曲严冬

网络安全风险评估在汽车电子开发中起着重要作用｡然而,现有的评估模型存在局限性,难以全面评估复杂环境中的风险｡本研究旨在改进现有的HEAVENS模型,以提升其在汽车电子网络安全评估中的实用性和适应性｡本文提出了一系列改进方法,包括引入新的工具化评分指标集以及考虑剩余风险因素,以更好地适应复杂的风险评估需求｡通过对改进后的模型的应用验证｡结果表明,改进后的HEAVENS模型在网络安全风险评估方面表现出更好的适用性和风险闭环管控｡

网络安全；评估模型；汽车电子；剩余风险

[1] Islam M, Sandberg C, Bokesand A, et al. Deliverable d2-security models[J]. HEAVENS Project, Version, 2014, 1. [2] Lautenbach A, Almgren M, Olovsson T. Proposing HEAVENS 2.0–an automotive risk assessment model[C]//Proceedings of the 5th ACM Computer Science in Cars Symposium. 2021: 1-12. [3] 金进. 自动驾驶汽车网络安全法律问题研究[D].华东政法大学,2023. [4] 李若兰.自动驾驶汽车网络安全的法律规制[J].行政管理改革,2019(10):43-49. [5] Hermawan N T E, Winarko E, Ashari A. Eight Prime Numbers of Modified RSA Algorithm Method for More Secure Single Board Computer Implementation[J]. International Journal on Advanced Science, Engineering and Information Technology, 2021, 11(6): 2375-2384. [6] International Organization for Standardization. ISO/SAE21434: 2021: Road Vehicles: Cybersecurity Engineering[M]. ISO, 2021. [7] No U N R. 155 [Uniform provisions concerning the approval of vehicles with regards to cyber security and cyber security management system][J]. 2021.

点击下载PDF