车载终端信息安全风险实测举隅

A test-based study of in-vehicle terminal’s ybersecurity vulnerabilities

车联网信息安全是车联网产业健康发展的重要环节,车载终端是智能网联汽车连接车内网与车外网,实现信息交互的重要子系统。文章在编制车载终端信息安全测评指标的基础上,对车载终端信息安全开展测试。文章从系统安全、应用安全、通信安全、数据安全各个方面介绍了检测工作中发现的若干典型信息安全风险,为车联网安全研究提供参考。

Cybersecurity plays an important role in the development of IoV,and the in-vehicle terminal is an important subsystem that connects the interior network to the broader V2X network.Based on the CSTC security evaluation specification for in-vehicle terminals,comprehensive cybersecurity tests were conducted by CSTC.This paper summarizes characteristic cybersecurity vulnerabilities of contemporary in-vehicle terminals,classified into system security,application security,communication security,and data security.