SaTC: TTP: Medium: Collaborative: Exposing and Mitigating Security/Safety Concerns of CAVs: A Holistic and Realistic Security Testing Platform for Emerging CAVs

SaTC：TTP：媒介：协作：暴露和减轻 CAV 的安全/安全问题：针对新兴 CAV 的全面且现实的安全测试平台

• 批准号: 1930041
• 负责人: Zhuoqing Mao
• 金额: $ 82.58万
• 依托单位: Regents of the University of Michigan - Ann Arbor
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2019
• 资助国家: 美国
• 起止时间: 2019-10-01 至 2024-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1930041&HistoricalAwards=false
• 关键词: SaTC; TTP; Medium; Collaborative; Exposing

Connected and Automated Vehicle (CAV) technologies enable real-time information sharing and driving automation, with the potential of significantly improving safety and efficiency of the transportation system. However, cyber-security threats may compromise the efficiency of infrastructure operations and the safety of passengers, posing a significant challenge for CAV deployment. This collaborative project develops a novel CAV testing platform to address the critical needs for assessing the security and safety concerns of the CAV system in an effective and realistic manner. Hardware manufacturers, software developers, and security service providers in the CAV industry can all leverage such a platform to conveniently and holistically test their products. Moreover, the testing platform can be used for training and education in both academia and industry, and facilitate the development of security best practices and standards in industry.The testing platform provides both offensive and defensive testing services covering three parts of the CAV ecosystem: (1) transportation infrastructure, (2) connected vehicle communication channels, and (3) in-vehicle software platform. It is the first CAV security testing platform supporting cross-component offensive and defensive testing services designed to capture the inter-relationships among the three key components. The project develops testing support by effectively combining techniques in optimization, statistical modeling, machine learning, network emulation, program analysis, and model checking, while supporting innovative use of known defense solutions, including trusted computing hardware, access control policy enforcement, and anomaly detection. The project implements and deploys the testing platform in real-world CAV testbeds and collaborates with industry partners for early adoption.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

联网和自动驾驶汽车 (CAV) 技术可实现实时信息共享和驾驶自动化，有可能显着提高交通系统的安全性和效率。然而，网络安全威胁可能会损害基础设施运营的效率和乘客的安全，给 CAV 部署带来重大挑战。该合作项目开发了一种新颖的 CAV 测试平台，以满足以有效和现实的方式评估 CAV 系统安全问题的关键需求。 CAV行业的硬件制造商、软件开发商和安全服务提供商都可以利用这样的平台来方便、全面地测试他们的产品。此外，该测试平台还可用于学术界和工业界的培训和教育，并促进行业安全最佳实践和标准的制定。该测试平台提供涵盖CAV生态系统三个部分的进攻性和防御性测试服务：（ 1）交通基础设施，（2）互联车辆通信通道，以及（3）车载软件平台。它是第一个支持跨组件进攻和防御测试服务的CAV安全测试平台，旨在捕获三个关键组件之间的相互关系。该项目通过有效结合优化、统计建模、机器学习、网络仿真、程序分析和模型检查等技术来开发测试支持，同时支持已知防御解决方案的创新使用，包括可信计算硬件、访问控制策略执行和异常检测。该项目在现实世界的 CAV 测试台中实施和部署测试平台，并与行业合作伙伴合作以尽早采用。该奖项反映了 NSF 的法定使命，并通过使用基金会的智力优点和更广泛的影响审查标准进行评估，被认为值得支持。