CN111935153A - CAN bus-based target message extraction method and device and storage medium - Google Patents

CAN bus-based target message extraction method and device and storage medium Download PDF

Info

Publication number
CN111935153A
CN111935153A CN202010804598.5A CN202010804598A CN111935153A CN 111935153 A CN111935153 A CN 111935153A CN 202010804598 A CN202010804598 A CN 202010804598A CN 111935153 A CN111935153 A CN 111935153A
Authority
CN
China
Prior art keywords
message
target
group
frame
messages
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN202010804598.5A
Other languages
Chinese (zh)
Other versions
CN111935153B (en
Inventor
王家坡
杨威
陈强
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing Topsec Technology Co Ltd
Beijing Topsec Network Security Technology Co Ltd
Beijing Topsec Software Co Ltd
Original Assignee
Beijing Topsec Technology Co Ltd
Beijing Topsec Network Security Technology Co Ltd
Beijing Topsec Software Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing Topsec Technology Co Ltd, Beijing Topsec Network Security Technology Co Ltd, Beijing Topsec Software Co Ltd filed Critical Beijing Topsec Technology Co Ltd
Priority to CN202010804598.5A priority Critical patent/CN111935153B/en
Publication of CN111935153A publication Critical patent/CN111935153A/en
Application granted granted Critical
Publication of CN111935153B publication Critical patent/CN111935153B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L69/00Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
    • H04L69/22Parsing or analysis of headers
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00Data switching networks
    • H04L12/28Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/40Bus networks
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00Data switching networks
    • H04L12/28Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/40Bus networks
    • H04L2012/40208Bus networks characterized by the use of a particular bus standard
    • H04L2012/40215Controller Area Network CAN
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00Data switching networks
    • H04L12/28Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/40Bus networks
    • H04L2012/40267Bus for use in transportation systems
    • H04L2012/40273Bus for use in transportation systems the transportation system being a vehicle

Abstract

The application provides a target message extraction method, a device and a storage medium based on a CAN bus, wherein the method comprises the following steps: acquiring a plurality of frames of initial messages acquired on a CAN bus, wherein the plurality of frames of initial messages are acquired in the process of carrying out target operation on a vehicle, the plurality of frames of initial messages comprise target messages, the target messages comprise at least one frame of message, and the at least one frame of message forms a control instruction corresponding to the target operation; reducing the multi-frame initial message to obtain a target message group comprising the target message, wherein the number of the messages in the target message group is within a preset interval; and carrying out frame reduction and playback processing on the messages in the target message group to obtain the target messages. The method and the device can effectively help the safety penetration tester to perform reverse messages, compared with the prior art, the obtained result does not contain useless messages, and the target message can be accurately locked from the collected messages.

Description

CAN bus-based target message extraction method and device and storage medium
Technical Field
The application relates to the technical field of vehicle communication, in particular to a method and a device for extracting a target message based on a CAN bus and a storage medium.
Background
Modern vehicles contain more software and offer more advanced functions and connections than before, which also means an increasingly large attack surface. Vehicles are becoming targets for network security attacks. In recent years, information security incidents for vehicles have been frequent, and therefore it is imperative to find and fix security breaches before vehicles are released to the market. An effective way to identify a security breach is to perform a security test, such as a penetration test.
CAN bus communication is a main communication mode in a vehicle at the present stage, and a hacker CAN permeate the CAN bus in the vehicle through various external interfaces of the vehicle, but because the CAN bus lacks an information security guarantee mechanism, the hacker CAN execute various malicious attacks on the CAN bus. The message reversal is that a tester grabs a message on the CAN bus while performing mechanical operation (such as driving a vehicle lamp) on the vehicle, and extracts a control message corresponding to the operation of the driving lamp by means of analysis, playback and the like. The control message which is reversely sent out is sent to the vehicle again, and the same mechanical operation (such as turning on the vehicle lamp) can be carried out on the vehicle. At present, the internet of heavy vehicles is safer in the industry, so that the message reversely becomes an item which must be tested by a host factory and safety personnel, and also becomes a detection item of safety detection.
At present, the method for extracting the control message when the message is reversed mainly adopts a differential method, and the technical idea of the differential method is to collect two messages, not perform any mechanical operation on the vehicle during the first collection, perform mechanical operation on the vehicle during the second collection, compare the two collected messages, remove the repeated message therein, leave the differential message, and replay the differential message to obtain the control message therein. The difference method has the defects that a lot of CAN bus messages exist in the vehicle, and other data also exist in the messages acquired twice, so that other messages except the control message cannot exist in the difference message, and the difference method cannot be accurately locked to the specific control message.
Disclosure of Invention
An object of the embodiments of the present application is to provide a method, an apparatus, and a storage medium for extracting a target packet based on a CAN bus, which CAN accurately lock the target packet from a plurality of collected packets.
In a first aspect, an embodiment of the present application provides a method for extracting a target packet based on a CAN bus, including: acquiring a plurality of frames of initial messages acquired on a CAN bus, wherein the plurality of frames of initial messages are acquired in the process of carrying out target operation on a vehicle, the plurality of frames of initial messages comprise target messages, the target messages comprise at least one frame of message, and the at least one frame of message forms a control instruction corresponding to the target operation; reducing the multi-frame initial message to obtain a target message group comprising the target message, wherein the number of the messages in the target message group is within a preset interval; and carrying out frame reduction and playback processing on the messages in the target message group to obtain the target messages.
The target message extraction method provided by the application can effectively help safety penetration testing personnel to perform reverse messages, compared with the prior art, the obtained result does not contain useless messages, the target message can be accurately locked from the collected multi-frame initial message, and the method can be used for a scene that a single-frame message forms a control instruction and can also be used for a scene that the multi-frame message forms the control instruction.
In an optional implementation manner, the reducing the multi-frame initial packet to obtain a target packet group including the target packet includes: setting the multi-frame initial message as a first current object; dividing the first current object into a first message group and a second message group according to a preset proportion; when the target message does not exist in the first message group and the second message group, adjusting the preset proportion, and subdividing the first current object into the first message group and the second message group according to the adjusted preset proportion until the target message exists in the first message group or the second message group; and acquiring the target message group according to the message group of the target message in the first message group and the second message group.
For a scene of a control instruction composed of multi-frame messages, all the messages in the multi-frame messages need to be extracted from a plurality of collected messages, for this reason, the range of the multi-frame messages is firstly preliminarily locked by utilizing message group division processing to obtain a target message group, when the message group division is carried out, if the multi-frame messages are found to be split, the division proportion is adjusted and the multi-frame messages are divided again, and then the reverse messages are played by using a frame reduction and playback method until the multi-frame messages are found.
In an optional implementation manner, the obtaining the target packet group according to a packet group of the target packet in the first packet group and the second packet group includes: taking one message group with the target message in the first message group and the second message group as a message group to be selected, and judging whether the number of the messages in the message group to be selected is within a preset interval or not; if the current object is not in the preset interval, setting the message group to be selected as a first current object, and skipping to the step of dividing the first current object into a first message group and a second message group according to a preset proportion; and if the message group to be selected is in the preset interval, determining the message group to be selected as the target message group.
And after a message group with a target message is determined, judging whether the message quantity of the message group is within a preset interval, if so, indicating that the reduction processing of the multi-frame initial message reaches the expectation, entering the next frame reduction playback processing, and if not, continuing to take the message group as the first current object and carrying out the reduction operation again.
In an optional implementation manner, after dividing the first current object into a first packet group and a second packet group according to a preset ratio, the method further includes: replaying the first message group to determine whether the target message exists in the first message group; if the target message exists in the first message group, skipping to a step of taking one of the first message group and the second message group in which the target message exists as a message group to be selected, and judging whether the number of messages in the message group to be selected is within a preset interval or not; if the target message does not exist in the first message group, replaying a second message group to determine whether the target message exists in the second message group; if the target message exists in the second message group, skipping to a step of taking one of the first message group and the second message group in which the target message exists as a message group to be selected, and judging whether the number of messages in the message group to be selected is within a preset interval or not; and if the target message does not exist in the second message group, skipping to the step of adjusting the preset proportion.
After the first current object is divided into two message groups, the first message group is replayed, if the target message exists in the first message group, the second message group does not need to be replayed, and unnecessary operations are reduced.
In an optional implementation manner, the performing frame reduction playback processing on the packets in the target packet group to obtain the target packet includes: setting the target message group as a second current object; deleting the preset frame message in the second current object, which is not subjected to the deletion operation, to obtain a first residual message; judging whether the target message exists in the first residual message or not; if the target message exists in the first residual message, judging whether the message which is not subjected to deletion operation exists in the first residual message; if the message which is not subjected to the deleting operation does not exist, determining the first residual message as the target message; and if the message which is not subjected to the deleting operation exists, setting the first residual message as a second current object, and skipping to the step of deleting the preset frame message which is not subjected to the deleting operation in the second current object.
If all messages in the first remaining message are deleted, which indicates that all messages in the first remaining message are useful messages, the first remaining message can be directly determined as a target message, and if the first remaining message contains a message for which the deletion operation is not executed, which indicates that the first remaining message may contain a useless message, the frame reduction playback processing still needs to be performed.
In an optional implementation manner, after determining whether the target packet exists in the first remaining packet, the method further includes: if the target message does not exist in the first residual message, the deleted preset frame message is restored to the second current object, and the step of deleting the preset frame message which is not subjected to the deletion operation in the second current object is skipped to.
If the first remaining message does not have the target message, the deleted preset frame message is a part of the messages in the target message and is a useful message, so that the deleted preset frame message is restored to the second current object first, and then the frame reduction playback processing is performed on the second current object again.
In an optional implementation manner, the performing frame reduction playback processing on the packets in the target packet group to obtain the target packet includes: setting the target message group as a third current object; deleting the preset frame messages in the third current object by taking the first frame message to the last frame message in the third current object as a deleting sequence to obtain a second residual message; judging whether the second residual message has the target message; and if the target message exists in the second residual message, taking the second residual message as a third current object, and skipping to a step of deleting a preset frame message in the third current object by taking a first frame message to a last frame message in the third current object as a deleting sequence.
In an optional implementation manner, after determining whether the target packet exists in the second remaining packet, the method further includes: if the target message does not exist in the second residual message, restoring the deleted preset frame message to a third current object; deleting the preset frame message in the third current object by taking the last frame message to the first frame message in the third current object as a deleting sequence to obtain a third residual message; judging whether the third residual message has the target message; if the target message exists in the third residual message, taking the third residual message as a third current object, skipping to a step of deleting a preset frame message in the third current object by taking a last frame message to a first frame message in the third current object as a deletion sequence; and if the target message does not exist in the third residual message, restoring the deleted preset frame message to a third current object, and determining the third current object as the target message.
In the above two embodiments, the multiple frame messages in the target message are continuous, so that frame reduction playback is performed from the left message of the third current object first, if it is determined that a certain frame message on the left side is one frame message in the target message after frame reduction, the frame message is restored first, and frame reduction playback is performed from the right message of the third current object, if it is determined that a certain frame message on the right side is one frame message in the target message after frame reduction, the frame message is restored again, and at this time, the remaining messages are the target messages.
In a second aspect, an embodiment of the present application provides a device for extracting a target packet based on a CAN bus, including: the device comprises a message acquisition module, a message processing module and a message processing module, wherein the message acquisition module is used for acquiring a plurality of frames of initial messages acquired on a CAN bus, the plurality of frames of initial messages are acquired in the process of carrying out target operation on a vehicle, the plurality of frames of initial messages comprise target messages, the target messages comprise at least one frame of message, and the at least one frame of message forms a control instruction corresponding to the target operation; the message reduction module is used for reducing the multi-frame initial message to obtain a target message group comprising the target message, wherein the number of the messages in the target message group is within a preset interval; and the frame reduction playback module is used for carrying out frame reduction playback processing on the messages in the target message group to obtain the target messages.
In a third aspect, the present application provides a storage medium having a computer program stored thereon, where the computer program is executed by a processor to perform the method according to the first aspect or any one of the optional embodiments of the first aspect.
In a fourth aspect, the present application provides an electronic device comprising: a processor, a memory and a bus, the memory storing machine-readable instructions executable by the processor, the processor and the memory communicating via the bus when the electronic device is running, the machine-readable instructions when executed by the processor performing the method according to any one of the first aspect and the optional implementation manner of the first aspect.
Drawings
In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings that are required to be used in the embodiments of the present application will be briefly described below, it should be understood that the following drawings only illustrate some embodiments of the present application and therefore should not be considered as limiting the scope, and that those skilled in the art can also obtain other related drawings based on the drawings without inventive efforts.
Fig. 1 is a flowchart of a target message extraction method based on a CAN bus according to an embodiment of the present application;
FIG. 2 is a flow chart of one specific implementation of step 120 in an embodiment of the present application;
FIG. 3 is a flow chart of one specific implementation of step 124 in an example of the present application;
fig. 4 is another flowchart of a target packet extraction method based on a CAN bus according to the embodiment of the present application;
FIG. 5 is a flowchart of one embodiment of step 130 in the present example;
FIG. 6 is a flow chart of another embodiment of step 130 in the present example;
fig. 7 is a schematic diagram of a target packet extraction device based on a CAN bus according to an embodiment of the present application.
Detailed Description
The technical solutions in the embodiments of the present application will be described below with reference to the drawings in the embodiments of the present application.
An embodiment of the present application provides a method for extracting a target packet based on a CAN bus, please refer to fig. 1, where the method includes the following steps:
step 110: acquiring a plurality of frames of initial messages acquired on the CAN bus, wherein the plurality of frames of initial messages are acquired in the process of carrying out target operation on a vehicle.
The multi-frame initial message comprises a target message, the target message comprises at least one frame of message, and the at least one frame of message forms a control instruction corresponding to target operation. When a vehicle is subjected to target operation, a control instruction corresponding to the target operation is transmitted on a CAN bus in the vehicle, the control instruction may only consist of one frame of message or may also consist of multiple frames of messages, and the target message represents one frame of message or multiple frames of messages forming the control instruction. The length of a data field of each frame of message on the CAN bus is generally 8 bytes, and if the data of a Control instruction is large, one frame of message cannot transmit all data to a corresponding Electronic Control Unit (ECU), the data is packetized, the data is transmitted to the CAN bus in the form of multi-frame messages, and the data is transmitted to the corresponding ECU through the CAN bus.
The CAN bus is simultaneously connected with a plurality of ECUs, the number of the ECUs CAN reach dozens of and hundreds, and each ECU CAN send messages to the CAN bus and also CAN receive the messages from the CAN bus and execute corresponding actions. When a target operation is performed on a vehicle, the target operation may be a single operation, such as turning on a vehicle lamp, at this time, one ECU corresponding to the vehicle lamp receives a target message carrying a control instruction from the CAN bus, and performs an action of turning on the vehicle lamp. Of course, the target operation may also be not limited to a plurality of operations, such as turning on the vehicle door and turning on the vehicle lamp at the same time.
In one embodiment, a CAN transceiver is connected to the CAN bus, the CAN transceiver including CAN message transmitter and CAN message receiver, and the CAN transceiver is connected to a host computer, such as a computer via USB. In this embodiment, the step 110 and the step 130 may be executed by the upper computer, so that the upper computer may extract the required target message from the collected messages. Specifically, the CAN transceiver CAN collect messages from a CAN bus in the vehicle through the CAN message receiver, transmit the collected messages to the upper computer, extract target messages from the collected messages by the upper computer, receive replay commands of the upper computer and messages to be replayed simultaneously, and replay the messages to the CAN bus in the vehicle through the CAN message transmitter.
Step 120: and reducing the multi-frame initial message to obtain a target message group comprising a target message, wherein the number of the messages in the target message group is within a preset interval.
Step 130: and performing frame reduction and playback processing on the messages in the target message group to obtain the target messages.
Therefore, in this embodiment, the multi-frame initial message is firstly reduced to lock a target message group including a target message, the number of messages in the target message group is greatly reduced compared with the multi-frame initial message, which is beneficial to performing subsequent frame reduction playback processing, and the workload of the frame reduction playback processing is greatly reduced. And after the target message group is obtained, the target message group is replayed in a frame reduction mode so as to accurately lock the target message in the target message group.
Specifically, referring to fig. 2, one specific implementation of step 120 includes the following steps:
step 121: setting the multi-frame initial message as a first current object.
Step 122: and dividing the first current object into a first message group and a second message group according to a preset proportion.
The preset proportion of the first message group to the second message group is X: y, X + Y ═ 1. The values of X and Y can be manually configured, or a corresponding default value can be automatically set for X and Y. And the first current object is processed according to X: the proportion of Y is divided into a first packet group and a second packet group. It should be noted that the first current object in this embodiment is not fixed, and is initially a multi-frame initial message, but the first current object will change continuously with the execution of the subsequent steps, and a specific change manner of the first current object is described later.
In one embodiment, X is greater than 0.5 and Y is less than 0.5, although X may be equal to 0.5 and, similarly, Y may be equal to 0.5. Specifically, X: one of the mixture ratios of Y is 0.9: 0.1, i.e. 9: 1.
step 123: when the target message does not exist in the first message group and the second message group, the preset proportion is adjusted, and the first current object is divided into the first message group and the second message group again according to the adjusted preset proportion until the target message exists in the first message group or the second message group.
After the first current object is divided into the first message group and the second message group each time, whether a target message exists in the first message group and the second message group is judged, so that which one of the first message group and the second message group the target message is divided into is determined. It can be understood that, here, whether the target packet exists in the first packet group and the second packet group is determined, whether the target packet exists in the first packet group may be determined first, and if the target packet exists in the first packet group, the second packet group does not need to be determined again, or whether the target packet exists in the second packet group may be determined first, and if the target packet exists in the second packet group, the first packet group does not need to be determined again, or whether the target packet exists in the first packet group and whether the target packet exists in the second packet group may be determined respectively at the same time. It should be emphasized that, in this embodiment, determining whether a target packet exists in any packet group means determining whether the packet group completely includes all frame packets in the target packet, for example, the target packet includes a multi-frame packet, and then when the multi-frame packet needs to exist in a first packet group at the same time, it is called that the target packet exists in the first packet group.
In step 122, when the first current object is divided into the first packet group and the second packet group, if a part of frame packets of the multi-frame packet is divided into the first packet group, another part of frame packets of the multi-frame packet is divided into the second packet group, and at this time, a determination result that no target packet exists in the first packet group and the second packet group is obtained.
When the target message does not exist in the first message group and the second message group, adjusting the preset proportion, subdividing the first current object into the first message group and the second message group according to the adjusted preset proportion, judging whether the target message exists in the first message group and the second message group after the subdivision again, if the target message does not exist in the first message group and the second message group after the subdivision yet, continuing to execute the step of adjusting the preset proportion, and repeating the steps until the target message exists in the first message group or the second message group.
After determining that the target packet exists in one of the first packet group and the second packet group, the following step 124 is performed. It can be understood that the first packet group and the second packet group herein may be the first packet group and the second packet group obtained after the first current object is divided for the first time, or the first packet group and the second packet group obtained after the first current object is divided again after the preset proportion is adjusted.
Step 124: and acquiring the target message group according to the message group with the target message in the first message group and the second message group.
In the previous step 122-123, the first current object has been divided into two packet groups, and one packet group having the target packet in the two packet groups has been determined, so that the packet in the other packet group having no target packet belongs to the useless packet, and can be deleted. By repeating the above operations, useless messages can be continuously determined, and the range of the target message is continuously reduced, so that the effect of reducing the multi-frame initial message is achieved.
Referring to fig. 3, one specific implementation of step 124 includes the following steps:
step 1241: taking one message group with the target message in the first message group and the second message group as a message group to be selected, and judging whether the number of the messages in the message group to be selected is within a preset interval or not; if not, skipping to execute step 1242; if the current time is within the preset interval, the step 1243 is skipped.
Step 1242: the message group to be selected is set as the first current object, and the step 122 is skipped to execute.
If the number of the messages in the message group to be selected is not within the preset interval, setting the message group to be selected as a first current object, skipping to a step of dividing the first current object into a first message group and a second message group according to a preset proportion, and sequentially executing steps 122, 123 and 1241. Of course, if the target packet does not exist in both the first packet group and the second packet group after the step 122 is executed, the step 123 may be skipped. That is, after the to-be-selected packet group is set as the new first current object, the new first current object is divided into the first packet group and the second packet group again according to the preset proportion, one of the first packet group and the second packet group having the target packet is determined and is used as the to-be-selected packet group, and the step 1241 is continuously executed.
Step 1243: and determining the message group to be selected as a target message group.
By continuously and circularly executing the steps, more and more useless messages are discarded, the number of the messages in the first current object is gradually reduced, and the process jumps to the step 1243 to be executed until the number of the messages in the message group to be selected is within the preset interval, namely, the message group to be selected at the moment is determined as the target message group. In an embodiment, the preset interval may be set to [80,120], so that when the number of packets in the packet group to be selected is within 80-120, the current packet group to be selected may be locked and used as the target packet group.
Optionally, referring to fig. 4, after step 122, after dividing the first current object into a first packet group and a second packet group according to a preset ratio, the method further includes the following steps:
step 1221: replaying the first message group to determine whether a target message exists in the first message group; if the first message group has the target message, skipping to execute the step 1241; if the target packet does not exist in the first packet group, go to step 1222.
After the first current object is divided into the first packet group and the second packet group, the first packet group is replayed. Specifically, the upper computer sends a replay command and a first message group to the connected CAN transceiver, and the CAN transceiver responds to the replay command and sends a message in the first message group to the CAN bus after receiving the replay command and the first message group. If the first message group comprises the target message, the first message group should contain a complete control instruction, and then the corresponding ECU should also obtain the complete control instruction and execute the corresponding action, so that the phenomenon consistent with the target operation can be reproduced on the vehicle. And if the phenomenon consistent with the target operation reappears on the vehicle after the first message group is replayed, determining that the target message exists in the first message group. If the first packet group only includes a part of packets in the target packet or does not include any frame packet in the target packet, the phenomenon consistent with the target operation cannot be reproduced on the vehicle, and therefore, if the phenomenon consistent with the target operation is not reproduced on the vehicle after the first packet group is reproduced, it is determined that the target packet does not exist in the first packet group.
And if the first message group contains the target message, skipping to the step 1241, taking the first message group as a message group to be selected, judging whether the number of the messages in the first message group is within a preset interval, if so, determining the message group to be selected as the target message group, otherwise, taking the message group to be selected as a first current object, and skipping again to execute the step 122.
Step 1222: replaying the second message group to determine whether a target message exists in the second message group; if the second message group has the target message, skipping to execute the step 1241; if the second packet group does not have the target packet, the step 123 is skipped to.
And if the target message does not exist in the first message group, replaying the second message group. Specifically, the upper computer sends a replay command and a second message group to the connected CAN transceiver, and after receiving the replay command and the second message group, the CAN transceiver responds to the replay command and sends a message in the second message group to the CAN bus. And if the phenomenon consistent with the target operation reappears on the vehicle after the second message group is replayed, determining that the target message exists in the second message group. And if the phenomenon consistent with the target operation is not reproduced on the vehicle after the second message group is replayed, determining that the target message does not exist in the second message group.
And if the second message group contains the target message, jumping to the step 1241, taking the second message group as a message group to be selected, judging whether the number of the messages in the second message group is within a preset interval, if so, determining the message group to be selected as the target message group, otherwise, taking the message group to be selected as a first current object, and jumping again to execute the step 122.
If the second packet group does not have the target packet, that is, the first packet group and the second packet group do not have the target packet, the step 123 is skipped to, the preset ratio is adjusted, and the first current object is subdivided.
After the target packet group is determined, step 130 may be performed, that is, the packets in the target packet group are subjected to frame reduction playback processing, so as to obtain the target packet accurately. Fig. 5 shows a flowchart of an embodiment of step 130 in the present application example, and fig. 6 shows a flowchart of another embodiment of step 130 in the present application example. Referring to fig. 5, one specific implementation of step 130 in the embodiment of the present application includes the following steps:
step 210: and setting the target message group as a second current object.
Step 220: deleting the preset frame message in the second current object, which is not subjected to the deletion operation, to obtain a first residual message.
In this embodiment, the preset frame message is a frame message in the second current object, that is, one frame message in the second current object is deleted each time. Of course, in some other embodiments, the preset frame message may also not be limited to two or three frame messages in the second current object, that is, two or three frame messages in the second current object are deleted each time, so as to achieve the purpose of quickly locating the target message.
Step 230: judging whether a target message exists in the first residual message or not; if the first remaining message contains the target message, skipping to execute step 240; if the target message does not exist in the first remaining message, the step 270 is skipped.
Step 240: judging whether the first residual message contains a message which is not subjected to deletion operation; if the first remaining message does not have a message on which the deleting operation is not executed, skipping to execute step 250; if there is a message for which the delete operation has not been executed in the first remaining message, the step 260 is skipped to.
Step 250: and determining the first residual message as a target message.
Step 260: the first remaining packet is set as the second current object and the step 220 is skipped to.
In step 230, it is determined whether a target packet exists in the first remaining packet, if so, the process jumps to step 240 to perform the next determination, that is, it is determined whether a packet that has not been subjected to the deletion operation exists in the first remaining packet, and if all packets in the first remaining packet have been subjected to the deletion operation, it is determined that all packets in the first remaining packet are useful packets, the first remaining packet may be directly determined as the target packet, and if a packet that has not been subjected to the deletion operation exists in the first remaining packet, it is determined that a useless packet may still exist in the first remaining packet, so the process jumps to step 260, sets the first remaining packet as a new second current object, and performs a frame reduction operation on a packet in the new second current object again to gradually delete the useless packet therein.
And if the phenomenon that the target message is consistent with the target operation can be reproduced on the vehicle after the first residual message is reproduced, the target message is determined to exist in the first residual message.
Step 270: and restoring the deleted preset frame message to the second current object, and skipping to the step 220.
After judging whether the first remaining message has the target message, if the first remaining message does not have the target message, the deleted preset frame message is a part of the messages in the target message and is a useful message, so that the deleted preset frame message is restored to the second current object, and other preset frame messages in the second current object are deleted again based on the second current object.
In the process of executing step 210 and step 270, with the continuous skip cycle between steps, the range of the target packet will be gradually reduced as the packets in the original target packet group are gradually deleted with the useless packets, and finally, when all the packets are determined to be useful packets, step 250 will be executed to obtain the target packet.
Referring to fig. 6, another specific implementation of step 130 in the embodiment of the present application includes the following steps:
step 310: and setting the target message group as a third current object.
Step 320: and deleting the preset frame messages in the third current object by taking the first frame message to the last frame message in the third current object as a deleting sequence to obtain a second residual message.
Deleting one frame of messages (or two frames of messages) in the third current object according to the sequence from the first frame of messages to the last frame of messages in the third current object, and obtaining a second residual message.
Step 330: judging whether a target message exists in the second residual message or not; if the second remaining message contains the target message, skipping to execute step 340; if the target message does not exist in the second remaining message, the step 350 is skipped to execute.
Step 340: and taking the second residual message as a third current object, and skipping to execute the step 320.
If the second remaining message contains the target message, the second remaining message is used as a new third current object, and one of the frame messages in the new third current object is deleted according to the sequence from the first frame message to the last frame message in the third current object to obtain a new second remaining message, and if the new second remaining message still contains the target message, the new second remaining message is continuously used as a new third current object, that is, steps 320, 330 and 340 are continuously and circularly executed.
In this embodiment, the multiple frames of messages in the target message are consecutive, so that frame reduction playback is performed first from the left message of the third current object, if it is determined that a certain frame of message on the left side is one frame of message in the target message after frame reduction, the frame of message is restored first, and frame reduction playback is performed from the right message of the third current object, if it is determined that a certain frame of message on the right side is one frame of message in the target message after frame reduction, the frame of message is restored again, and at this time, the remaining messages are the target messages.
Step 350: and restoring the deleted preset frame message to the third current object.
Step 360: and deleting the preset frame message in the third current object by taking the last frame message to the first frame message in the third current object as a deleting sequence to obtain a third residual message.
Step 370: judging whether a target message exists in the third residual message or not; if the third remaining message contains the target message, skipping to execute step 380; if the third remaining message does not have the target message, step 390 is skipped to execute.
Step 380: and taking the third residual message as a third current object, and skipping to execute the step 360.
Step 390: and restoring the deleted preset frame message to a third current object, and determining the third current object as a target message.
Through the step 210-270 or the step 310-390, the required target packet can be accurately extracted from the target packet group.
In this embodiment, a specific application example is used to describe the target packet extraction method, and the target packet extraction method mainly includes three stages: message collection, target message group locking and frame reduction playback. Furthermore, a fourth stage may be included: and verifying the reverse message.
Message collection
(1) Deploying CAN penetration testing tool software in an upper computer, connecting the upper computer with a CAN transceiver, wherein the CAN transceiver is connected to a CAN bus in an automobile and is used for collecting messages on the CAN bus;
(2) starting the automobile, and performing mechanical operation (such as opening an automobile door, opening an automobile lamp and the like) on the automobile in the message acquisition process;
(3) the upper computer obtains the collected messages through the CAN transceiver, and plays all the collected messages back, and if the phenomenon reappears, the target messages are ensured to be in the collected messages;
(4) and storing the collected message to the local.
The phenomenon of recurrence refers to that the original phenomenon (opening the door and the lamp) occurs to the vehicle by performing mechanical operation (opening the door and the lamp) on the vehicle, simultaneously capturing a control instruction message on the CAN bus and then replaying the message.
Secondly, locking the target message group
(1) Dividing the collected messages into two parts, namely an M message group and an N message group, as total data;
(2) replaying the message in the M message group;
(3) if the phenomenon reappears after the M message group is replayed, the M message group is used as total data, the M message group is divided into the M message group and the N message group again, and the message in the M message group is replayed again;
(4) if the phenomenon can not be reproduced after the M message group is played back, playing back the messages in the N message group;
(5) if the phenomenon reappears after the N message group is replayed, the N message group is used as total data and is divided into an M message group and an N message group again, and the message in the M message group is replayed again;
(6) if the playback M message group and the N message group can not reproduce, adjusting the division ratio, re-dividing the total data, obtaining the M message group and the N message group again, and playing back the messages in the M message group again;
(7) and repeating the steps until a target message group in a preset interval is locked. And stopping the steps when the number of the messages in the total data is within a preset interval, and obtaining a target message group, wherein the number of the messages in the target message group is greater than the number of the messages in the target message, and the preset interval can be set to about 100 messages, for example, to [80,120 ].
In the step (6), the reason why neither the M packet group nor the N packet group can be reproduced is that the multi-frame packets in the target packet are disassembled, and since the number of packets in the target packet is not too large, the target packet can be completely divided into the M packet group or the N packet group by only slightly adjusting the division ratio.
Triple, reduced frame playback
(1) Subtracting the first frame message from the target message group, and replaying the rest messages;
(2) if the phenomenon reappears after the residual message is replayed, deleting the next frame of message and replaying the residual message again;
(3) if the residual message is not reproduced, the deleted message is recovered, the next frame of message is deleted, and the residual message is reproduced again;
(4) and performing frame reduction playback operation on each frame of message in sequence until the frame reduction playback operation of the last frame of message is completed, and locking the target message.
Fourthly, verifying the reverse message
And (4) replaying the target message locked in the third step, and if the phenomenon reappears after replay, determining that the obtained target message is correct.
In summary, the present invention provides a method for extracting a target message on an in-vehicle CAN bus, which CAN effectively help a safety penetration tester to perform a reverse message, and compared with the prior art, an obtained result does not contain a useless message, and a target message CAN be accurately locked from a plurality of collected messages. For a scene of a control instruction composed of multi-frame messages, all the messages in the multi-frame messages need to be extracted from a plurality of collected messages, for this reason, in the technical scheme, the range of the multi-frame messages is firstly preliminarily locked by utilizing message group division processing, a target message group is obtained, and then a frame reduction replay method (a frame of message is subtracted from the target message group for replay until all useless messages are subtracted, and the rest are the target messages) reverse messages is used until the multi-frame messages are found.
Based on the same inventive concept, please refer to fig. 7, an embodiment of the present application further provides a device for extracting a target packet based on a CAN bus, including: a message collection module 410, a message reduction module 420, and a frame reduction playback module 430.
The message acquisition module 410 is configured to acquire a plurality of frames of initial messages acquired on a CAN bus, where the plurality of frames of initial messages are acquired during a process of performing a target operation on a vehicle, the plurality of frames of initial messages include a target message, the target message includes at least one frame of message, and the at least one frame of message constitutes a control instruction corresponding to the target operation.
A message reducing module 420, configured to reduce the multi-frame initial message to obtain a target message group including the target message, where a number of messages in the target message group is within a preset interval.
And a frame reduction playback module 430, configured to perform frame reduction playback processing on the packets in the target packet group to obtain the target packet.
Optionally, the message reduction module 420 includes a first object setting module, a first message group dividing module, a second message group dividing module, and a target message group locking module. The first object setting module is used for setting the multi-frame initial message as a first current object. The first message group division module is used for dividing the first current object into a first message group and a second message group according to a preset proportion. The second packet group division module is configured to, when the target packet does not exist in both the first packet group and the second packet group, adjust the preset proportion, and re-divide the first current object into the first packet group and the second packet group according to the adjusted preset proportion until the target packet exists in the first packet group or the second packet group. The target packet locking module is used for acquiring the target packet according to one packet group of the target packet in the first packet group and the second packet group.
Optionally, the target packet locking module includes: the device comprises a message quantity judging module, a second object setting module and a target message group determining module.
The message quantity judging module is used for taking one of the first message group and the second message group in which the target message exists as a message group to be selected and judging whether the message quantity in the message group to be selected is within a preset interval.
And the second object setting module is used for setting the message group to be selected as a first current object when the number of the messages in the message group to be selected is not within the preset interval, and skipping to the first message group dividing module so that the first message group dividing module executes the step of dividing the first current object into the first message group and the second message group according to the preset proportion.
And the target message group determining module is used for determining the message group to be selected as the target message group when the number of the messages in the message group to be selected is within a preset interval.
Optionally, the apparatus further comprises: the device comprises a first message playback module and a second message playback module.
The first message replaying module is used for replaying a first message group so as to determine whether the target message exists in the first message group; and when the target message exists in the first message group, skipping to a message quantity judging module so that the message quantity judging module executes the step of taking one of the first message group and the second message group in which the target message exists as a message group to be selected and judging whether the message quantity in the message group to be selected is in a preset interval.
A second packet replaying module, configured to replay a second packet group when the target packet does not exist in the first packet group, so as to determine whether the target packet exists in the second packet group; when the target message exists in the second message group, skipping to a message quantity judging module so that the message quantity judging module performs the step of taking one of the first message group and the second message group in which the target message exists as a message group to be selected and judging whether the message quantity in the message group to be selected is in a preset interval or not; and when the target message does not exist in the second message group, skipping to a second message group division module so that the second message group division module executes the step of adjusting the preset proportion.
Optionally, the frame reduction playback module 430 comprises:
the third object setting module is used for setting the target message group as a second current object;
the first frame reducing module is used for deleting the preset frame message which is not subjected to the deleting operation in the second current object to obtain a first residual message;
the first judging module is used for judging whether the target message exists in the first residual message or not;
a second determining module, configured to determine whether a message for which a deletion operation has not been executed exists in the first remaining message when the target message exists in the first remaining message;
a first target packet determining module, configured to determine, when there is no packet in the first remaining packet for which a deletion operation has not been performed, the first remaining packet as the target packet;
and the fourth object setting module is used for setting the first residual message as a second current object when the message which is not subjected to the deletion operation exists in the first residual message, and skipping to the first frame reduction module so that the first frame reduction module performs the step of deleting the preset frame message which is not subjected to the deletion operation in the second current object.
Optionally, the frame-reduced playback module 430 further comprises: and the first message recovery module is used for recovering the deleted preset frame message to the second current object when the target message does not exist in the first residual message, and skipping to the first frame reduction module so that the first frame reduction module executes the step of deleting the preset frame message which is not subjected to the deletion operation in the second current object.
In another embodiment, the reduced frame playback module 430 includes:
the fifth object setting module is used for setting the target message group as a third current object;
the second frame reducing module is used for deleting the preset frame messages in the third current object by taking the first frame message to the last frame message in the third current object as a deleting sequence to obtain a second residual message;
a third judging module, configured to judge whether the target packet exists in the second remaining packet;
and a sixth object setting module, configured to, when the target packet exists in the second remaining packet, take the second remaining packet as a third current object, and jump to the second frame reduction module, so that the second frame reduction module performs a step of deleting a preset frame packet in the third current object, where a sequence from a first frame packet to a last frame packet in the third current object is used as a deletion sequence.
Further, in this embodiment, the frame reduction playback module 430 further includes:
a second message recovery module, configured to recover the deleted preset frame message to a third current object when the target message does not exist in the second remaining message;
a third frame reduction module, configured to delete a preset frame message in a third current object by using a last frame message to a first frame message in the third current object as a deletion order, so as to obtain a third remaining message;
a fourth judging module, configured to judge whether the target packet exists in the third remaining packet;
a seventh object setting module, configured to, when the target packet exists in the third remaining packets, take the third remaining packets as a third current object, and jump to a third frame reduction module, so that the third frame reduction module performs a step of deleting a preset frame packet in the third current object, where a deletion order is from a last frame packet to a first frame packet in the third current object;
and the second target message determining module is used for restoring the deleted preset frame message to a third current object when the target message does not exist in the third residual message, and determining the third current object as the target message.
The implementation principle and the generated technical effect of the target message extraction device based on the CAN bus provided in the embodiment of the present application have been introduced in the foregoing method embodiment, and for brief description, no mention is made in the embodiment of the device, and reference may be made to corresponding contents in the method embodiment.
Optionally, an embodiment of the present application further provides a storage medium, where a computer program is stored on the storage medium, and when the computer program is executed by a processor, the method for extracting a target packet based on a CAN bus provided by the present application is executed.
Optionally, an embodiment of the present application further provides an electronic device, including: the CAN bus-based target message extraction method comprises a processor, a memory and a bus, wherein the memory stores machine-readable instructions executable by the processor, when the electronic device runs, the processor and the memory communicate through the bus, and the machine-readable instructions are executed by the processor to execute the CAN bus-based target message extraction method provided by the application. The electronic device refers to the upper computer mentioned in the embodiment. It is understood that the electronic device may be a PC, a notebook, a tablet, a server, an embedded device, etc.
In the embodiments provided in the present application, it should be understood that the disclosed apparatus and method may be implemented in other ways. The above-described embodiments of the apparatus are merely illustrative, and for example, the division of the units is only one logical division, and there may be other divisions when actually implemented, and for example, a plurality of units or components may be combined or integrated into another system, or some features may be omitted, or not executed.
Furthermore, the functional modules in the embodiments of the present application may be integrated together to form an independent part, or each module may exist separately, or two or more modules may be integrated to form an independent part.
In this document, relational terms such as first and second, and the like may be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions.
The above description is only an example of the present application and is not intended to limit the scope of the present application, and various modifications and changes may be made by those skilled in the art. Any modification, equivalent replacement, improvement and the like made within the spirit and principle of the present application shall be included in the protection scope of the present application.

Claims (10)

1. A target message extraction method based on a CAN bus is characterized by comprising the following steps:
acquiring a plurality of frames of initial messages acquired on a CAN bus, wherein the plurality of frames of initial messages are acquired in the process of carrying out target operation on a vehicle, the plurality of frames of initial messages comprise target messages, the target messages comprise at least one frame of message, and the at least one frame of message forms a control instruction corresponding to the target operation;
reducing the multi-frame initial message to obtain a target message group comprising the target message, wherein the number of the messages in the target message group is within a preset interval;
and carrying out frame reduction and playback processing on the messages in the target message group to obtain the target messages.
2. The method according to claim 1, wherein said reducing said multi-frame initial packet to obtain a target packet group including said target packet comprises:
setting the multi-frame initial message as a first current object;
dividing the first current object into a first message group and a second message group according to a preset proportion;
when the target message does not exist in the first message group and the second message group, adjusting the preset proportion, and subdividing the first current object into the first message group and the second message group according to the adjusted preset proportion until the target message exists in the first message group or the second message group;
and acquiring the target message group according to the message group of the target message in the first message group and the second message group.
3. The method of claim 2, wherein obtaining the target packet group according to the presence of one of the target packet in the first packet group and the second packet group comprises:
taking one message group with the target message in the first message group and the second message group as a message group to be selected, and judging whether the number of the messages in the message group to be selected is within a preset interval or not;
if the current object is not in the preset interval, setting the message group to be selected as a first current object, and skipping to the step of dividing the first current object into a first message group and a second message group according to a preset proportion;
and if the message group to be selected is in the preset interval, determining the message group to be selected as the target message group.
4. The method of claim 3, wherein after dividing the first current object into the first packet group and the second packet group according to the preset ratio, the method further comprises:
replaying the first message group to determine whether the target message exists in the first message group;
if the target message exists in the first message group, skipping to a step of taking one of the first message group and the second message group in which the target message exists as a message group to be selected, and judging whether the number of messages in the message group to be selected is within a preset interval or not;
if the target message does not exist in the first message group, replaying a second message group to determine whether the target message exists in the second message group;
if the target message exists in the second message group, skipping to a step of taking one of the first message group and the second message group in which the target message exists as a message group to be selected, and judging whether the number of messages in the message group to be selected is within a preset interval or not;
and if the target message does not exist in the second message group, skipping to the step of adjusting the preset proportion.
5. The method of claim 1, wherein the performing frame reduction playback processing on the packets in the target packet group to obtain the target packet comprises:
setting the target message group as a second current object;
deleting the preset frame message in the second current object, which is not subjected to the deletion operation, to obtain a first residual message;
judging whether the target message exists in the first residual message or not;
if the target message exists in the first residual message, judging whether the message which is not subjected to deletion operation exists in the first residual message;
if the message which is not subjected to the deleting operation does not exist, determining the first residual message as the target message;
and if the message which is not subjected to the deleting operation exists, setting the first residual message as a second current object, and skipping to the step of deleting the preset frame message which is not subjected to the deleting operation in the second current object.
6. The method of claim 5, wherein after determining whether the target packet exists in the first remaining packet, the method further comprises:
if the target message does not exist in the first residual message, the deleted preset frame message is restored to the second current object, and the step of deleting the preset frame message which is not subjected to the deletion operation in the second current object is skipped to.
7. The method of claim 1, wherein the performing frame reduction playback processing on the packets in the target packet group to obtain the target packet comprises:
setting the target message group as a third current object;
deleting the preset frame messages in the third current object by taking the first frame message to the last frame message in the third current object as a deleting sequence to obtain a second residual message;
judging whether the second residual message has the target message;
and if the target message exists in the second residual message, taking the second residual message as a third current object, and skipping to a step of deleting a preset frame message in the third current object by taking a first frame message to a last frame message in the third current object as a deleting sequence.
8. The method of claim 7, wherein after determining whether the target packet exists in the second remaining packet, the method further comprises:
if the target message does not exist in the second residual message, restoring the deleted preset frame message to a third current object;
deleting the preset frame message in the third current object by taking the last frame message to the first frame message in the third current object as a deleting sequence to obtain a third residual message;
judging whether the third residual message has the target message;
if the target message exists in the third residual message, taking the third residual message as a third current object, skipping to a step of deleting a preset frame message in the third current object by taking a last frame message to a first frame message in the third current object as a deletion sequence;
and if the target message does not exist in the third residual message, restoring the deleted preset frame message to a third current object, and determining the third current object as the target message.
9. A target message extraction device based on a CAN bus is characterized by comprising:
the device comprises a message acquisition module, a message processing module and a message processing module, wherein the message acquisition module is used for acquiring a plurality of frames of initial messages acquired on a CAN bus, the plurality of frames of initial messages are acquired in the process of carrying out target operation on a vehicle, the plurality of frames of initial messages comprise target messages, the target messages comprise at least one frame of message, and the at least one frame of message forms a control instruction corresponding to the target operation;
the message reduction module is used for reducing the multi-frame initial message to obtain a target message group comprising the target message, wherein the number of the messages in the target message group is within a preset interval;
and the frame reduction playback module is used for carrying out frame reduction playback processing on the messages in the target message group to obtain the target messages.
10. A storage medium, having stored thereon a computer program which, when executed by a processor, performs the method according to any one of claims 1-8.
CN202010804598.5A 2020-08-11 2020-08-11 CAN bus-based target message extraction method and device and storage medium Active CN111935153B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202010804598.5A CN111935153B (en) 2020-08-11 2020-08-11 CAN bus-based target message extraction method and device and storage medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202010804598.5A CN111935153B (en) 2020-08-11 2020-08-11 CAN bus-based target message extraction method and device and storage medium

Publications (2)

Publication Number Publication Date
CN111935153A true CN111935153A (en) 2020-11-13
CN111935153B CN111935153B (en) 2022-04-26

Family

ID=73311174

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202010804598.5A Active CN111935153B (en) 2020-08-11 2020-08-11 CAN bus-based target message extraction method and device and storage medium

Country Status (1)

Country Link
CN (1) CN111935153B (en)

Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
RU2009116275A (en) * 2006-09-29 2010-11-10 ЭлДжи ЭЛЕКТРОНИКС ИНК. (KR) METHODS AND DEVICES FOR CODING AND DECODING OF OBJECT-ORIENTED AUDIO SIGNALS
US20130055026A1 (en) * 2011-08-22 2013-02-28 International Business Machines Corporation Creating data for playing back transactions
CN106793024A (en) * 2016-11-29 2017-05-31 上海斐讯数据通信技术有限公司 The method and wireless device of a kind of wireless device response wireless terminal
US20170187625A1 (en) * 2015-12-23 2017-06-29 Intel Corporation Managing communication congestion for internet of things devices
CN108040073A (en) * 2018-01-23 2018-05-15 杭州电子科技大学 Malicious attack detection method based on deep learning in information physical traffic system
CN108415408A (en) * 2018-03-16 2018-08-17 宁波杉杉汽车有限公司 Automobile packet parsing based on CAN communication and method for diagnosing faults
CN108573522A (en) * 2017-03-14 2018-09-25 腾讯科技(深圳)有限公司 A kind of methods of exhibiting and terminal of flag data
CN109410955A (en) * 2018-12-07 2019-03-01 广州势必可赢网络科技有限公司 A kind of time slot scrambling of voice data, system, device and storage medium
CN111258974A (en) * 2020-01-20 2020-06-09 吉利汽车研究院(宁波)有限公司 Vehicle offline scene data processing method and system

Patent Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
RU2009116275A (en) * 2006-09-29 2010-11-10 ЭлДжи ЭЛЕКТРОНИКС ИНК. (KR) METHODS AND DEVICES FOR CODING AND DECODING OF OBJECT-ORIENTED AUDIO SIGNALS
US20130055026A1 (en) * 2011-08-22 2013-02-28 International Business Machines Corporation Creating data for playing back transactions
US20170187625A1 (en) * 2015-12-23 2017-06-29 Intel Corporation Managing communication congestion for internet of things devices
CN106793024A (en) * 2016-11-29 2017-05-31 上海斐讯数据通信技术有限公司 The method and wireless device of a kind of wireless device response wireless terminal
CN108573522A (en) * 2017-03-14 2018-09-25 腾讯科技(深圳)有限公司 A kind of methods of exhibiting and terminal of flag data
CN108040073A (en) * 2018-01-23 2018-05-15 杭州电子科技大学 Malicious attack detection method based on deep learning in information physical traffic system
CN108415408A (en) * 2018-03-16 2018-08-17 宁波杉杉汽车有限公司 Automobile packet parsing based on CAN communication and method for diagnosing faults
CN109410955A (en) * 2018-12-07 2019-03-01 广州势必可赢网络科技有限公司 A kind of time slot scrambling of voice data, system, device and storage medium
CN111258974A (en) * 2020-01-20 2020-06-09 吉利汽车研究院(宁波)有限公司 Vehicle offline scene data processing method and system

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
MIN LIU: "Extracting Sent Message Formats from Executables Using Backward Slicing", 《2013 FOURTH INTERNATIONAL CONFERENCE ON EMERGING INTELLIGENT DATA AND WEB TECHNOLOGIES》 *
郭志刚等: "基于车载CAN总线的安全通信机制研究", 《中国汽车》 *

Also Published As

Publication number Publication date
CN111935153B (en) 2022-04-26

Similar Documents

Publication Publication Date Title
CN108063725B (en) Message pushing method
CN107564132A (en) A kind of driving event video acquiring method and system
CN110677718B (en) Video identification method and device
CN103049379B (en) A kind of method of system testing
CN114245205A (en) Video data processing method and system based on digital asset management
CN113110995A (en) System migration test method and device
CN111787256B (en) Management method, device, medium and electronic equipment for pre-alarm video
CN110806965A (en) Automatic test method, device, equipment and medium
CN111935153B (en) CAN bus-based target message extraction method and device and storage medium
CN110673873A (en) Audit-based software release method
CN110567733B (en) ACC-based failure scene determination method and system, server and medium
WO2023280117A1 (en) Indication signal recognition method and device, and computer storage medium
CN116798144A (en) Collision video storage method, system, device and computer readable storage medium
CN108345902B (en) Self-learning white list model base construction and white list detection method based on transaction characteristics
CN107357701B (en) SAS signal testing method and device under distributed scene
CN114205632A (en) Video preview method and device, electronic equipment and computer readable storage medium
CN113190835A (en) Application program violation detection method, device, equipment and storage medium
CN113434433A (en) Intelligent auxiliary method and device for software test
CN113923443A (en) Network video recorder testing method and device and computer readable storage medium
JP2002259216A (en) Method for detecting electronic file alteration, method for describing electronic file for the same and communication equipment
CN107341255B (en) Key value data processing method and device and electronic equipment
CN112905842B (en) Video safety detection integrated system and method
CN114021146B (en) Unstructured difference patch analysis method based on value set analysis
CN103425571B (en) A kind of source code integrality detection method and device
CN102360429B (en) Method and system for checking fault hidden danger of vehicles

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant