Vehicle Attack Analysis Using Commonized Abnormality Mapping
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vehicle systems face challenges in identifying cyberattacks due to varying configurations across different vehicle types, models, and manufacturers, leading to increased processing load and difficulty in development and maintenance.
Innovation Solution
An attack analysis device that utilizes a commonized security log and attack abnormality relationship information to estimate cyberattacks, converting abnormality locations to a commonized format across different electronic control systems, allowing for efficient analysis regardless of vehicle configuration.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If vehicle systems analyze cyberattacks using configuration-specific methods for each vehicle type, model, and manufacturer, then measurement precision of attack detection is improved, but device complexity and difficulty of maintenance increase significantly
Solution Approach 1:
The patent creates a universal attack analysis framework that works across different vehicle types, models, and manufacturers by establishing commonized abnormality detection patterns and location mappings. Instead of maintaining separate analysis systems for each vehicle configuration, a single unified system handles multiple configurations through standardized interfaces and abstraction layers, enabling one system to serve multiple functions across diverse vehicle platforms.
Solution Approach 2:
The patent segments the attack analysis system into modular components: abnormality detection modules, location mapping modules, and attack determination modules. Each component handles specific aspects of the analysis independently, allowing the system to process different vehicle configurations through the same modular architecture without requiring complete system redesign for each vehicle type.
2Reliability
If vehicle systems maintain configuration-specific attack analysis methods for each electronic control system, then reliability of attack detection is improved, but ease of manufacture and deployment worsens
Solution Approach 1:
The patent creates standardized templates and patterns for abnormality detection that can be copied and applied across different vehicle configurations. Instead of manually configuring each system from scratch, the same detection patterns and analysis logic are replicated across multiple vehicle types through configuration files and standardized data structures, making deployment easier while maintaining consistent reliability.
3Measurement precision
If vehicle systems use detailed configuration-specific abnormality locations for attack analysis, then measurement precision of attack source identification is improved, but loss of time in processing and analyzing increases
Solution Approach 1:
The patent performs preliminary actions by pre-establishing mappings between abnormality locations and their corresponding attack sources during system setup or offline preparation. Common abnormality patterns and their locations are pre-analyzed and stored in standardized formats, so that during actual attack analysis, the system can quickly retrieve and match observed abnormalities against pre-computed patterns without performing exhaustive real-time analysis, thus reducing processing time while maintaining identification accuracy.
Data Source
AI summary
An attack analysis device includes attack abnormality relationship information indicating a relationship among (i) attack information indicating an attack possible to be received by an electronic control system, (ii) an estimation abnormality information indicating an abnormality estimated to be occurred when the attack is received, and (iii) commonized estimation abnormality location information indicating a commonized estimation abnormality location, which is a location of the abnormality estimated to be occurred when the electronic control system receives the attack and commonized between the electronic control system and a different electronic control system. The attack analysis device estimates an attack received by the electronic control system with reference to the attack abnormality relationship information.