Research And Implementation Of Security Situation Awareness Technology For Internet Of Vehicles

In recent years,the rapid development of the Internet of Vehicles has made people’s travel more and more convenient,but the Internet of Vehicles has brought convenience to people while facing a lot of network security problems.Frequent cyber security incidents in the Internet of Vehicles have caused huge economic losses to enterprises and govern-ments.However,the traditional network security defense equipment of the Internet of Vehicles is a single-point security defense technology,which lacks effective cooperation with each other,and cannot control the network security status of the Internet of Vehicles as a whole.In order to be able to establish a multi-layered,three-dimensional network se-curity defense system for the Internet of Vehicles,the cyber security situation assessment technology evaluates the overall network situation by fusing multiple data sources,us-ing a specific comprehensive analysis method,and a reliable situation assessment model,thereby reflecting The current security status of the network.By sorting out and analyzing the relevant theories and technologies of cybersecurity situational awareness at home and abroad,in particular,we have conducted a more in-depth study of the extraction of situational elements and assessment of situational aware-ness in network security.Based on the characteristics of the Internet of Vehicles,this paper proposes a hierarchical network security situation assessment model for the Inter-net of Vehicles based on information fusion.And the model solves the problem that the traditional assessment model makes use of a single data source and the accuracy of the situation assessment is insufficient when facing multiple attacks.First,according to the characteristics of the connected car system,a new hierarchical car networking situation assessment model is proposed.The model is divided into attack / vulnerability layer,ve-hicle layer,local area layer and system layer.And the quantitative relationship between the layer is obtained through analysis.Secondly,the method of alert filtering based on environmental information and the improved hierarchical clustering algorithm based on alert content are used to complete the extraction of network security situation elements,so as to obtain specific attack information.Then,fusion of multi-source data information through improved D-S evidence theory using the credibility of security defense equipment as weight,a more objective attack probability is obtained,and the vulnerability of the ve-hicle and the dependency conditions of the attack are used to quantify each.The situation threat value of the vehicle node is obtained by combining the situation threat value of the vehicle node with the weight to obtain the situation threat value of the local area layer.Finally,the situation threat value of the system is obtained by integrating the situation threat values of different regions.In addition,a multi-level fuzzy comprehensive analysis method and a network performance quantification algorithm are proposed to determine the vehicle node weights.The importance of the vehicle itself and the characteristics of the vehicle movement are fully considered,and the problem of the subjectivity of vehicle node weight determination is solved.Finally,a safety situation assessment system for the connected car network is designed and implemented.This article tests the system’s key modules.Through analysis of the experimental results,it can be concluded that the situation assessment model proposed in this article can effectively evaluate and quantify the security situation of the Internet of Vehicles.It also validates the importance of combining the vehicle itself proposed in this article.And the weighting algorithm of the importance of network performance can further improve the accuracy of the situation evaluation of the connected car.