DT-4-CT: a feasibility study to build a Digital Twin for Cybersecurity Testing of CAV networks

DT-4-CT：构建用于 CAV 网络网络安全测试的数字孪生的可行性研究

• 批准号: 133902
• 金额: $ 14.16万
• 依托单位: CHILTON COMPUTING LIMITED
• 依托单位国家: 英国
• 项目类别: Feasibility Studies
• 财政年份: 2020
• 资助国家: 英国
• 起止时间: 2020 至 无数据
• 项目状态: 已结题
• 来源: https://gtr.ukri.org/projects?ref=133902
• 关键词: DT; CT; feasibility; study; build

Being able to instantaneously assess, measure, and determine the trustworthiness of communicating parties and, subsequently, the data they exchange is critical to large scale development, testing, and trial of CAV technology ecosystems. The ability to operate in an open environment with complex and constantly evolving threats arising from the hardware to communication networks, and to interconnected digital systems, be it in-vehicle autonomy systems or digital traffic control centre applications, is crucial for any organisations wanting to land their technologies in the commercial world.This project will research into cybersecurity threats to connected vehicle network environment and propose a digital cybersecurity testing methodology and processes using a digital twinning approach to identify and measure dynamic threats and suggest mitigation strategies. We will take a systems-of-systems approach to examine the issues and countermeasures through explicitly acknowledging the complexity of threats introduced by interconnected and potentially interdependent systems.CAVs are seen as data dependant applications relying on the efficient and accurate operation of embedded sensor technology at the hardware and software level and interaction with external network and mobility services that communicate, exchange and process data. This environment encompasses traffic management and control, roadside infrastructure, communication infrastructure, in-vehicle autonomy system, CAV fleet management system and the interactions between them. Cyber threats to one system can no longer be easily separated from those facing another as they are intertwined close. A coordinated and scalable cybersecurity testing facility will be needed to examine cybersecurity challenges from the physical infrastructure of interconnected sensors to city-scale traffic management systems.This project will investigate the feasibility of building a digital twin for cybersecurity testing in such an environment. Cybersecurity threats will be examined using computational models constructed by real and simulated data across five layers to identify and establish the information needed between different systems: a) hardware, e.g. Trusted Platform Modules used by vehicles/in-vehicle equipment, RoadSide Units, to bootstrap trust; b) software security update processes; c) application security that establishes identity & access control; d) processes for exchanging security information over wireless network, e.g. DSRC and Cellar; and e) security processes at system-level data exchange, e.g. between UTMC and third-party IoT sensors. Sophisticated threats, such as Distributed Denial of Services (DDoS) attacks, are relevant for all layers, thus approaches for meta-models will be explored.Relevant findings and recommendations, where appropriate, will be shared with vendors, local authorities, third parties, and government agencies in a confidential manner.

能够即时评估、测量和确定通信方的可信度，以及随后他们交换的数据，对于CAV技术生态系统的大规模开发、测试和试验至关重要。在开放环境中运行的能力，复杂和不断变化的威胁来自通信网络的硬件，以及互连的数字系统，无论是车载自主系统还是数字交通控制中心应用，对于任何希望将其技术应用于商业世界的组织来说都至关重要。该项目将研究联网车辆网络环境的网络安全威胁，并提出一个数字网络安全测试方法和流程，使用数字孪生方法来识别和衡量动态威胁，并提出缓解策略。我们将采取系统的方法来研究问题和对策，通过明确承认的复杂性，相互关联和潜在的相互依赖的系统引入的威胁。CAV被视为依赖于数据的应用程序依赖于嵌入式传感器技术在硬件和软件层面的有效和准确的操作，并与外部网络和移动服务的通信，交换和处理数据的交互。该环境包括交通管理和控制、路边基础设施、通信基础设施、车载自主系统、CAV车队管理系统以及它们之间的交互。对一个系统的网络威胁不再容易与另一个系统的网络威胁分开，因为它们相互交织在一起。需要一个协调和可扩展的网络安全测试设施，以检查从互连传感器的物理基础设施到城市规模的交通管理系统的网络安全挑战。该项目将研究在这种环境中建立数字孪生网络安全测试的可行性。网络安全威胁将使用由五个层次的真实的和模拟数据构建的计算模型进行检查，以识别和建立不同系统之间所需的信息：a）硬件，例如车辆/车载设备，路边单元使用的可信平台模块，以引导信任; B）软件安全更新流程; c）建立身份和访问控制的应用程序安全; d）通过无线网络交换安全信息的过程，例如DSRC和Cellar;以及e）系统级数据交换的安全过程，例如UTMC和第三方物联网传感器之间的安全过程。分布式拒绝服务（DDoS）攻击等复杂威胁与所有层都相关，因此将探索元模型的方法。相关发现和建议将以保密的方式与供应商、地方当局、第三方和政府机构共享。