In view of the automotive cybersecurity incidents occur frequently with no evaluation standard, a comprehensive evaluation method is proposed, which firstly reviews the process of obtaining automotive cybersecurity goals and function requirements through threat analysis and risk assessment. Then the international research projects on automotive cybersecurity and the key issues are summarized. It is proposed to score (0-100) from the three dimensions of cybersecurity level, intelligent level and incident response capacity of enterprise, and then comprehensively evaluate the cybersecurity performance level of automobile. Cybersecurity level includes concept design of cybersecurity, verification of protection scheme and penetration test. We conducted penetration testing from seven aspects, including network architecture, ECU, T-box, Radio, IVI, cloud Platform, APP. To all, there are 30 test groups, including software security, hardware security, communication security, identity authentication, data security, etc., a total of 108 test items. The intelligent level is evaluated according to 40 documents of 5 categories, and the enterprise's incident response capacity is evaluated according to 20 documents of 5 categories. The analytic hierarchy process (AHP) is adopted to determine the weight distribution of cybersecurity level, intelligent level and incident response capacity of enterprise. To ensure the reasonableness of weight coefficient allocation, 50 people with different gender, occupation and education background were invited to fill in the questionnaire. A specific scoring method for three dimensions is given and the comprehensive evaluation case of vehicle information security is given. Finally, the finiteness of this method is summarized, and it is pointed out that it can be further studied in the aspect of vulnerability rating specification and document review rules.


    Access

    Check access

    Check availability in my library

    Order at Subito €


    Export, share and cite



    Title :

    A Study on Comprehensive Evaluation of Intelligent Connected Vehicle Cybersecurity


    Contributors:
    Sun, Hang (author) / Zheng, Jihu (author) / Shi, Peiji (author) / Zhang, Yanan (author) / Liu, Yangyang (author) / Wu, Zhixin (author) / CATARC


    Publication date :

    2019




    Type of media :

    Conference paper


    Type of material :

    Print


    Language :

    English



    A Study on Comprehensive Evaluation of Intelligent Connected Vehicle Cybersecurity

    Zhang, Yanan / Sun, Hang / Wu, Zhixin et al. | British Library Conference Proceedings | 2019



    Advanced Analytics for Connected Car Cybersecurity

    Levi, Matan / Allouche, Yair / Kontorovich, Aryeh | IEEE | 2018


    A Survey of Anomaly Detection for Connected Vehicle Cybersecurity and Safety

    Rajbahadur, Gopi Krishnan / Malton, Andrew J. / Walenstein, Andrew et al. | IEEE | 2018


    A SURVEY OF ANOMALY DETECTION FOR CONNECTED VEHICLE CYBERSECURITY AND SAFETY

    Rajbahadur, Gopi Krishnan / Malton, Andrew J. / Walenstein, Andrew et al. | British Library Conference Proceedings | 2018