Research And Implementation On Automotive Electronic System Security Monitoring Technology

In recent years,with the improvement of the intellectualization and informatization of automobiles,smart cars and driverless cars have been developing rapidly.With Internet technology,Internet cars have achieved a relationship between people,cars and cars,cars and roads.The information security of automobiles has been given more and more attention.Modern cars are integrated with a large number of small embedded systems and electronic control units(ECU).These embedded systems and ECUs use CAN protocol to communicate,making the automotive electronic system a complex computer system.And with the development of Internet technology,cars have been able to access the Internet via wireless communication network and become the terminal devices on the Internet,which also increases the possibility that hackers can exploit various Internet security vulnerabilities to attack and control cars.Therefore,a safety monitoring system that monitors both the in-vehicle network and out-vehicle network is needed to realize the comprehensive protection of the automotive electronic system.Meanwhile,in order to make all the safety components under the unified management,a unified management framework is designed.In this thesis,the following work is carried out centering on the monitoring technology of automotive electronic system,which improves the safety of the automotive electronic system,reduces the risk to a certain extent,and provides an extensible plan for other security components that may be added.Firstly,the common attack methods of automotive electronics are analyzed,and it is confirmed that the safety monitoring at the vehicle terminal consists of two parts,the security monitor that runs on the vehicle-mounted communication gateway and the monitor that runs on the ECU or the CAN gateway.Secondly,the monitor that runs on the vehicle-mounted communication gateway mainly includes the contents of firewall,intrusion detection,traffic statistics,log module and other aspects.In addition,it is necessary to ensure the normal operation of multiple security components in the system.The security service platform needs to monitor the working status of each module in the automotive electronic system,and control the specific monitoring strategies of each security component by means of rules.Therefore,a unified framework has extracted by this paper.Thirdly,This thesis studies the detection technology of illegal communication behavior in vehicle E/E architecture,and proposes a vehicle network traffic monitoring method,which is used to monitor whether a message flow has been manipulated in the bus,and a lightweight message monitoring method is designed for the periodic message in CAN network which can be deployed on multiple nodes in a distributed way to ensure full coverage of important messages in the in-vehicle network.It is verified that this method can effectively monitor the exception in the CAN network.