基于威胁建模的智能汽车网络安全风险防护设计
DOI:
CSTR:
作者:
作者单位:

江铃汽车股份有限公司 南昌 330000

作者简介:

徐辉(1982—),本科,研究方向为网络安全、大数据、AI。

通讯作者:

中图分类号:

TP309

基金项目:


Design of Intelligent Automotive Network Security Risk Protection Based on Threat Modeling
Author:
Affiliation:

Jiangling Motors Co.,Ltd.,Nanchang 330000 ,China

Fund Project:

  • 摘要
  • |
  • 图/表
  • |
  • 访问统计
  • |
  • 参考文献
  • |
  • 相似文献
  • |
  • 引证文献
  • |
  • 资源附件
  • |
  • 文章评论
    摘要:

    随着智能汽车产业的发展,其网络安全问题愈发凸显。据统计,智能网联汽车中涉及车辆操控、车载通信以及数据存储的核心漏洞已超3 700个,2023年至2024年9月间,国内发生20余起车企相关数据泄露事件,暴露出行业在安全防护方面的严峻挑战。在这一背景下,威胁建模技术以其对潜在风险的系统化分析和评估能力,成为网络安全防护的关键工具。目前,STRIDE模型、攻击树等经典建模方法在风险识别和分析中表现出一定优势,但其对智能汽车特定场景的适配性有限,难以涵盖复杂的车联网交互及数据流动场景,且与后续的防护设计缺乏有机衔接。因此,文中探讨了基于威胁建模的智能汽车网络安全风险防护设计问题,以期提升智能汽车网络安全风险防护水平。

    Abstract:

    With the development of the intelligent automobile industry, its network security issues have become increasingly prominent. According to statistics, there are over 3700 core vulnerabilities related to vehicle control, in vehicle communication, and data storage in intelligent connected vehicles. Between 2023 and September 2024, there were more than 20 data breaches related to car companies in China, exposing severe challenges in the industrys security protection. In this context, threat modeling technology has become a key tool for network security protection due to its ability to systematically analyze and evaluate potential risks. At present, classic modeling methods such as STRIDE model and attack tree have shown certain advantages in risk identification and analysis, but their adaptability to specific scenarios of intelligent vehicles is limited, making it difficult to cover complex scenarios of vehicle networking interaction and data flow, and lacking organic connection with subsequent protection design. Therefore, the paper explores the design of intelligent vehicle network security risk protection based on threat modeling, in order to improve the level of intelligent vehicle network security risk protection.

    参考文献
    相似文献
    引证文献
引用本文

徐辉.基于威胁建模的智能汽车网络安全风险防护设计[J].移动信息,2025,47(2):157-159.
[author_e n_name]. Design of Intelligent Automotive Network Security Risk Protection Based on Threat Modeling[J].,2025,47(2):157-159.

复制
分享
文章指标
  • 点击次数:
  • 下载次数:
  • HTML阅读次数:
  • 引用次数:
历史
  • 收稿日期:
  • 最后修改日期:
  • 录用日期:
  • 在线发布日期: 2025-03-19
  • 出版日期:
文章二维码
关闭