WO2022205132A1

WO2022205132A1 - Method and apparatus for determining protection plan of attack path

Info

Publication number: WO2022205132A1
Application number: PCT/CN2021/084561
Authority: WO
Inventors: 赵付霞; 冀浩杰; 王云鹏; 于海洋; 秦洪懋; 王颖会
Original assignee: 华为技术有限公司
Priority date: 2021-03-31
Filing date: 2021-03-31
Publication date: 2022-10-06
Also published as: CN113228713B; CN113228713A

Abstract

Disclosed in the present application are a method and an apparatus for determining a protection plan of an attack path, relating to the technical field of Internet of Vehicles security. The method comprises: determining attack path protection plans that meet information security conditions from amongst multiple attack path protection plans of an attack path; and determining an attack path protection plan that meets protection cost conditions from amongst the attack path protection plans that meet information security conditions as a protection plan to be used of the attack path. The present method enables the finally selected protection plan to be used to meet certain information security requirements to achieve better protection effects and save investment costs of protection to a certain degree.

Description

Method and device for determining protection scheme of attack path

technical field

The present application relates to the technical field of network-connected vehicle security, and in particular, to a method and device for determining a protection scheme for an attack path.

Background technique

With the continuous popularization of connected cars, the information security of connected cars has been paid more and more attention by people. At present, the information security attacks against connected vehicles are usually based on attack paths, which cause the connected vehicles to generate greater information security risks. Among them, the attack path is composed of at least one subject, and the subject can be the in-vehicle communication box (telematics box, T-Box, gateway (GW), electronic control unit (electronic control unit, ECU) and other nodes in the connected car. applications, operating systems, etc.

At present, there are generally many protection schemes for attack paths. When selecting a protection scheme, technicians usually arbitrarily select a protection scheme for implementation, and the protection effect of the selected protection scheme may be poor.

SUMMARY OF THE INVENTION

The embodiments of the present application provide a method and device for determining a protection scheme for an attack path, which can more efficiently select a protection scheme that meets both information security requirements and protection cost requirements from multiple attack path protection schemes. The technical scheme is as follows:

In a first aspect, a method for determining a protection scheme of an attack path is provided, the method comprising:

Among the multiple attack path protection schemes of the attack path, the attack path protection scheme that satisfies the information security conditions is determined. In the attack path protection scheme that satisfies the information security condition, the attack path protection scheme that satisfies the protection cost condition is determined as the to-be-used protection scheme of the attack path.

In the solutions shown in the embodiments of the present application, the attack path may be a high-risk attack path, that is, an attack path that may threaten personal safety after being attacked. The protection cost is the quantitative value of manpower and material resources to implement the protection plan.

Each subject of the attack path may correspond to at least one subject protection measure, and by combining the subject protection measures of each subject in the attack path, multiple attack path protection schemes may be obtained. For the multiple attack path protection schemes of the attack path, the computer equipment can directly select the attack path protection scheme that meets the information security conditions without manual participation, which ensures the protection effect of the finally selected protection scheme to be used. In addition, in this application, after selecting the attack path protection scheme that satisfies the information security conditions, the attack path protection scheme that satisfies the information security conditions is automatically selected from the attack path protection schemes that satisfy the information security conditions, and the attack path protection scheme that satisfies the protection cost condition is automatically selected as the final pending attack path. Use protective schemes. In this way, without manual participation, the protection scheme to be used can be directly selected by computer equipment efficiently, and the selected protection scheme to be used can not only meet certain information security requirements to achieve a better protection effect, but also save investment to a certain extent. cost of protection.

In a possible implementation manner, when selecting the protection scheme to be used for the attack path, the delay caused by the attack path protection scheme for packet transmission may also be considered. Correspondingly, an attack path protection scheme that satisfies both the information security condition and the time cost condition can be determined first. Then, in the attack path protection scheme that satisfies both the information security condition and the time cost condition, the attack path protection scheme that satisfies the protection cost condition is determined as the to-be-used protection scheme of the attack path.

In the solutions shown in the embodiments of the present application, the time cost of the attack path protection solution is the sum of the time costs corresponding to the protection measures included in the attack path protection solution. The time cost corresponding to the protection measure is used to indicate the time between the time when the message passes through the node to which the subject belongs when the protection measure is implemented on the subject and the time when the packet passes through the node to which the subject belongs when the node to which the subject belongs does not implement the protection measure. difference value. The time cost corresponding to the protective measures can be measured by technicians through experiments.

In a possible implementation manner, the time cost condition is that the time cost corresponding to the attack path protection scheme is less than a preset time cost threshold.

In a possible implementation manner, the information security condition is that the attack probability corresponding to the attack path protection scheme is less than a preset attack probability threshold.

In the scheme shown in the embodiment of the present application, the attack probability corresponding to the attack path protection scheme is used to quantify the protection effect of the attack path protection scheme, and the attack probability corresponding to the attack path protection scheme indicates that the attack path is attacked after implementing the attack path protection scheme The probability of success, the smaller the corresponding attack probability, the lower the probability of being attacked successfully, on the contrary, the higher the corresponding attack probability, the higher the probability of being attacked successfully. In this way, each attack path protection scheme can correspond to an attack probability. If the attack probability corresponding to an attack path protection scheme is less than the preset attack probability threshold, it can be determined that the attack path protection scheme satisfies the information security conditions and achieves the required protection effect. , instead of testing the attack path protection scheme to know its protection effect when selecting the protection scheme to be used like the related schemes, which can effectively save the time for selecting the protection scheme to be used.

In a possible implementation, when there are information security conditions, time cost conditions, and protection cost conditions at the same time, after determining an attack path protection scheme that satisfies both information security conditions and time cost conditions, these attack paths The method for selecting an attack path protection scheme that satisfies the protection cost condition in the protection scheme can be as follows:

Determine the corresponding attack path protection scheme with the least protection cost. When the number of corresponding attack path protection schemes with the smallest protection cost is 1, the corresponding attack path protection scheme with the smallest protection cost is used as the protection scheme to be used for the attack path. When the number of corresponding attack path protection schemes with the smallest protection cost is greater than 1, among the multiple attack path protection schemes with the smallest protection cost, the corresponding attack path protection scheme with the smallest attack probability is determined. In the case where the number of corresponding attack path protection schemes with the smallest attack probability is 1, the corresponding attack path protection scheme with the smallest attack probability is used as the to-be-used protection scheme for the attack path. When the number of the corresponding attack path protection schemes with the smallest attack probability is greater than 1, among the corresponding attack path protection schemes with the smallest attack probability, the corresponding attack path protection scheme with the smallest time cost is determined as the attack path to be used. protection plan.

In the solution shown in the embodiment of the present application, the information security condition and the time cost condition are prioritized, and the priority of the information security condition is higher than that of the time cost condition. Time cost condition, and the attack path protection scheme with the same protection cost, the attack path protection scheme with the smaller attack probability is preferentially selected, and when the attack probability is also the same, the attack path protection scheme with the smallest time cost is selected.

In a possible implementation manner, the technical solutions provided in the embodiments of the present application are applied to the field of connected vehicles.

In the development stage of the connected car, or after the connected car is put into use, for the consideration of the security of the connected car, it is necessary to protect the attack path in the connected car that threatens the security of the connected car. At this time, the method provided by the embodiment of the present application may be used to select a protection scheme to be used against the attack path that threatens the security of the connected car. Specifically, among the multiple attack path protection schemes corresponding to the attack path of the connected vehicle, an attack path protection scheme that satisfies the information security conditions of the connected vehicle is determined. Then, in the attack path protection scheme that satisfies the information security conditions of the connected vehicle, the attack path protection scheme that satisfies the protection cost condition of the connected vehicle is determined as the protection scheme to be used for the attack path of the connected vehicle.

In addition, after the protection scheme to be used for the attack path of the connected car is selected, the relevant information of the determined protection scheme to be used may be displayed. The relevant information may include specific implementation steps of the protection scheme to be used, expected protection effects, protection costs, precautions, and the like. In this way, technicians can clearly know the relevant information of the protection scheme to be used, and then the technicians can implement the protection scheme to be used in the connected car based on the relevant information of the protection scheme to be used to protect the attack path of the connected car .

In a second aspect, an apparatus for determining a protection solution for an attack path is provided, which is used to execute the method described in the first aspect and any possible implementation manner of the first aspect. Specifically, the apparatus includes a module for performing the method described in the first aspect and any possible implementation manner of the first aspect.

In a third aspect, a computer device is provided, the computer device includes a processor and a memory, wherein:

The memory stores instructions, and the processor executes the instructions to implement the method for determining a protection solution for an attack path as described in the first aspect and any possible implementation manner of the first aspect.

In a fourth aspect, a computer-readable storage medium is provided, where instructions are stored in the computer-readable storage medium, and the instructions are loaded and executed by a processor to implement the first aspect and any one of the first aspects. The method for determining the protection scheme of the attack path described in the implementation manner of .

In a fifth aspect, a computer program product is provided, the computer program product includes instructions, and the instructions are loaded and executed by a processor, so as to realize the above-mentioned first aspect and any one of the possible implementations of the first aspect. A method for determining protection schemes for attack paths.

In a sixth aspect, a chip system is provided, the chip system includes at least one processor, and is configured to support implementing the functions involved in the first aspect and any possible implementation manner of the first aspect, for example, receiving or Process the data and/or information involved in the above methods.

In one possible design, the system-on-a-chip further includes a memory for storing program instructions and data, and the memory is located inside the processor or outside the processor. The chip system may be composed of chips, or may include chips and other discrete devices.

In a seventh aspect, an apparatus for determining a protection scheme of an attack path is provided, the apparatus includes at least one processor and a communication interface, the communication interface is used for sending and/or receiving data, and the at least one processor is used for calling A computer program stored in at least one memory to cause the apparatus to implement the method described in the first aspect and any one of the possible implementations of the first aspect.

Description of drawings

FIG. 1 is an electronic and electrical architecture diagram of a connected vehicle provided by an embodiment of the present application;

FIG. 2 is a schematic diagram of a node-level attack path provided by an embodiment of the present application;

3 is a schematic diagram of the relationship between a subject-level attack path and a node-level attack path provided by an embodiment of the present application;

4 is a flowchart of a method for determining a protection solution for an attack path provided by an embodiment of the present application;

5 is a schematic structural diagram of an apparatus for a protection solution for determining an attack path provided by an embodiment of the present application;

FIG. 6 is a schematic structural diagram of a computer device provided by an embodiment of the present application.

Detailed ways

An embodiment of the present application provides a method for determining a protection solution for an attack path, and the method can be implemented by a computer device, where the computer device can be a laptop computer (Laptop), desktop computer, tablet computer (pad), server, or the like. In the embodiment of the present application, the computer device can automatically select an attack path protection scheme that satisfies the information security conditions, which ensures the protection effect of the finally selected protection scheme to be used. In addition, after selecting the attack path protection scheme that satisfies the information security conditions, continue to automatically select the attack path protection scheme that satisfies the protection cost condition among the attack path protection schemes that meet the information security conditions, as the final attack path protection scheme to be used . In this way, the finally selected protection scheme to be used can not only meet certain information security requirements to achieve a better protection effect, but also save the input protection cost to a certain extent.

The above attack path protection solution can be deployed in a connected car, and FIG. 1 exemplarily shows an electrical and electronic architecture diagram of a connected car. In Figure 1, a telematics box (T-Box) is used to communicate with the outside world, and a gateway (GW) is used to perform protocol conversion, data exchange, and the like. Parts other than T-Box and GW can include power domain, chassis domain, body domain, infotainment domain and advanced driver assistance system (Advanced Driver Assistance System, ADAS). Each domain includes a corresponding domain controller (Domain Controller, DC), a controller area network (Controller Area Network, CAN), and at least one electronic control unit (Electronic Control Unit, ECU).

In Figure 1, the power domain includes DC1, powertrain controller area network (Powertrain CAN, PT CAN), ECU1, ECU2, etc., where the ECU can be an engine control module (Engine Control Module, ECM), a battery management system ( Battery Management System, BMS), etc. The chassis domain includes DC2, chassis controller area network (Chassis CAN, CH CAN), ECU3, ECU4, etc. Among them, ECU can be anti-lock braking system (Antilock Brake System, ABS), body electronic stability system (Electronic Stability Program) , ESP) etc. The body domain includes DC3, body controller area network (Body CAN), body control module (Body Control Module, BCM) ECU5, ECU6, etc. Among them, the ECU can be a tire pressure monitoring system (Tire Pressure Monitoring System, TPMS), panoramic Surveillance imaging system (Around View Monitor, AVM), etc. The infotainment domain includes DC4, infotainment controller area network (information CAN, info CAN), ECU7, in-vehicle infotainment (In-Vehicle Infotainment, IVI) system, etc., where the ECU can be a combination instrument (Instrument Pack, IPK), etc. .

To facilitate understanding of the embodiments of the present application, the attack paths in the present application are first described below.

From the hardware level, the attack path is the node-level attack path, and from the specific attacked subject in the hardware, the attack path is the subject-level attack path.

Each node-level attack path includes at least one node, and the node can be a hardware module in a connected car, such as T-Box, GW, DC, ECU, etc. For example, if the purpose of the attack is to turn on the high beam of the vehicle, the corresponding node-level attack path can be shown in Figure 2, that is, first attack the T-Box, then attack the GW, then attack the DC in the body domain, and finally attack the control high beam light ECU.

Each subject-level attack path includes at least one subject, and the subject may be an application program, firmware, etc. installed in the node. The essence of the attack node is the subject in the attack node. A node-level attack path may correspond to multiple subject-level attack paths.

Referring to Figure 3, a relationship between a possible node-level attack path and an agent-level attack path is shown. In Figure 3, a node-level attack path is shown, and the nodes included in the node-level attack path are T-Box, GW, DC1, and ECU1 in sequence, wherein the T-Box includes multiple subjects, and among the multiple subjects Subject 1 and subject 2 are attacked subjects. GW includes multiple subjects. Among these multiple subjects, subject 3 and subject 4 are attacked subjects. DC1 includes multiple subjects, and subject 5 and subject 6 are attacked subjects. , ECU1 includes multiple subjects, among which subject 7 is the subject to be attacked. Corresponding to the node-level attack path, Figure 3 also shows three subject-level attack paths, wherein the first subject-level attack path includes subjects in sequence: subject 2, subject 1, subject 3, subject 5, and subject 7, The subjects included in the second subject-level attack path are subject 1, subject 4, subject 6, and subject 7, and the subjects included in the third subject-level attack path are subject 2, subject 3, subject 5, and subject 7 in order.

Referring to FIG. 4 , an embodiment of the present application provides a method for determining an attack path protection scheme, and the processing flow of the method may include the following steps:

Step 401 , among multiple attack path protection schemes of the attack path, determine an attack path protection scheme that satisfies the information security condition.

The attack path is a high-risk attack path, that is, an attack path that may threaten personal safety after being attacked.

In implementation, the technician can provide multiple attack path protection schemes for the attack path, and each attack path protection scheme consists of at least one main protection measure.

Each subject of the attack path may correspond to at least one subject protection measure, and by combining the subject protection measures of each subject in the attack path, multiple attack path protection schemes may be obtained.

If an attack path includes k subjects, the first subject corresponds to n ₁ subject protection measures, the second subject corresponds to n ₂ -n ₁ subject protection measures, and the third subject corresponds to n ₃ -n ₂ subjects Protective measures... The k-th subject corresponds to n _k -n _k-1 subject protective measures. The computer equipment can establish a vector M to be solved,

Each element in vector M corresponds to a subject protection measure, where M ₁ to

The n ₁ elements of , in turn, correspond to the n ₁ subject protection measures of the first subject,

arrive

The n ₂ -n ₁ elements in turn correspond to the n ₂ -n ₁ body guards of the second body, and so on,

arrive

The n _k -n _k-1 elements of , in turn, correspond to the n _k -n _k-1 subject protection measures of the kth subject. Each element in the vector M is an unknown quantity and takes a value of 0 or 1. When the value of the element is 0, it means that the main protective measure corresponding to the element is not implemented. The main protection measures corresponding to the elements, and different value combinations of the vector M correspond to different attack path protection schemes. The relationship between the vector M and the attack path protection scheme is described below with an example:

For example, the attack path includes two subjects, subject 1 and subject 2. Correspondingly, the vector to be solved that can be established is: M=(M ₁ , M ₂ , M ₃ ). The first element M ₁ and the second element M ₂ correspond to the main body protection measure 1 and the main body protection measure 2 of the main body 1 respectively, and the third element M ₃ corresponds to the main body protection measure 3 of the main body 2 . All possible value combinations of vector M include (0, 0, 0), (0, 0, 1), (0, 1, 0), (0, 1, 1), (1, 0, 0), ( 1, 0, 1), (1, 1, 0) and (1, 1, 1). Among them, the value combination (0, 0, 0) indicates that the attack path protection scheme is not implemented for the attack path, and the attack path protection scheme corresponding to the value combination (0, 0, 1) consists of the main protection measures 3; , 1, 0) corresponding to the attack path protection scheme consists of the main protection measure 2; the attack path protection scheme corresponding to the value combination (0, 1, 1) consists of the main protection measure 2 and the main protection measure 3; the value combination ( The attack path protection scheme corresponding to 1, 0, 0) consists only of the main protection measure 1; the attack path protection scheme corresponding to the value combination (1, 0, 1) is composed of the main protection measure 1 and the main protection measure 3; The attack path protection scheme corresponding to the combination (1, 1, 0) consists of the main protection measure 1 and the main protection measure 2; the attack path protection scheme corresponding to the value combination (1, 1, 1) consists of the main protection measure 1, the main protection measure Measure 2 and main body protection measure 3 are composed.

In order to obtain an attack path protection scheme that satisfies certain information security conditions, an information security constraint function is established based on the attack probability corresponding to each main protection measure and the vector M to be solved. Specifically, the information security constraint function can be as follows:

Among them, k is the number of subjects included in the attack path of the protection scheme to be determined, P _j is the attack probability corresponding to the jth subject in the attack path, and P ^max is the attack probability threshold given by the technician. It should be noted here that the information security constraint function can have other forms besides the above forms, such as

where N is a constant.

The calculation method of P _j can be as follows:

if

means

arrive

The value is all 0, that is, the j-th subject is not subject to subject protection measures. In this case, P _j =P _j (*). Among them, P _j (*) is the attack probability when the j th subject does not implement any subject protection measures, and the value of P _j (*) can be calculated by the technical personnel according to the risk assessment after determining the attack path. Among them, the attack probability is used to represent the possibility of being attacked.

if

means

arrive

One of the elements takes the value of 1, and the other elements take the value of 0, that is, the subject protection measures corresponding to the element with the value of 1 are implemented for the j-th subject. In this case, P _j is equal to

the maximum value in . in,

implement element for the jth subject

The attack probability after the corresponding subject protection measures, and so on,

implement element for the jth subject

The attack probability after the corresponding subject protection measures.

if

means

arrive

If there are multiple elements with the value 1, then P _j is equal to

The smallest nonzero value in . in,

implement element for the jth subject

The attack probability after the corresponding subject protection measures. the following pair

The calculation method of the main body protection measures will be explained, and the attack probability calculation methods of other main protection measures are the same as this, and will not be repeated here.

in,

implement element for the jth subject

The sum of the quantified values of the attack potential factors after the corresponding main protection measures, F _j ^max is the maximum value of the sum of the quantified values of the attack potential factors.

and F _j ^max are obtained by technicians according to experimental tests.

It should also be noted here that when multiple different body protection measures are implemented on the same body in this application, the resulting protection effect is only the protection effect of the body protection measure with the best protection effect among the multiple body protection measures implemented. .

the above

The calculation method can be expressed by the following formula:

Substitute all possible value combinations of the vector M to be solved into the above information security constraint function in turn, and obtain the target value combination in which P(M) is less than ^Pmax among the value combinations of the vector M. Then, the main protection measures corresponding to 1 in the target value combination are obtained to form an attack path protection scheme, and the attack path protection scheme is used as an attack path protection scheme that satisfies the information security conditions. The following is an example to illustrate:

For example, the attack path includes two subjects, subject 1 and subject 2, and the vector M=(M ₁ , M ₂ , M ₃ ). The first element M ₁ and the second element M ₂ correspond to the main body protection measure 1 and the main body protection measure 2 of the main body 1 respectively, and the third element M ₃ corresponds to the main body protection measure 3 of the main body 2 . All possible value combinations of vector M include (0, 0, 0), (0, 0, 1), (0, 1, 0), (0, 1, 1), (1, 0, 0), ( 1, 0, 1), (1, 1, 0) and (1, 1, 1). Substitute these eight value combinations into the information security constraint function in turn to obtain the corresponding P(M). When the value combinations (1, 0, 1) and (1, 0, 0) are substituted into the information security constraint function, the obtained P(M) is all less than P ^max , then, (1, 0, 1) and (1, 0, 1) and The main protection measures corresponding to (1, 0, 0) constitute two attack path protection schemes. Specifically, for the value combination (1, 0, 1), the main protection measure 1 and the main protection measure 3 are obtained to form an attack path protection scheme as an attack path protection scheme that satisfies the information security conditions. For the value combination (1, 0, 0), the main protection measure 1 is obtained, and an attack path protection scheme is formed as an attack path protection scheme that satisfies the information security conditions.

Step 402 , in the attack path protection scheme satisfying the information security condition, determine the attack path protection scheme that satisfies the protection cost condition as the to-be-used protection scheme of the attack path.

In implementation, for the attack path protection schemes that satisfy the information security conditions determined in step 401, the protection cost corresponding to each attack path protection scheme can be calculated separately, and an attack path protection scheme that satisfies the protection cost conditions can be selected among them.

When calculating the protection cost corresponding to the attack path protection scheme, the following protection cost calculation formula can be used:

Among them, C(M) is the protection cost of the attack path protection scheme, m is the number of subject protection measures corresponding to the subject of the attack path of the protection scheme to be determined, m=n ₁ +n ₂ +n ₃ , M _i is the above vector The i-th element of M, C _i is the protection cost of the main protection measures corresponding to M _i , and C _i is a known quantity, which can be set by technicians according to the actual situation.

By substituting the value set of the vector M corresponding to the attack path protection scheme into the above protection cost calculation formula, the protection cost of the attack path protection scheme can be obtained.

After calculating the protection cost of each attack path protection scheme that satisfies the information security conditions, the corresponding attack path protection scheme with the smallest protection cost is determined. If the number of corresponding attack path protection schemes with the smallest protection cost is 1, the corresponding attack path protection scheme with the smallest protection cost is used as the protection scheme to be used for the attack path. If the number of the corresponding attack path protection schemes with the smallest protection cost is greater than 1, among the multiple attack path protection schemes with the smallest protection cost, the corresponding attack path protection scheme with the smallest attack probability is determined as the protection scheme to be used for the attack path. .

In a possible implementation manner, when selecting the protection scheme to be used for the subject-level attack path, the time cost of the attack path protection scheme may also be used as a constraint condition. Correspondingly, an attack path protection scheme that satisfies both information security conditions and time cost conditions can be determined first. Then, among the attack path protection schemes that satisfy both the information security condition and the time cost condition, the attack path protection scheme that satisfies the protection cost condition is determined as the to-be-used protection scheme of the attack path.

In implementation, when selecting the protection scheme to be used, a time cost constraint function can be established based on the time cost corresponding to each main protection measure and the vector M to be solved to realize the time cost constraint on the attack path. Specifically, the time cost constraint function can be as follows:

Among them, m is the number of main body protection measures corresponding to the main body of the attack path of the protection scheme to be determined, M _i is the ith element of the above vector M, D _i is the time cost of the main body protection measures corresponding to M _i , and D _i is The known quantity can be measured by the technician through experiments, D ^max is the time cost threshold value, and D ^max is the known quantity, which can be set by the technician according to actual needs. It should be noted here that the time cost constraint function can have other forms besides the above forms, such as

where N is a constant.

The time cost of the above-mentioned subject protection measures is used to indicate the time for the packets to pass through the node to which the subject belongs when the subject protection measures are implemented on the subject, and the time for the packets to pass through the node to which the subject belongs when the subject protection measures are not implemented on the node to which the subject belongs. difference between the times.

Substitute all possible value combinations of the vector M to be solved into the above time cost constraint function in turn, and obtain the target value combination in which D(M) is less than ^Dmax among the value combinations of the vector M. Then, the main protection measures corresponding to 1 in the target value combination are obtained to form an attack path protection scheme, and the attack path protection scheme is used as an attack path protection scheme that satisfies the time cost condition.

After determining the attack path protection scheme that satisfies the information security condition and the attack path protection scheme that satisfies the time cost condition, the attack path protection scheme that satisfies both the information security condition and the time cost condition is obtained.

Then, the protection cost of the attack path protection scheme satisfying both the information security condition and the time cost condition is calculated by the above protection cost calculation formula.

Finally, among the attack path protection schemes that satisfy both the information security condition and the time cost condition, the corresponding attack path protection scheme with the smallest protection cost is determined. If the number of corresponding attack path protection schemes with the smallest protection cost is 1, the corresponding attack path protection scheme with the smallest protection cost is used as the protection scheme to be used for the attack path. If the number of the corresponding attack path protection schemes with the minimum protection cost is greater than 1, among the multiple attack path protection schemes with the minimum protection cost, the corresponding attack path protection scheme with the minimum attack probability is determined.

If the number of the corresponding attack path protection schemes with the smallest attack probability is 1, the corresponding attack path protection scheme with the smallest attack probability is used as the to-be-used protection scheme for the attack path. If the number of corresponding attack path protection schemes with the smallest attack probability is greater than 1, among the corresponding attack path protection schemes with the smallest attack probability, the corresponding attack path protection scheme with the smallest time cost is determined.

If the number of the corresponding attack path protection schemes with the minimum time cost is 1, the corresponding attack path protection scheme with the minimum time cost is used as the protection scheme to be used for the attack path. If the number of the corresponding attack path protection schemes with the minimum time cost is greater than 1, the above corresponding attack path protection schemes with the minimum time cost can be displayed to the technician, and the technician selects one of the attack path protection schemes as the waiting path of the attack path. Use protective schemes.

Of course, if the number of the corresponding attack path protection schemes with the least time cost above is greater than 1, it is also possible to randomly select an attack path protection scheme from the above corresponding attack path protection schemes with the minimum time cost as the to-be-used protection scheme for the attack path. Program.

After selecting the protection solution to be used, the technician can deploy the protection solution to be used to the designated vehicle. In addition, the computer device can also reselect the protection scheme to be used according to a preset cycle, or reselect the protection scheme to be used after the technician updates the information security conditions or protection cost conditions.

In this embodiment of the present application, an attack path protection scheme that satisfies information security conditions can be automatically selected for multiple attack path protection schemes of an attack path, which ensures the protection effect of the finally selected protection scheme to be used. In addition, in this application, after selecting the attack path protection scheme that satisfies the information security conditions, the attack path protection scheme that satisfies the information security conditions is automatically selected from the attack path protection schemes that satisfy the information security conditions, and the attack path protection scheme that satisfies the protection cost condition is automatically selected as the final pending attack path. Use protective schemes. In this way, the finally selected protection scheme to be used can not only meet certain information security requirements to achieve a better protection effect, but also save the input protection cost to a certain extent.

Based on the same technical concept, an embodiment of the present application also provides an apparatus for determining a protection solution for an attack path. The apparatus may be computer equipment. As shown in FIG. 5 , the apparatus includes a combination module 510 and a calculation module 520 .

The calculation module 510 is used for determining an attack path protection scheme that satisfies the information security conditions among the multiple attack path protection schemes; specifically, the calculation module 510 is used for executing the

above steps

401 and 402 .

The selection module 520 is configured to, among the attack path protection schemes satisfying the information security condition, determine the attack path protection scheme that satisfies the protection cost condition as the to-be-used protection scheme of the attack path. Specifically, the selection module 520 is configured to execute the above step 403 .

In a possible implementation manner, the computing module 510 is used for:

Among the multiple attack path protection schemes, determine the attack path protection scheme that satisfies the information security conditions and satisfies the time cost conditions.

In a possible implementation manner, the information security condition corresponding to the attack path protection scheme is that the corresponding attack probability is less than a preset attack probability threshold.

In a possible implementation, the selection module 520 is used to:

Determine the corresponding attack path protection scheme with the least protection cost;

In the case where the number of corresponding attack path protection schemes with the smallest protection cost is 1, the corresponding attack path protection scheme with the smallest protection cost is used as the protection scheme to be used for the attack path; or,

When the number of the corresponding attack path protection schemes with the smallest protection cost is greater than 1, among the multiple attack path protection schemes with the smallest protection cost, determine the corresponding attack path protection scheme with the smallest attack probability;

When the number of corresponding attack path protection schemes with the smallest attack probability is 1, the corresponding attack path protection scheme with the smallest attack probability is used as the protection scheme to be used for the attack path; or,

When the number of the corresponding attack path protection schemes with the smallest attack probability is greater than 1, among the corresponding attack path protection schemes with the smallest attack probability, the corresponding attack path protection scheme with the smallest time cost is determined as the attack path to be used. protection plan.

It should be noted that: when the device for determining the protection scheme of the attack path provided in the above embodiment determines the protection scheme of the attack path, only the division of the above functional modules is used as an example for illustration. In practical applications, the above functions can be used as required. The allocation is completed by different functional modules, that is, the internal structure of the computer device is divided into different functional modules, so as to complete all or part of the functions described above. In addition, the apparatus for determining a protection solution for an attack path provided in the above embodiment and the method embodiment for determining a protection solution for an attack path belong to the same concept, and the specific implementation process is detailed in the method embodiment, which will not be repeated here.

Referring to FIG. 6 , an embodiment of the present application provides a schematic diagram of a computer device 600 . The computer device 600 includes at least one processor 601 , internal connections 602 , memory 603 and at least one transceiver 604 .

The computer device 600 is an apparatus with a hardware structure, which can be used to implement the functional modules in the apparatus shown in FIG. 5 . For example, those skilled in the art can think that the computing module 510 in the apparatus shown in FIG. 5 can be implemented by calling the code in the memory 603 through the at least one processor 601, and the selection module 520 can also call the memory through the at least one processor 601. 603 code to achieve.

Optionally, the above-mentioned processor 601 may be a general-purpose central processing unit (central processing unit, CPU), network processor (network processor, NP), microprocessor, application-specific integrated circuit (application-specific integrated circuit, ASIC) , or one or more integrated circuits used to control the execution of the program of this application.

The internal connection 602 described above may include a path to transfer information between the above described components. Optionally, the internal connection 602 is a single board or a bus or the like.

The above transceiver 604 is used to communicate with other devices or communication networks.

The above-mentioned memory 603 can be a read-only memory (read-only memory, ROM) or other types of static storage devices that can store static information and instructions, a random access memory (random access memory, RAM) or other types of storage devices that can store information and instructions. Types of dynamic storage devices, which can also be electrically erasable programmable read-only memory (EEPROM), compact disc read-only memory (CD-ROM), or other optical storage, CD-ROM storage (including compact discs, laser discs, compact discs, digital versatile discs, Blu-ray discs, etc.), magnetic disk storage media or other magnetic storage devices, or capable of carrying or storing desired program code in the form of instructions or data structures and capable of being accessed by Any other medium accessed by the computer, but not limited to this. The memory can exist independently and be connected to the processor through a bus. The memory can also be integrated with the processor.

Wherein, the memory 603 is used for storing the application code for executing the solution of the present application, and the execution is controlled by the processor 601 . The processor 601 is configured to execute the application program code stored in the memory 603, and cooperate with at least one transceiver 604, so that the computer device 600 realizes the functions in the present application.

In a specific implementation, as an embodiment, the processor 601 may include one or more CPUs, such as CPU0 and CPU1 in FIG. 6 .

In a specific implementation, as an embodiment, the computer device 600 may include multiple processors. Each of these processors can be a single-core (single-CPU) processor or a multi-core (multi-CPU) processor. A processor herein may refer to one or more devices, circuits, and/or processing cores for processing data, such as computer program instructions.

Embodiments of the present application further provide a computer-readable storage medium, where instructions or programs are stored in the computer-readable storage medium, and the instructions or programs are loaded and executed by a processor to implement the attack path determination method provided by the embodiments of the present application. method of protection.

Embodiments of the present application also provide a computer program product, the computer program product includes instructions, and the instructions are loaded and executed by a processor to implement the method for determining a protection solution for an attack path provided by the embodiments of the present application.

An embodiment of the present application further provides a chip system, where the chip system includes at least one processor for supporting the functions involved in implementing the above method for determining a protection solution for an attack path, such as processing data involved in the above method and/or or information.

In the above embodiments, it may be implemented in whole or in part by software, hardware, firmware or any combination thereof, and when implemented in software, it may be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions, and when the computer program instructions are loaded and executed on a device, all or part of the processes or functions described in the embodiments of the present application are generated. Computer instructions may be stored in or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, from a website site, computer, server, or data center over a wired connection. (eg coaxial cable, optical fiber, digital subscriber line) or wireless (eg infrared, wireless, microwave, etc.) means to another website site, computer, server or data center. The computer-readable storage medium may be any available medium that the device can access, or a data storage device such as a server, data center, or the like that includes an integration of one or more available media. The usable medium may be a magnetic medium (such as a floppy disk, a hard disk, and a magnetic tape, etc.), an optical medium (such as a digital video disk (Digital Video Disk, DVD), etc.), or a semiconductor medium (such as a solid-state disk, etc.).

Those of ordinary skill in the art can understand that all or part of the steps of implementing the above embodiments can be completed by hardware, or can be completed by instructing relevant hardware through a program, and the program can be stored in a computer-readable storage medium. The storage medium mentioned may be a read-only memory, a magnetic disk or an optical disk, etc.

The above descriptions are only examples of the present application, and are not intended to limit the present application. Any modifications, equivalent replacements, improvements, etc. made within the principles of the present application should be included within the protection scope of the present application.

Claims

A method for determining a protection scheme for an attack path, characterized in that the method comprises:

Among the multiple attack path protection schemes corresponding to the attack path, determine the attack path protection scheme that satisfies the information security conditions;

In the attack path protection scheme that satisfies the information security condition, the attack path protection scheme that satisfies the protection cost condition is determined as the to-be-used protection scheme of the attack path.
The method according to claim 1, wherein, among the multiple attack path protection schemes corresponding to the attack path, determining the attack path protection scheme that satisfies the information security conditions, comprising:

Among the multiple attack path protection schemes corresponding to the attack path, an attack path protection scheme that satisfies the information security condition and the time cost condition is determined.
The method according to claim 2, wherein the time cost condition is that the time cost corresponding to the attack path protection scheme is less than a preset time cost threshold.
The method according to any one of claims 1-3, wherein the information security condition is that the attack probability corresponding to the attack path protection scheme is less than a preset attack probability threshold.
The method according to any one of claims 1-4, wherein the determining the attack path protection scheme that satisfies the protection cost condition, as the to-be-used protection scheme of the attack path, comprises:

Determine the corresponding attack path protection scheme with the least protection cost;

In the case where the number of the corresponding attack path protection schemes with the minimum protection cost is 1, the corresponding attack path protection scheme with the minimum protection cost is used as the protection scheme to be used for the attack path; or,

In the case where the number of the corresponding attack path protection schemes with the minimum protection cost is greater than 1, among the plurality of attack path protection schemes with the minimum protection cost, determine the corresponding attack path protection scheme with the minimum attack probability;

When the number of the corresponding attack path protection schemes with the smallest attack probability is 1, the corresponding attack path protection scheme with the smallest attack probability is used as the protection scheme to be used for the attack path; or,

When the number of the corresponding attack path protection schemes with the smallest attack probability is greater than 1, among the corresponding attack path protection schemes with the smallest attack probability, the corresponding attack path protection scheme with the smallest time cost is determined as the The protection scheme to be used for the attack path described above.
A device for determining a protection scheme for an attack path, characterized in that the device comprises:

a computing module, configured to determine, among the multiple attack path protection schemes, an attack path protection scheme that satisfies information security conditions;

The selection module is configured to determine, among the attack path protection schemes that satisfy the information security condition, an attack path protection scheme that satisfies the protection cost condition, as the to-be-used protection scheme of the attack path.
The device according to claim 6, wherein the computing module is configured to:

Among the multiple attack path protection schemes, an attack path protection scheme that satisfies the information security condition and satisfies the time cost condition is determined.
The device according to claim 7, wherein the time cost condition is that the time cost corresponding to the attack path protection scheme is less than a preset time cost threshold.
The device according to any one of claims 6-8, wherein the information security condition is that the attack probability corresponding to the attack path protection scheme is less than a preset attack probability threshold.
The device according to any one of claims 6-9, wherein the selection module is configured to:

Determine the corresponding attack path protection scheme with the least protection cost;

In the case where the number of the corresponding attack path protection schemes with the minimum protection cost is 1, the corresponding attack path protection scheme with the minimum protection cost is used as the protection scheme to be used for the attack path; or,

In the case where the number of the corresponding attack path protection schemes with the minimum protection cost is greater than 1, among the plurality of attack path protection schemes with the minimum protection cost, determine the corresponding attack path protection scheme with the minimum attack probability;

When the number of the corresponding attack path protection schemes with the smallest attack probability is 1, the corresponding attack path protection scheme with the smallest attack probability is used as the protection scheme to be used for the attack path; or,

In the case where the number of the corresponding attack path protection schemes with the smallest attack probability is greater than 1, among the corresponding attack path protection schemes with the smallest attack probability, the corresponding attack path protection scheme with the smallest time cost is determined as the The protection scheme to be used for the attack path described above.
A computer device, characterized in that the computer device includes a processor and a memory, wherein:

The memory stores instructions that are executed by the processor to implement the method of determining a protection scheme for an attack path as claimed in any one of claims 1 to 5.
A computer-readable storage medium, wherein instructions are stored in the computer-readable storage medium, and the instructions are loaded and executed by a processor to realize the determination according to any one of claims 1 to 5 Method of attack path protection scheme.
A chip system, characterized in that, the chip system includes at least one processor, and the processor is configured to support the method for implementing the protection scheme for determining an attack path according to any one of claims 1 to 5.
The chip system according to claim 13, wherein the chip system further comprises a memory for storing program instructions and data, and the memory is located inside the processor or outside the processor .
A computer program product, characterized in that the computer program product includes instructions, and the instructions are loaded and executed by a processor, so as to realize the protection for determining an attack path according to any one of claims 1 to 5 method of the program.