SaTC: TTP: Medium: Collaborative: Exposing and Mitigating Security/Safety Concerns of CAVs: A Holistic and Realistic Security Testing Platform for Emerging CAVs

互联和自动化车辆(CAV)技术实现了实时信息共享和驾驶自动化，有可能显著提高交通系统的安全性和效率。然而，网络安全威胁可能会危及基础设施运营的效率和乘客的安全，对CAV的部署构成重大挑战。这个合作项目开发了一个新的CAV测试平台，以有效和现实的方式满足评估CAV系统的安全和安全问题的关键需求。CAV行业的硬件制造商、软件开发商和安全服务提供商都可以利用这样的平台来方便和全面地测试他们的产品。此外，该测试平台还可用于学术界和工业界的培训和教育，促进行业安全最佳实践和标准的制定。测试平台提供攻防测试服务，涵盖CAV生态系统的三个部分：(1)交通基础设施，(2)连接的车辆通信通道，(3)车载软件平台。它是第一个支持跨组件攻防测试服务的CAV安全测试平台，旨在捕获三个关键组件之间的相互关系。该项目通过有效结合优化、统计建模、机器学习、网络仿真、程序分析和模型检查方面的技术来开发测试支持，同时支持可信计算硬件、访问控制策略执行和异常检测等已知防御解决方案的创新使用。该项目在现实世界的CAV试验台上实施和部署测试平台，并与行业合作伙伴合作及早采用。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

Connected and Automated Vehicle (CAV) technologies enable real-time information sharing and driving automation, with the potential of significantly improving safety and efficiency of the transportation system. However, cyber-security threats may compromise the efficiency of infrastructure operations and the safety of passengers, posing a significant challenge for CAV deployment. This collaborative project develops a novel CAV testing platform to address the critical needs for assessing the security and safety concerns of the CAV system in an effective and realistic manner. Hardware manufacturers, software developers, and security service providers in the CAV industry can all leverage such a platform to conveniently and holistically test their products. Moreover, the testing platform can be used for training and education in both academia and industry, and facilitate the development of security best practices and standards in industry.The testing platform provides both offensive and defensive testing services covering three parts of the CAV ecosystem: (1) transportation infrastructure, (2) connected vehicle communication channels, and (3) in-vehicle software platform. It is the first CAV security testing platform supporting cross-component offensive and defensive testing services designed to capture the inter-relationships among the three key components. The project develops testing support by effectively combining techniques in optimization, statistical modeling, machine learning, network emulation, program analysis, and model checking, while supporting innovative use of known defense solutions, including trusted computing hardware, access control policy enforcement, and anomaly detection. The project implements and deploys the testing platform in real-world CAV testbeds and collaborates with industry partners for early adoption.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.