An attack source recognition system according to one embodiment of the present invention comprises: a plurality of electronic control devices; a gateway device communicably connected to the plurality of electronic control devices; and an analysis device communicably connected to the plurality of electronic control devices, the electronic control device including: a generation unit configured to generate history information of a message transmitted from a process executed by the electronic control device; and a transmission unit configured to transmit at least a portion of the history information to the analysis device, the gateway device having: a detection unit configured to detect an attack message from among messages transmitted and received by the plurality of electronic control devices, the analysis device having: a recognition unit configured to recognize the attack message from among the messages transmitted and received by the plurality of electronic control devices; when the attack message is detected, the electronic control device identifies a transmission source of the attack message by using detection information relating to the attack message and information received from the plurality of electronic control devices.
本发明的一个方式所涉及的攻击源识别系统包括:多个电子控制装置;与所述多个电子控制装置可通信地连接的网关装置;与所述多个电子控制装置可通信地连接的分析装置,其中,所述电子控制装置具有:生成部,构成为生成从自身执行的进程发送的消息的历史记录信息;和发送部,构成为将所述历史记录信息的至少一部分的信息发送到所述分析装置,所述网关装置具有:检测部,构成为从由所述多个电子控制装置收发的消息中检测攻击消息,所述分析装置具有:识别部,构成为在检测到所述攻击消息的情况下,使用与所述攻击消息相关的检测信息和从所述多个电子控制装置接收到的信息,来识别所述攻击消息的发送源。
Attack source recognition system, attack source recognition device, attack source recognition method, and program
攻击源识别系统、攻击源识别装置、攻击源识别方法以及程序
13.12.2024
Patent
Elektronische Ressource
Chinesisch
Europäisches Patentamt | 2025
|Europäisches Patentamt | 2023
|Patch-Based attack on traffic sign recognition
IEEE | 2021
|