【摘要】 智能网联汽车(intelligent connected vehicle, ICV)作为一种新型信息物理系统,既存在车内软硬件故障失效造成的功能安全(safety)风险,也存在网络攻击导致的网络安全(security)威胁,还存在因二者交织叠加产生的新质安全问题.如何构建一个“高可靠、高可信、高可用”一体的韧性安全技术体系,使ICV在面对功能安全、网络安全等风险和威胁时具备预防、抵御、恢复和适应的韧性能力,成为了汽车行业重大新挑战.本文探索了一种内生安全赋能的智能网联汽车韧性技术.首先,以ICV智能系统——高级辅助驾驶系统(advanced driving assistance system, ADAS)为对象,提出基于动态异构冗余(dynamic heterogeneous redundancy, DHR)架构的韧性增强方法;随后,提出基于系统理论过程分析(STPA-safesec)与贝叶斯网络(Bayesian network, BN)的韧性量化评估方法,通过实车测试和模型评估验证了DHR架构ADAS韧性效果;在此基础上,设计了一种面向整车智能网联系统的韧性安全系统方案,并初步验证了应对不同类型漏洞的安全效果.更多还原

【Abstract】 Intelligent connected vehicles(ICVs) are a new type of cyber-physical systems; consequently, they encounter safety issues related to software and hardware failures. Additionally, they encounter security issues related to cyberattacks, and emerging safety–security(S&S) issues arising from the interaction of the above factors. Developing a resilient S&S technology system that is reliable and trustworthy, and enables ICVs to prevent, withstand, recover, and adapt to these challenges is highly important in the automotive industry. To achieve this objective, we propose a resilient technology framework for ICVs empowered by endogenous security &safety. Initially, we consider the advanced driving assistance system(ADAS), which is a key system in ICVs, and propose a resilience improvement method based on a dynamic heterogeneous redundancy(DHR) architecture.Next, we propose a resilience quantitative evaluation method based on system-theoretical process analysis for safety and security(STPA-safesec) as well as Bayesian networks. The resilience effectiveness of the proposed DHR-based ADAS is verified by conducting real vehicle testing and model-based evaluation. Based on the above,we further propose a systematic resilience engineering solution for the entire vehicle intelligent network system and verify its effectiveness in dealing with different types of vulnerabilities.更多还原