Security Assessment of Intelligent Cabin Controller Using AHP-Fuzzy Evaluation

The development of new energy vehicles brings new requirements for vehicle information security. According to the WP29.R155 regulations and ISO 21434 standards, it is required to conduct relevant information security assessments of systems before the development of vehicle information security. However, the current assessment of vehicle information security primarily remains qualitative, leading to a rather passive approach in security protection. Therefore, the quantification assessment of network security risks becomes particularly important. In response to the above issues, this paper proposes an Analytic Hierarchy Process-fuzzy comprehensive evaluation method for information security risk assessment to achieve quantitative analysis of information security risks. The method mainly includes the construction of a fuzzy comprehensive evaluation factor set, the calculation of evaluation sets and fuzzy comprehensive judgment matrices, the calculation of weight sets and judgment matrices, and multi-level fuzzy comprehensive judgments. To validate the usability and rationality of this method, an intelligent cabin controller is selected as a case for a thorough analysis and assessment of information security risks. By thoroughly exploring the system architecture of the controller, the direction of data flow, and its interaction with the external environment, we extract the data/communication security assets that require protection. We comprehensively assess the potential threats and risks it faces. This provides strong support for the later development of vehicle information security and, at the same time, establishes a scientifically feasible foundation for formulating protection strategies for vehicle information security.