基于AFI树的CPAS整体安全性工程方法

The Integral Security Engineering Method of CPAS Based on AFI Tree

信息物理车辆系统(CPAS)作为典型的信息物理系统应用,随着人工智能等基础技术的革新,其发展目前已被提升至中国国家战略层面。CPAS给用户带来了巨大的便利,但同时也让汽车暴露在互联网中,诱发了多起汽车信息安全事件。因此,如何保障CPAS的安全已经成为了世界范围的前沿课题。研究CPAS的特点和攻击模式,把控制论和网络安全紧密地结合,利用特殊的逻辑或门把攻击树的最终目标与故障树的事件联系起来,提出了一种功能安全和信息安全深度融合的AFI树分析方法,并把ISO 26262定义的汽车功能安全过程与SAE J3061定义的信息安全过程裁剪融合,建立了CPAS整体安全性工程实施流程和方法,在汽车自动驾驶系统上开展了应用。

As a typical application of information physics system, the development of CPAS has been upgraded to Chnia＇s national strategic level with the innovation of basic technologies such as artificial intelligence. CPAS brings great convenience to users, but it also exposes the automobile to the Internet, how to ensure the security of CPAS has become a worldwide forefront issue. Based on the study of the characteristics and attack mode of CPAS, a AFI tree analysis method for the deep integration of function security and information security by combining cybernetics and cybersecurity and linking the ultimate goal of the attack tree with the event of the fault tree with special logic or gate. And the implementation process and method of CPAS overall security engineering is established by cutting and integrating the vehicle function safety process defined by ISO 26262 and the information security process defined by SAE J 3061, and application has been carried out in automobile automatic driving system.