Intelligent Connected Vehicle Information Security Testing Solution

Overview

In order to meet the increasingly stringent domestic and international regulations and standards and cope with increasingly severe information security risks, smart connected vehicles usually integrate more and more information security detection and defense measures. After the relevant security measures are integrated into components and vehicles, whether they can play an effective protective role needs to be verified and confirmed through strict information security testing.

Jingwei Hirain Information Security Team provides a series of information security testing solutions for intelligent connected vehicles, covering information security testing services at various stages such as software, single components, systems and actual vehicles, to ensure the correct implementation of information security strategies.

Information security testing consulting services

The information security testing consulting services provided by Hirain cover: testing of information security policies such as OTA, IDPS, SecOC, IPSec and TLS.

OTA Information Security Testing

• OTA master node, slave node, and server interaction test

• OTA upgrade communication security test

• OTA upgrade data security test

• OTA upgrade security testing

IDPS Security Testing

• IDPS status jump test

• IDPS detection rule correctness test

• IDPS log upload function test

• IDPS Performance Response Test

In-vehicle safety communication SecOC test

• SecOC algorithm correct implementation test

• SecOC's freshness value update mechanism test

• SecOC security authentication mechanism test

• Robustness test of SecOC

(Source: AUTOSAR R20-11 AUTOSAR_SRS_SecureOnboardCommunication)

DTLS/TLS/IPsec testing

• Basic connectivity test between client and server

• Key negotiation, encryption, MAC verification and other security function tests

• Client/Server Behavior Testing

• Performance tests such as timeliness, throughput, and connection success probability

• Robustness testing such as invalid message processing, abnormal event processing, and high load rate processing

summary

Jingwei Hirain can provide systematic information security testing solutions to assist customers in improving their information security testing capabilities and build an information security testing tool chain to verify the correctness of information security policy implementation.