基于STPA的车载诊断和软件更新系统安全性分析方法
An STPA-based Approach for Systematic Security Analysis of In-vehicle Diagnostic and Software Update Systems
摘要：
车载诊断和软件更新系统支持远程诊断和空中（OTA）软件更新，是汽车中的关键攻击目标。攻击者可以将恶意软件注入车辆或通过通信渠道窃取敏感信息。因此，需要在系统设计中进行安全分析，以识别潜在的安全问题。然而，现有的车载系统安全分析是以威胁为导向的，从威胁识别开始，通过头脑风暴来评估风险。本文在系统理论过程分析（STPA）的基础上，提出了一种面向系统的方法。该方法从数据流的角度扩展了原有的STPA，适用于基于信息流的系统。此外，我们提出了一个通用的模型，车载诊断和软件更新系统，并使用它来建立一个安全分析准则。与面向威胁的方法相比，所提出的方法从关注威胁转向关注系统漏洞，并且似乎有效地防止系统受到已知甚至未知的威胁。此外，作为扩展的STPA，这已被证明是适用于高层次的设计，所提出的方法可以很好地集成到高层次的分析和执行协同设计在不同的学科在一个统一的STPA框架。
英文摘要：
The in-vehicle diagnostic and software update system, which supports remote diagnostic and Over-The-Air (OTA) software updates, is a critical attack goal in automobiles. Adversaries can inject malicious software into vehicles or steal sensitive information through communication channels. Therefore, security analysis, which identifies potential security issues, needs to be conducted in system design. However, existing security analyses of in-vehicle systems are threat-oriented, which start with threat identification and assess risks by brainstorming. In this paper, a system-oriented approach is proposed on the basis of the System-Theoretic Process Analysis (STPA). The proposed approach extends the original STPA from the perspective of data flows and is applicable for information-flow-based systems. Besides, we propose a general model for in-vehicle diagnostic and software update systems and use it to establish a security analysis guideline. In comparison with threat-oriented approaches, the proposed approach shifts from focusing on threats to system vulnerabilities and seems to be efficient to prevent the system from known or even unknown threats. Furthermore, as an extension of the STPA, which has been proven to be applicable to high level designs, the proposed approach can be well integrated into high-level analyses and perform co-design in different disciplines within a unified STPA framework.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
