAM), Flash memory, Read-only memory ( The processor may include a ROM, a ROM, or other similar memory device. One or more ASICs (or other hardware components) that implement one or more of the functions described in or other processing device), other embodiments may use It will be apparent that the software described as corresponding to the That is, memory 302, regression test suite 303, and database 304. 04 each represent an instruction executed by the processor 301 and / or It is possible to store data on which the following can be calculated.

[0046] The memory 302 may include various modules, each of which may include: It includes a set of associated processor-executable instructions that correspond to a particular function of the TAP 300 .

[0047] The database 304 may be a read-only memory (ROM), a random access memory (R AM), magnetic disk storage media, optical storage media, flash memory devices, or similar storage media. In various embodiments, the present invention may include one or more machine-readable non-transitory storage media, such as a memory medium. In other words, the database 304 stores instructions to be executed by the processor 301 or 301 (alone or together with memory 302 and regression test suite 303) ) data that can be subjected to calculations can be stored.

[0048] The user interface 306 may include one or more devices that allow communication with a user. The user interface 306 is a graphical user interface. It has a GUI and an application programming interface (API). The UI allows users to interface with the TAP300 through a graphical display of system configuration and settings. The API allows the user to provide a set of programmable commands. The API allows users to interact with the TAP300 through It allows users to integrate the solution into their own environments while providing insight into customer specific attacks and threats. It provides a programming interface that also allows the integration of other libraries. The interface is used to extend the system for future protocols, both wired and wireless. It is also possible.

[0049] Protocol layer 305 is an IP / cellular network emulator (network emulator Emulator) 206 and Wi-Fi Bluetooth Station Emulator (S In particular, these protocols are merely examples. Other communication protocols are contemplated and within the purview of one skilled in the art. As will be explained more fully below, emulator 206 and station emulator 207 The protocol layer 305 of the TA enables communication to the component under test and Hardware that enables communication between P203, database 304 and the component under test It is equipped with hardware and software.

[0050] FIG. 4 is a simplified block diagram of a test system 400 according to a representative embodiment. Certain aspects of the test system 400 described with respect to FIG. There may be commonalities with the 400 aspects and therefore will not necessarily be repeated.

[0051] The test system 400 includes a management server 401 having a TAP as an example, and The various functions of the management server 401 are The industry penetration testing platform 402 is shown and discussed below. The system also includes a reconnaissance and fuzzing (RF) server 403. The various functions of the RF server 403 are represented in the communication protocol specific library 404. Discussed below.

[0052] The test system is comprised of hardware for connecting to the components under test, as shown in Figures 1 and 2. The hardware gateway may further include a cell Interface 405, Wi-Fi-BT interface 406, Ethernet port Interface 407, Zigbee Interface 408, Universal Serial Bus Interface 409, Controller Area Network 410 and Automotive Ethernet The various hardware interfaces are merely illustrative. It is emphasized that more or fewer interfaces are also contemplated. More generally, the expected interfaces are task specific and each An interface is provided to effect communication using a desired protocol.

[0053] The enterprise penetration (PEN) testing platform 402 includes a management server 401 2 and 3. This includes, but is not limited to, the TAPs discussed above. The application test platform 402 includes the processor described above with respect to FIG. Among other functions, the TAP implements the connections between the various components and Executes the code / instructions stored in the security toolkit described above. More generally, The enterprise penetration testing platform 402 of the management server 401 is It provides an open management framework for connecting, reconnaissance (also referred to as "discovery" in this document) Performs testing, fuzzing, test plan creation, test plan execution and reporting.

[0054] The communication protocol specific library 404 includes an example of the various components of the RF server 403. The communication protocol specific library 404 is a representation of various protocol specific libraries. Includes libraries such as security toolkits, security test suites, and application 2. The communication protocol may include the above-mentioned customer threat library and customer threat database. The protocol specific library 404 is implemented by the scanning performed by the processor of the TAP. These functions provide the following: This is performed by a variety of hardware gateway devices that can

[0055] The PEN Test Platform 402 probes vulnerabilities through various attack surfaces of the DUT. By their very nature, some of the exploit processes Some elements (such as establishing a connection) remain manual processes, while labor-intensive tasks Most (e.g. exploits) are carried out in an automated manner. The results of these activities are , provided by automated reporting.

[0056] FIG. 5 illustrates a process 500 for running tests on components, according to a representative embodiment. 5 is a flow chart illustrating some specific aspects of the process 500. The process 500 is the same as that described in the representative embodiment described above. Many common aspects are not necessarily repeated.

[0057] Application Threat Intelligence Automotive Attack Database 501 Process 50 0. This Application Threat Intelligence Automotive Attack Database is For example, the security test suite and application threat intelligence described above. In particular, the Application Threat Intelligence Automotive Attack The attack database 501 is updated through reports provided by the process 500. Both involve the collection of malware and vulnerability signatures / details from external sources (not shown). It is updated through publication.

[0058] Optionally, a customer attack database 502 is provided to the process 500. The threat database 502 may include, for example, the customer threat library and customer threat database described above. In particular, the customer attack database 502 includes a database of attacks that customers have made using various sources (not shown). Updates can be made through the retrieval of malware and vulnerability signatures / details from the In particular, users can author and automate customer attacks via scripts. An attack database 502 can be created and updated.

[0059] Data from Application Threat Intelligence Automotive Attack Database 501 and and code / instructions, and optionally data and The code / instructions form an attack plan 503. In general, the attack plan 503 may include any of the above-described The process 500 is executed by a security toolkit such as The discovery sequence 504 also provides an initial test sequence for the component under test. and that the attack surface or open surface, or both, that are not listed in the attack plan 503 are Determine whether it exists or not.

[0060] The discovery sequence 504 (also called reconnaissance) is a sequence of connections that reveal information about open surfaces. Using the methods provided by each of the bridge protocols, these open sides are queried. If there is a response, it is examined to determine when the service on the open port became known. A service is typically a piece of software that supports a system, such as a web service that delivers web pages. As just an example, IP port scanning is a process that aims to 1 is an exemplary method for querying any open ports in a system. If so, an exploit service specific to that port according to the present teachings is executed.

[0061] When no new attack surface or open surface is discovered in the discovery sequence 504, process 5 00 is a toolkit run of the security test suite described above. After completion of the attack 505, a report of the investigation 506 is prepared and Nearing responds in step 507 with any attacks found during attack 505. Modify the striking or opening surface.

[0062] When a new attack surface or open surface is discovered in the discovery sequence 504, process 5 00 proceeds to update the attack plan. After the attack 505 is completed, a report of the investigation 506 is prepared and the Engineering responds in step 507 with any errors found during the attack 505. In particular, to correct newly discovered attack surfaces or openings or The report, which includes both these findings, was compiled by the Application Threat Intelligence Automotive Attack Database. 501, which is then provided to attack plan 503. The new attack revealed is , are stored in the regression test suite described above.

[0063] Finally, the process continues until the components to be tested (e.g., an ECU with many components) are Continuing with the new construction 508 of the vehicle (or automobile).

[0064] According to various embodiments of the present disclosure, the methods described herein include The present invention can be implemented using a hardware computer system that executes a program. Further, in one exemplary non-limiting embodiment, the implementation is distributed processing, component / object The methods described herein may include distributed processing and parallel processing. A virtual computer system process can be constructed to perform one or more of the functions; The processors described herein can be used to support virtual processing environments. do.

[0065] As explained above, the present disclosure is intended as an example of various aspects of the present application. It is to be understood that the present invention is not limited to the specific embodiments described herein. Many modifications and variations can be made without departing from the scope of the present invention. In addition to the methods and apparatus described above, functionally equivalent methods and apparatus are within the scope of the present disclosure. Such modifications and variations may be made without departing from the spirit and scope of the present invention. It is intended that the disclosure be limited to the scope of the accompanying exemplary claims. Such representative claim terms, along with the full scope of equivalents to which the claims are entitled, The terminology used in this specification refers to specific embodiments and should be limited only by the following: Please understand that this is for illustrative purposes only and is not intended to be limiting. It should be understood.

[0066] Regarding the use of substantially any plural and / or singular terms herein, Therefore, those of ordinary skill in the art will readily appreciate the opportunity to translate plural to singular and / or singular as appropriate to the context and / or application. The various singular / plural interchanges are used herein for the sake of clarity. This may be expressly stated in the subsection.

[0067] The present specification, and in particular the appended claims (e.g., the body of the appended claims) The terms used in the following sections are generally intended to be "open" terms. It can be understood by those skilled in the art that (for example, the term "including" means should be interpreted as "including, but not limited to," and the term "having The term "having" should be interpreted as "having at least" and the term "including" should be interpreted as "having at least" and "having at least ... the term "having at least" should be interpreted as "having at least" and (e.g. "includes, but is not limited to") If a specific number of recitations in an introduced claim is intended, such intention shall be deemed to be included in the In some cases, the claim may expressly state that such a claim does not intend to It can further be understood by one skilled in the art that there is no

[0068] The above description, together with the associated embodiments, has been presented for illustrative purposes only. The above description is not intended to be exhaustive or to be a comprehensive explanation of the concepts disclosed herein. It is not intended to be limited to the precise forms shown, and modifications and variations of the above teachings will be apparent to those skilled in the art. These and other objects, features and advantages of the present invention will become apparent to those skilled in the art upon consideration of the following description, or may be obtained from practicing the disclosed embodiments. It can be appreciated from the above description that the steps described may be implemented in the manner discussed. They do not have to be performed in the same sequence or with the same degree of separation. Various steps may be omitted, if desired, to achieve the same goal. The present disclosure therefore includes the above. The present invention is not limited to the embodiments described above, but instead is intended to be limited to the full scope of the appended claims. The scope of the present invention is defined by the appended claims, together with any equivalents thereto.

[0069] In the above description, various representative embodiments have been described with reference to the accompanying drawings. However, various changes and modifications can be made to these embodiments, and are described in the accompanying patents. No deviation from the broader scope of the inventive concepts disclosed herein as set forth in the following claims. It may be apparent that additional embodiments may be practiced without departing from the spirit and scope of the present invention. The specification and drawings are, accordingly, to be regarded in an illustrative rather than a restrictive sense. .

[0070] Systems and methods for testing multiple circuits to determine openings and attack surfaces are provided in several examples. While the present invention has been described with reference to illustrative embodiments, the words used are intended to be illustrative rather than limiting. It is understood that these are exemplary terms. and the present claims without departing from the scope and spirit of the method. Modifications may be made within the scope of the amended description. Although the method has been described with respect to specific means, materials and embodiments, the optimum sensor placement may be varied. The systems and methods are not intended to be limited to the precise details disclosed, but rather Systems and methods for evaluating an object using a removable sensor are disclosed herein within the scope of the appended claims. This application extends to all functionally equivalent structures, methods, and uses such as fall within the scope of the present invention.

[0071] The illustrations of the embodiments described herein are provided to provide a general understanding of the structure of the various embodiments. These illustrations are intended to provide a more detailed understanding of the disclosure herein. It is not intended to serve as a complete description of all of the elements and features of the present invention. Many other embodiments may be apparent to those of skill in the art upon review of the disclosure. Others may make structural and logical substitutions and modifications without departing from the spirit and scope of the present invention. Embodiments may be utilized and derived from the present disclosure. In addition, these illustrations are merely The illustrations are representative only and may not be drawn to scale. Certain proportions may be exaggerated while others may be minimized. Accordingly, the present disclosure and the figures are to be regarded as illustrative rather than limiting.

[0072] One or more embodiments of the present disclosure are presented merely for convenience and are not intended to be limiting of any particular invention or inventive concept. Without intending to arbitrarily limit the scope of this application to The terms may be referred to herein individually and / or collectively. Although specific embodiments have been illustrated and described herein, the specific embodiments illustrated Any future constructions designed to accomplish the same or similar purpose may be substituted for the present embodiment. It is understood that various configurations may be used. This disclosure is intended to provide a complete and complete description of the various embodiments. It is intended to include any future modifications or variations of the present invention. Combinations of the embodiments and other embodiments not specifically described herein may be used. It will be apparent to one skilled in the art.

[0073] This Abstract of the Disclosure is provided to comply with 37 CFR 1.72(b) and is not intended to be a substitute for the disclosure of any patent application or to be a substitute for a patent application. They are submitted with the understanding that they will not be used to interpret or limit the scope or meaning of the claims. In addition, the above detailed description has been presented for the purpose of simplifying the disclosure. Therefore, various features may be grouped together or described as a single embodiment. The present disclosure does not include any limitation or limitation to the claimed embodiments expressly set forth in each claim. The invention should not be construed as reflecting an intention to require more features than those specified in the specification. Rather, as the following claims reflect, the subject matter of the present invention encompasses all aspects of the disclosed embodiments. Fewer than all features in any one may be of interest. Thus, The appended claims are incorporated into the detailed description, and each claim is treated as a separate claim. It stands alone as a defining subject of the work.

[0074] The foregoing description of the disclosed embodiments is provided to enable any person skilled in the art to practice the concepts described in the present disclosure. Accordingly, the subject matter disclosed above should be considered as illustrative rather than limiting, and the appended claims are intended to embrace all modifications, extensions, and other embodiments that fall within the true spirit and scope of the present disclosure. Thus, to the maximum extent permitted by law, the scope of the present disclosure should be determined by the broadest permissible interpretation of the appended claims and their equivalents, and should not be limited or restricted by the above detailed description. The claims of the parent application as originally filed were as follows: Claim 1: Receiving one or more of an attack technique and a known opening; performing an attack on the circuit to determine vulnerabilities of the circuit; determining, when a new open surface exists in the circuit, to update the attack plan based on the new open surface; executing said plan of attack; generating a report of said open surfaces and said weak surfaces; updating the regression test suite to include new attack techniques against newly discovered open surfaces of said circuit; A method for testing multiple circuits to determine open surfaces, comprising: Claim 2: After carrying out the attack, determining not to update the attack plan when no new open faces exist in the circuit; executing said plan of attack; The method of claim 1, further comprising: Claim 3: After carrying out the attack plan, generating a report of the determined opens in the circuit; The method of claim 2, further comprising: Claim 4: The method of claim 1 , wherein the report includes newly discovered attack surfaces or newly determined openings or both. Claim 5: The method of claim 4 , further comprising storing the newly discovered attack surface or the newly discovered open surface in the regression test suite. Claim 6: 2. The method of claim 1, further comprising: determining when a service at an open port was known; and executing an exploit service against the open port after determining when the service at the open surface was known. Claim 7: a test automation platform comprising a memory storing executable instructions and a processor configured to execute the instructions retrieved from the memory; The instructions, when executed by the processor, Receiving one or more of the attack techniques, known openings; and performing an attack on the circuit to determine vulnerabilities of the circuit; determining, when a new open surface exists in the circuit, to update the attack plan based on the new open surface; executing said plan of attack; generating a report of said open surfaces and said weak surfaces; updating the repository to include new attack techniques against new discovered openings of said circuit; a processor for testing a plurality of components to determine vulnerabilities and openings. Claim 8: The memory storing the executable instructions, when executed, determining not to update the attack plan when no new open faces exist in the circuit; carrying out the execution of said attack plan; The system of claim 7 , further comprising instructions to cause the processor to further: Claim 9: The memory storing the executable instructions, when executed, generating a report of the determined openings in the circuit after carrying out execution of the attack plan; The system of claim 7 , further comprising instructions to cause the processor to further: Claim 10: The memory includes: Security toolkits and A test suite and Attack database and The system of claim 7 further comprising: Claim 11: The system of claim 10 , wherein the test suite and the attack database include at least a portion of the instructions. Claim 12: The system of claim 10 , wherein the security toolkit includes the instructions for executing the attack plan. Claim 13: Further equipped with an emulator, The system of claim 10 , wherein the emulator comprises a plurality of communication layers, each communication layer adapted to transmit the attack plan to the circuit based on a protocol specific to the circuit. Claim 14: the processor is a first processor, the circuit is a first circuit, and the system further comprises an enterprise platform; 14. The system of claim 13, wherein the enterprise platform comprises a second processor configured to execute the instructions retrieved from the memory, the instructions, when executed, causing the first processor to perform testing of a second circuit. Claim 15: The system of claim 10 , wherein the memory includes a security test suite and an attack database. Claim 16: The system of claim 10 , wherein the memory further comprises a customer threat library and a customer threat database. Claim 17: The system of claim 10 , wherein the repository is a regression test suite. Claim 18: A non-transitory computer-readable storage medium storing machine-executable instructions executable on a processor, the machine-executable instructions, when executed by the processor, causing the processor to perform a method, the method comprising: Receiving one or more of an attack technique and a known opening; performing an attack on the circuit to determine vulnerabilities of the circuit; determining, when a new open surface exists in the circuit, to update the attack plan based on the new open surface; executing said plan of attack; generating a report of said open surfaces and said weak surfaces; updating the regression test suite to include new attack techniques against newly discovered open surfaces of said circuit; A non-transitory computer readable storage medium comprising: Claim 19: The method further comprises, after performing the attack: Deciding not to update the attack plan when no new open faces exist in the circuit And, executing said plan of attack; 20. The non-transitory computer-readable medium of claim 18, further comprising: Claim 20: The method comprises: After carrying out the attack, generating a report of the determined opens in the circuit; 20. The non-transitory computer-readable medium of claim 18, further comprising: [Explanation of symbols]

[0075] 500 processes 501 Application Threat Intelligence Automotive Attack Database 502 Customer Attack Database 503 Attack Plan 504 Discovery Sequence 505 Attack 506 Survey Results Report 507 Engineering Response 508 New construction of the component to be tested

Claims

1. receiving, by a processor, one or more of an attack technique and a known open surface; the processor executing an attack against a circuit to determine vulnerabilities of the circuit; determining, when a new open surface exists in the circuit, to update the attack plan based on the new open surface; said processor executing said attack plan; said processor generating a report of said open surfaces and said weak surfaces; updating said regression test suite to include new attack techniques against newly discovered openings in said circuit; a processor for testing a plurality of circuits to determine open surfaces, the processor comprising:

2. determining, after executing the attack, that no new open surfaces exist in the circuit, not to update the attack plan; the processor executes the attack plan after executing the attack; The method of claim 1 further comprising:

3. The method of claim 2 , further comprising the processor generating a report of the determined open surfaces of the circuit after executing the attack plan.

4. The method of claim 1 , wherein the report includes newly discovered attack surfaces or newly determined openings or both.

5. The method of claim 4 , further comprising the processor storing the newly discovered attack surface or the newly discovered open surface in the regression test suite.

6. 2. The method of claim 1, further comprising: the processor determining when a service on an open port was known; and after the processor determines when the service on the open surface was known, the processor executing an exploit service against the open port.

Images