车内零部件信息安全防护.pdf

1、PUBLICSECURITY PROTECTION FOR IN-VEHICLE COMPONENTSPreh Joyson丨Ningbo丨Wang Linyuanzi Preh GmbH 2024PASSION FOR EXCELLENCE-public-2AGENDAINTRODUCTION TO SECURITYPROTECTION MECHANISMSSECURITY FEATURESCRYPTOGRAPHIC BUILDING BLOCKSPREH COMPANYINTRODUCTION TO SECURITY Preh GmbH 2024PASSION FOR EXCELLENCE

2、-public-4WHY DO WE NEED CYBERSECURITY?Introduction to SecurityLike we have physical security like locks,fences,or police officers to minimize crime in the real world,we need cybersecurity to minimize crime in the virtual worldCybersecurity can be thought of as a set of techniques to protect the secr

3、ecy(confidentiality),integrity,and availability1 of computer systems and data against threatsConfidentialityMaking sure that only authorized people can read or access specific datae.g.Data Breach or LeakIntegrityProhibit unauthorized people from modifying specific datae.g.Data Manipulation or Tamper

4、ingAvailabilityEnsuring the system and data can always be accessed by authorized peoplee.g.Denial of Service(DoS)1 Also authenticity,non-repudiation,authorization Preh GmbH 2024PASSION FOR EXCELLENCE-public-5Introduction to SecurityWHY DO WE NEED AUTOMOTIVE CYBERSECURITY?Threats known from PC domain

5、(hacks,compromise,etc.)become threats to cars.A car used to be a closed system this changed A modern car offers many interfaces(LTE,Wi-Fi,BT,USB,SD-Card,)Large amount of software/computerizationOn the other hand,hacking a car is rewarding“White hat”:Publicity,Research“Black hat”:Stealing cars,unlock

6、 functionality for free,steal PII,harm driver,ransomware?Hacking used to be driven mostly by academia,but in 2018“black hat”attacks surpassed“white hat”attacksIncrease in computerization and connectivityIncreased attack surface Preh GmbH 2024PASSION FOR EXCELLENCE-public-6Introduction to SecurityWHY