Research on Threat Identification and Protection Methods for Information Security of Intelligent Connected Vehicles

In order to fully comprehend the information security risks that the ICVs may be confronted with, and enhance the level of information security protection of the ICVs, it is necessary to comprehensively analyze the threats, challenges and potential risks faced by the ICVs proceeding from its architecture characteristics. Therefore, an architecture hierarchical model is proposed to divide the ICV architecture into four layers, which are the sensing device layer for collecting signals, the network communication layer for exchanging information among vehicles and various heterogeneous networks, the control service layer for executing computational decisions and the external connection layer accessed in a physical or wireless manner. A threat identification system based on STRIDE, analysis method directing at the four-layer model of intelligent network architecture is proposed to analyze different information security problems faced by each layer. The experimental results show that the method can effectively improve the accuracy and coverage rate of the threat analysis about the ICVs. Finally, on the basis of the threat identification results of the ICVs, different in vehicle communication domains are divided for ICVs according to the information security risks and security levels by detailed layering of architecture of vehicle-mounted network in the perspective of defense-in-depth of information security, so as to reduce the security risks of the network communication layer.