Vehicle Intrusion Point Identification From Threat And Route Logs
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Identifying the intrusion point from an attack discovery point in moving vehicles is challenging due to the variable time between intrusion and damage discovery, as vehicles are mobile and the attack sources may be within a predetermined distance.
Innovation Solution
An intrusion point identification device and method that collects and analyzes threat information and vehicle logs to identify the intrusion point by accumulating points where threats have been detected, using anomaly scores and cumulative scores based on threat severity, speed, and location data to pinpoint the intrusion point.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If vehicles are monitored continuously to detect attacks, then attack detection capability is improved, but the time between intrusion and identification increases due to vehicle movement and variable attack incubation periods
Solution Approach 1:
The system performs preliminary actions by collecting and storing vehicle location data and attack incident information in advance before attacks occur. The intrusion point identification unit proactively analyzes this pre-collected data to predict and identify intrusion points, rather than reacting after the attack is detected. This preliminary data collection and analysis enables faster identification when an actual attack occurs.
Solution Approach 2:
The system implements feedback mechanisms where the intrusion point identification unit continuously monitors attack incident information and vehicle location data, adjusts its analysis based on detected patterns, and provides updated identification results. The feedback loop allows the system to refine its intrusion point identification based on real-time attack detection and historical data analysis, reducing the time between intrusion and identification.
2Measurement precision
If the system analyzes detailed vehicle location and attack data to identify intrusion points, then identification accuracy is improved, but device complexity increases
Solution Approach 1:
The system segments the complex data analysis task into distinct functional modules: an information collection unit for gathering vehicle location and attack data, an intrusion point identification unit for analyzing the data and determining intrusion points, and a notification unit for alerting authorities. This segmentation divides the complex system into manageable, independent components that can be developed, maintained, and scaled separately.
Solution Approach 2:
The information collection unit serves multiple functions by collecting both vehicle location data from navigation systems and attack incident information from various sources. The intrusion point identification unit universally analyzes different types of data (location histories, attack patterns, vehicle movements) to identify intrusion points across different scenarios, reducing the need for separate specialized systems for each data type.
Data Source
Figure 1~2
Figure 3
Figure 4
AI summary
An intrusion point identification device (10) includes: a threat information collector (130) that collects and stores threat information including identification information, route information, and discovery information, the identification information identifying a moving body into which a threat has intruded among one or more moving bodies, the route information indicating a route through which the threat has intruded into the moving body among a plurality of routes included in the moving body, the discovery information indicating a discovery date of an attack by the threat that has intruded into the moving body; a vehicle log collector (140) that collects logs, extracts, from the collected logs, histories of points that indicate locations of the one or more moving bodies within a predetermined period, and stores the histories of the points as history information, the logs indicating points that indicate locations of the one or more moving bodies in association with dates and times, the predetermined period being set based on the discovery information; an intrusion point identification unit (150) that identifies an intrusion point of the threat from a first attack source through a first route among the points indicated in the history information stored in the vehicle log collector (140); and an intrusion point notifier (160) that outputs the point identified by the intrusion point identification unit (150).