In view of the automotive cybersecurity incidents occur frequently with no evaluation standard, a comprehensive evaluation method is proposed, which firstly reviews the process of obtaining automotive cybersecurity goals and function requirements through threat analysis and risk assessment. Then the international research projects on automotive cybersecurity and the key issues are summarized. It is proposed to score (0-100) from the three dimensions of cybersecurity level, intelligent level and incident response capacity of enterprise, and then comprehensively evaluate the cybersecurity performance level of automobile. Cybersecurity level includes concept design of cybersecurity, verification of protection scheme and penetration test. We conducted penetration testing from seven aspects, including network architecture, ECU, T-box, Radio, IVI, cloud Platform, APP. To all, there are 30 test groups, including software security, hardware security, communication security, identity authentication, data security, etc., a total of 108 test items. The intelligent level is evaluated according to 40 documents of 5 categories, and the enterprise's incident response capacity is evaluated according to 20 documents of 5 categories. The analytic hierarchy process (AHP) is adopted to determine the weight distribution of cybersecurity level, intelligent level and incident response capacity of enterprise. To ensure the reasonableness of weight coefficient allocation, 50 people with different gender, occupation and education background were invited to fill in the questionnaire. A specific scoring method for three dimensions is given and the comprehensive evaluation case of vehicle information security is given. Finally, the finiteness of this method is summarized, and it is pointed out that it can be further studied in the aspect of vulnerability rating specification and document review rules.
A Study on Comprehensive Evaluation of Intelligent Connected Vehicle Cybersecurity
2019
Conference paper
English
A Study on Comprehensive Evaluation of Intelligent Connected Vehicle Cybersecurity
British Library Conference Proceedings | 2019
|Connected vehicles:organizational cybersecurity processes and their evaluation
BASE | 2023
|Advanced Analytics for Connected Car Cybersecurity
IEEE | 2018
|A SURVEY OF ANOMALY DETECTION FOR CONNECTED VEHICLE CYBERSECURITY AND SAFETY
British Library Conference Proceedings | 2018
|