网联汽车车载终端的威胁模型和风险评估

Threat Model and Risk Assessment of Connected Vehicle Terminal

网联汽车车载终端系统与外界网络连通特性引入了大量的信息安全隐患。文章系统地分析了网联汽车车载终端的外部威胁面,并抽象出五种基本的外部攻击向量,建立了车载终端系统的威胁模型;同时综合考虑攻击者的效用问题和实际可能造成的危害提出了相应的风险评估框架,在具有代表性的某款网联汽车上进行相关攻击和测试实验后,发现其车载终端存在着一些可被利用的攻击面,最后利用该威胁模型和风险评估框架有效地对车载终端进行了安全风险评估。

The connectivity between the vehicle terminal system and the external network has introduced a lot of information security risks. This paper systematically analyzes the external threat surface of terminals, abstracts five basic external attack vectors, and established the threat model of vehicle terminal system. At the same time, considering the problem of attacker’s "utility" and the actual possible harm, a corresponding framework of threat analysis and risk assessment is proposed. After carrying out relevant attacks and test experiments on a representative connected vehicle, it is found that there are some attack surfaces that can be used in the terminals, and we used the framework to effectively carry out the security risk assessment.