针对测试车载单元(On Board Unit, OBU)或整车是否具备识别恶意数据的能力以及其恶意数据识别能力是否符合要求的问题,提出了一种恶意数据识别能力测试方法,搭建了蜂窝车联网(Cellular-Vehicle to Everything, C-V2X)信息安全测试系统...针对测试车载单元(On Board Unit, OBU)或整车是否具备识别恶意数据的能力以及其恶意数据识别能力是否符合要求的问题,提出了一种恶意数据识别能力测试方法,搭建了蜂窝车联网(Cellular-Vehicle to Everything, C-V2X)信息安全测试系统。根据恶意数据消息的发送主体的合法性、一致性和安全层校验通过情况,将常见恶意数据攻击进行分类。基于分类结果,设计相应测试用例,利用测试设备生成非法安全协议数据单元(Session Primitive Data Unit, SPDU)数据包。C-V2X信息安全测试中包括车用无线通信技术(Vehicle to Everything, V2X)模拟模块、全球导航卫星系统(Global Navigation Satellite System, GNSS)模拟模块、证书授权(Certificate Authority, CA)平台和场景模拟模块等几个部分,在C-V2X模拟模块采用FPGA处理上位机的比特流,并采用数字上变频(Digital Up Converters, DUC)、数字下变频(Digital Down Converter, DDC)和数模转换器(Digital to Analog Converter, DAC)等几个模块完成数据处理。结果表明,所提测试方法可以模拟常见的恶意数据攻击,测试设备生成的合法数据包可以被车辆正常接受,生成的非法数据包部分可以被待测设备识别并丢弃。展开更多
New attacks are emerging rapidly in Information Security; hence the tools and technologies available for securing the information needs substantial upgradation as well as skills for operationalization to mitigate thes...New attacks are emerging rapidly in Information Security; hence the tools and technologies available for securing the information needs substantial upgradation as well as skills for operationalization to mitigate these attacks. It requires creation of practical training environment with tools and technologies available for Information Security. The design of Information Security courses involves scenario based hands-on-labs with real time security incidents and problems with global reach which could be customized quickly as per the scenario and user＇s requirement. In order to understand the underlying concepts as well as to learn the practical aspects of network and system security environment, an initiative has been taken and a Virtual Test Bed has been developed to meet the above objectives. It is an essential component in Information Security training concept which could be used to perform actual security attacks and remedial measures as well as to test the effectiveness of protection mechanisms and help in handling the security incidents effectively. This paper discusses the development of this Test Bed for Information Security skill development with virtual training environment using which Information Security concepts, attacks on networks/systems and practical scenarios are simulated for imparting hands on training to participants.展开更多
文摘针对测试车载单元(On Board Unit, OBU)或整车是否具备识别恶意数据的能力以及其恶意数据识别能力是否符合要求的问题,提出了一种恶意数据识别能力测试方法,搭建了蜂窝车联网(Cellular-Vehicle to Everything, C-V2X)信息安全测试系统。根据恶意数据消息的发送主体的合法性、一致性和安全层校验通过情况,将常见恶意数据攻击进行分类。基于分类结果,设计相应测试用例,利用测试设备生成非法安全协议数据单元(Session Primitive Data Unit, SPDU)数据包。C-V2X信息安全测试中包括车用无线通信技术(Vehicle to Everything, V2X)模拟模块、全球导航卫星系统(Global Navigation Satellite System, GNSS)模拟模块、证书授权(Certificate Authority, CA)平台和场景模拟模块等几个部分,在C-V2X模拟模块采用FPGA处理上位机的比特流,并采用数字上变频(Digital Up Converters, DUC)、数字下变频(Digital Down Converter, DDC)和数模转换器(Digital to Analog Converter, DAC)等几个模块完成数据处理。结果表明,所提测试方法可以模拟常见的恶意数据攻击,测试设备生成的合法数据包可以被车辆正常接受,生成的非法数据包部分可以被待测设备识别并丢弃。
文摘New attacks are emerging rapidly in Information Security; hence the tools and technologies available for securing the information needs substantial upgradation as well as skills for operationalization to mitigate these attacks. It requires creation of practical training environment with tools and technologies available for Information Security. The design of Information Security courses involves scenario based hands-on-labs with real time security incidents and problems with global reach which could be customized quickly as per the scenario and user＇s requirement. In order to understand the underlying concepts as well as to learn the practical aspects of network and system security environment, an initiative has been taken and a Virtual Test Bed has been developed to meet the above objectives. It is an essential component in Information Security training concept which could be used to perform actual security attacks and remedial measures as well as to test the effectiveness of protection mechanisms and help in handling the security incidents effectively. This paper discusses the development of this Test Bed for Information Security skill development with virtual training environment using which Information Security concepts, attacks on networks/systems and practical scenarios are simulated for imparting hands on training to participants.
