Vehicle Vulnerability Priority Determination System
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face challenges in determining the priority of countermeasures for vehicle vulnerabilities, particularly when multiple in-vehicle systems across various vehicle types are affected, leading to difficulties in evaluating and prioritizing risks effectively.
Innovation Solution
A priority determination system that calculates and evaluates at least two risk values - ECU risk value, vehicle type risk value, and spread risk value - to determine the priority of countermeasures for vulnerabilities related to electronic control units (ECUs) in vehicles.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If multiple risk values (ECU risk value, vehicle type risk value, spread risk value) are calculated to determine priority, then the accuracy and comprehensiveness of priority determination is improved, but the system complexity and calculation burden increase
Solution Approach 1:
The patent segments the risk assessment into three distinct components: ECU risk value (individual unit risk), vehicle type risk value (category-level risk), and spread risk value (propagation risk). This segmentation allows each risk dimension to be calculated and weighted independently, improving measurement precision while maintaining manageable system complexity through modular calculation structures.
Solution Approach 2:
The patent transitions from single-dimension risk assessment to multi-dimensional risk evaluation by introducing three separate risk values that operate at different levels (ECU level, vehicle type level, and spread level). This dimensional expansion enables comprehensive priority determination by considering multiple risk facets simultaneously, thereby improving measurement precision without overwhelming complexity.
2Reliability
If comprehensive risk assessment considering multiple factors is performed, then the effectiveness of vulnerability management is improved, but the time required for risk calculation and priority determination increases
Solution Approach 1:
The patent performs preliminary calculations of risk values based on pre-established criteria and historical data. By preparing risk assessment frameworks, weightings, and calculation templates in advance, the system can quickly determine priorities for new vulnerabilities without time-consuming analysis, thus improving reliability while reducing calculation time.
Solution Approach 2:
The patent employs parameter changes by adjusting risk weightings and calculation parameters based on the specific context of each vulnerability and vehicle system. This allows the system to optimize calculation efficiency for different scenarios, maintaining comprehensive risk assessment while minimizing time requirements through adaptive parameter selection rather than uniform exhaustive analysis.
Data Source
AI summary
A priority determination system includes: an influenced entity extractor that obtains information indicating a vulnerability related to an ECU and extracts an ECU on which the vulnerability has influence; a calculator that calculates at least two risk values among an ECU risk value indicating a level of risk of a threat to the ECU caused by the vulnerability, a vehicle type risk value indicating a level of risk to a vehicle type equipped with the ECU to which the threat is caused by the vulnerability, and a spread risk value indicating a level of risk when the threat caused by the vulnerability is spread to the vehicle type; a priority determiner that determines, based on the at least two risk values, a priority of a countermeasure for the vulnerability; and an outputter that outputs the priority determined for each of a plurality of vulnerabilities.