KATECH, Convergence Security Lab., Pungse-ro 303, Cheonan 330912, Republic of Korea.
KATECH, Reliability-Certification Research Lab., Pungse-ro 303, Cheonan 330912, Republic of Korea.
Sensors (Basel). 2023 Jan 27;23(3):1421. doi: 10.3390/s23031421.
In a connected car, the vehicle's internal network is connected to the outside through communication technology. However, this can cause new security vulnerabilities. In particular, V2X communication, to provide the safety of connected cars, can directly threaten the lives of passengers if a security attack occurs. For V2X communication security, standards such as IEEE 1609.2 define the technical functions that digital signature and encryption to provide security of V2X messages. However, it is difficult to verify the security technology by applying it to the environment with real roads because it can be made up of other safety accidents. In addition, vehicle simulation R&D is steadily being carried out, but there is no simulation that evaluates security for the V2X application level. Therefore, in this paper, a virtual machine was used to implement a V2X communication simulation environment that satisfies the requirements for the security evaluation of connected cars. Then, we proposed scenarios for cybersecurity testing and evaluation, implemented and verified through CANoe Option.Car2X. Through this, it is possible to perform sufficient preliminary verification to minimize the variables before verifying security technology in a real road environment.
在联网汽车中,车辆的内部网络通过通信技术与外部连接。然而,这可能会导致新的安全漏洞。特别是,V2X 通信为了提供联网汽车的安全性,如果发生安全攻击,可能会直接威胁到乘客的生命。对于 V2X 通信安全,IEEE 1609.2 等标准定义了数字签名和加密等技术功能,以提供 V2X 消息的安全性。然而,由于它可能由其他安全事故组成,因此很难将其应用于真实道路环境来验证安全技术。此外,车辆模拟研发正在稳步进行,但没有评估 V2X 应用级别的安全的模拟。因此,在本文中,使用虚拟机实现了满足联网汽车安全评估要求的 V2X 通信模拟环境。然后,我们提出了网络安全测试和评估的场景,并通过 CANoe Option.Car2X 进行了实现和验证。通过这种方式,可以在真实道路环境中验证安全技术之前,进行充分的初步验证,以最小化变量。