车载CAN总线的安全防护技术分析  

Analysis of the Safety Protection Technology of Vehicle CAN Bus

作　　者：黄国钧 郝允志[1] 杨颂华[1] 蓝天 梁新成[2] HUANG Guojun;HAO Yunzhi;YANG Songhua;LAN Tian;LIANG Xincheng(College of Artificial Intelligence,Southwest University,Chongqing 400715,China;College of Engineering and Technology,Southwest University,Chongqing 400715,China)

机构地区：[1]西南大学人工智能学院,重庆400715 [2]西南大学工程技术学院,重庆400715

出　　处：《汽车实用技术》2023年第11期41-48,共8页Automobile Applied Technology

基　　金：国家重点研发计划(2021YFB3101500)。

摘　　要：控制器局域网(CAN)络总线因成本低、抗干扰性强及支持分布式串行通信等优点成为应用最广泛的车载总线,相对应地CAN总线协议又因存在无认证、无加密及多个远程连接端口等安全漏洞,成为黑客攻击的主要焦点。文章首先回顾了近期汽车网络安全事故,并列举了主要的入侵类型,其中重放和丢弃为最常见的攻击方式,然后分析了CAN总线脆弱的原因并给出了对应的解决策略,最后应用信息熵和相对熵进行了入侵检测,并利用CANoe软件进行仿真分析,结果表明该方法较为有效,考虑到消除网络非法入侵的艰巨性,以及满足安全性和实时性等更高要求,未来还需要在基于可变速率(CAN-FD)等新构架下进行更加深入地研究。It is well known that controller area network(CAN)is the most widely used bus,whose advantages are low cost,strong anti-interference and supporting distributed serial communication.Unfortunately,the ineradicable security flaws have been investigated such as no authentication,no encryption and multiple remote connection ports,and thus it is the main target of hacker attack.In this paper,the recent automobile network security accidents may be reviewed at first,and relevant intrusion types are listed,in which the replay and discard are the most common attack methods.Then,the causes of CAN bus vulnerability will be analyzed,and the corresponding solutions are offered simultaneously.Finally,the information entropy and relative entropy are applied to detect the illegal intrusion,and the results have been simulated by CANoe software,showing the outstanding validity.In fact,eliminating illegal network intrusion is so tough that further research is needed under controller area network with flexible data-rate(CAN-FD)new frameworks to satisfy higher requirement such as security and real-time performance in future.

关 键 词：车载CAN总线 网络安全 安全防护技术 相对熵 机器学习 

分 类 号：U495[交通运输工程—交通运输规划与管理]