棘手问题，简约解决方案：保障电动汽车充电站软件安全
Wicked Problem, Parsimonious Solution: Securing Electric Vehicle Charging Station Software
浏览论文内容
中文总结 AI 辅助
针对电动汽车充电站软件易受攻击且缺乏防护的问题，提出应用分层软件质量保证（HSQA）来全面评估其代码质量与安全性，覆盖从CVE到CIA三元组的多层次特征。
中文摘要 AI 辅助
电动汽车充电基础设施带来了一系列新型网络物理威胁。在这些基础设施中，充电站是最脆弱的元素。充电站供电设备中的软件尤其容易受到攻击。目前，该软件是一个在很大程度上未受保护且特征描述不足的攻击面。为了表征这一攻击面中的漏洞，我们主张应用现代软件质量保证来刻画电动汽车充电站软件中的漏洞。具体而言，我们主张将分层软件质量保证（HSQA）应用于专门的电动汽车充电站软件。HSQA提供了代码质量和安全性的全面视图——从单个漏洞（如CVE）级别到高层特征（如CIA三元组）。HSQA在整个软件开发生命周期中整合了质量和安全考量。因此，我们的立场是，HSQA是评估电动汽车充电站软件的极佳方法。
英文摘要
Electric vehicle charging infrastructure presents a suite of novel cyber-physical threats. Among this infrastructure, charging stations are the most vulnerable elements. The software in the charging station supply equipment is particularly vulnerable. Currently, the software is an attack surface that is largely unprotected and poorly characterized. To represent the vulnerabilities in this attack surface, we advocate for applying modern software quality assurance to characterize vulnerabilities in electric vehicle charging station software. Specifically, we advocate for the application of hierarchical software quality assurance (HSQA) to specialized electric vehicle charging station software. HSQA provides a comprehensive view of the code quality and security -- from the level of individual vulnerabilities (e.g., CVEs) to high level characteristics (e.g., CIA Triad). HSQA incorporates quality and security considerations throughout the software development lifecycle. Thus, our position is that HSQA is an excellent approach for assessing electrical vehicle charging station software.
发表机构
- Montana State University（蒙大拿州立大学）
- Pacific Northwest National Laboratory（太平洋西北国家实验室）
- Idaho National Laboratory（爱达荷国家实验室）
机构由 AI 辅助整理，请以论文原文为准。
