DT-4-CT: a feasibility study to build a Digital Twin for Cybersecurity Testing of CAV networks

能够即时评估、测量和确定通信方的可信度，并随后确定他们交换的数据对于CAV技术生态系统的大规模开发、测试和试验至关重要。对于任何想要将其技术落地到商业世界的组织来说，能够在开放的环境中运行，以及互联的数字系统，无论是车载自动驾驶系统还是数字交通控制中心应用程序，都具有在开放环境中运行的能力，这些威胁来自硬件对通信网络的复杂和不断变化的威胁。本项目将研究联网车辆网络环境的网络安全威胁，并提出使用数字配对方法的数字网络安全测试方法和流程，以识别和测量动态威胁并提出缓解策略。我们将采用系统系统的方法来研究问题和对策，明确承认相互连接和潜在相互依赖的系统带来的威胁的复杂性。CAV被视为依赖数据的应用程序，依赖于嵌入式传感器技术在硬件和软件层面的高效和准确运行，以及与外部网络和移动服务的交互，这些外部网络和移动服务通信、交换和处理数据。该环境包括交通管理与控制、路侧基础设施、通信基础设施、车载自动驾驶系统、CAV车队管理系统以及它们之间的相互作用。一个系统面临的网络威胁不再容易与面对另一个系统的网络威胁分开，因为它们紧密交织在一起。将需要一个协调和可扩展的网络安全测试设施，以检查从互联传感器的物理基础设施到城市规模的交通管理系统的网络安全挑战。该项目将研究在这样的环境下构建数字孪生网络安全测试的可行性。网络安全威胁将使用由五个层的真实和模拟数据构建的计算模型进行审查，以确定和建立不同系统之间所需的信息：a)硬件，例如车辆/车载设备、路边设备用于引导信任的可信平台模块；b)软件安全更新过程；c)建立身份和访问控制的应用程序安全；d)通过无线网络交换安全信息的过程，例如DSRC和Cella；以及e)系统级数据交换的安全过程，例如UTMC与第三方物联网传感器之间的安全过程。复杂的威胁，如分布式拒绝服务(DDoS)攻击，与所有层相关，因此将探索元模型的方法。相关结果和建议将在适当的情况下以保密方式与供应商、地方当局、第三方和政府机构共享。

Being able to instantaneously assess, measure, and determine the trustworthiness of communicating parties and, subsequently, the data they exchange is critical to large scale development, testing, and trial of CAV technology ecosystems. The ability to operate in an open environment with complex and constantly evolving threats arising from the hardware to communication networks, and to interconnected digital systems, be it in-vehicle autonomy systems or digital traffic control centre applications, is crucial for any organisations wanting to land their technologies in the commercial world.This project will research into cybersecurity threats to connected vehicle network environment and propose a digital cybersecurity testing methodology and processes using a digital twinning approach to identify and measure dynamic threats and suggest mitigation strategies. We will take a systems-of-systems approach to examine the issues and countermeasures through explicitly acknowledging the complexity of threats introduced by interconnected and potentially interdependent systems.CAVs are seen as data dependant applications relying on the efficient and accurate operation of embedded sensor technology at the hardware and software level and interaction with external network and mobility services that communicate, exchange and process data. This environment encompasses traffic management and control, roadside infrastructure, communication infrastructure, in-vehicle autonomy system, CAV fleet management system and the interactions between them. Cyber threats to one system can no longer be easily separated from those facing another as they are intertwined close. A coordinated and scalable cybersecurity testing facility will be needed to examine cybersecurity challenges from the physical infrastructure of interconnected sensors to city-scale traffic management systems.This project will investigate the feasibility of building a digital twin for cybersecurity testing in such an environment. Cybersecurity threats will be examined using computational models constructed by real and simulated data across five layers to identify and establish the information needed between different systems: a) hardware, e.g. Trusted Platform Modules used by vehicles/in-vehicle equipment, RoadSide Units, to bootstrap trust; b) software security update processes; c) application security that establishes identity & access control; d) processes for exchanging security information over wireless network, e.g. DSRC and Cellar; and e) security processes at system-level data exchange, e.g. between UTMC and third-party IoT sensors. Sophisticated threats, such as Distributed Denial of Services (DDoS) attacks, are relevant for all layers, thus approaches for meta-models will be explored.Relevant findings and recommendations, where appropriate, will be shared with vendors, local authorities, third parties, and government agencies in a confidential manner.