DT-4-CT: a feasibility study to build a Digital Twin for Cybersecurity Testing of CAV networks

能够即时评估、衡量和确定通信各方的可信度，以及随后他们交换的数据，对于CAV技术生态系统的大规模开发、测试和试验至关重要。对于任何希望将技术应用于商业世界的组织来说，在开放环境中运行的能力至关重要，这些环境面临着从硬件到通信网络以及互联数字系统（无论是车载自动驾驶系统还是数字交通控制中心应用程序）等复杂且不断演变的威胁。该项目将研究互联汽车网络环境中的网络安全威胁，并提出一种数字网络安全测试方法和流程，使用数字孪生方法来识别和测量动态威胁，并提出缓解策略。我们将采用系统的系统方法，通过明确承认相互连接和潜在相互依赖的系统引入的威胁的复杂性来检查问题和对策。自动驾驶汽车被视为依赖于数据的应用，它依赖于嵌入式传感器技术在硬件和软件层面的高效和准确操作，以及与外部网络和移动服务的交互，这些服务可以通信、交换和处理数据。该环境包括交通管理与控制、路边基础设施、通信基础设施、车载自动驾驶系统、CAV车队管理系统以及它们之间的交互。一个系统面临的网络威胁与另一个系统面临的网络威胁已经无法轻易分离，因为它们紧密地交织在一起。需要一个协调和可扩展的网络安全测试设施，以检查从互联传感器的物理基础设施到城市规模的交通管理系统的网络安全挑战。该项目将研究在这种环境下建立网络安全测试数字孪生的可行性。网络安全威胁将使用由五层真实和模拟数据构建的计算模型进行检查，以识别和建立不同系统之间所需的信息：a)硬件，例如车辆/车载设备使用的可信平台模块，路边单元，以引导信任；B)软件安全更新流程；C)建立身份和访问控制的应用程序安全性；d)通过无线网络（如DSRC和Cellar）交换安全信息的流程；e)系统级数据交换的安全流程，例如UTMC与第三方物联网传感器之间的数据交换。复杂的威胁，如分布式拒绝服务（DDoS）攻击，与所有层相关，因此将探索元模型的方法。相关的调查结果和建议，在适当的情况下，将以保密的方式与供应商、地方当局、第三方和政府机构分享。

Being able to instantaneously assess, measure, and determine the trustworthiness of communicating parties and, subsequently, the data they exchange is critical to large scale development, testing, and trial of CAV technology ecosystems. The ability to operate in an open environment with complex and constantly evolving threats arising from the hardware to communication networks, and to interconnected digital systems, be it in-vehicle autonomy systems or digital traffic control centre applications, is crucial for any organisations wanting to land their technologies in the commercial world.This project will research into cybersecurity threats to connected vehicle network environment and propose a digital cybersecurity testing methodology and processes using a digital twinning approach to identify and measure dynamic threats and suggest mitigation strategies. We will take a systems-of-systems approach to examine the issues and countermeasures through explicitly acknowledging the complexity of threats introduced by interconnected and potentially interdependent systems.CAVs are seen as data dependant applications relying on the efficient and accurate operation of embedded sensor technology at the hardware and software level and interaction with external network and mobility services that communicate, exchange and process data. This environment encompasses traffic management and control, roadside infrastructure, communication infrastructure, in-vehicle autonomy system, CAV fleet management system and the interactions between them. Cyber threats to one system can no longer be easily separated from those facing another as they are intertwined close. A coordinated and scalable cybersecurity testing facility will be needed to examine cybersecurity challenges from the physical infrastructure of interconnected sensors to city-scale traffic management systems.This project will investigate the feasibility of building a digital twin for cybersecurity testing in such an environment. Cybersecurity threats will be examined using computational models constructed by real and simulated data across five layers to identify and establish the information needed between different systems: a) hardware, e.g. Trusted Platform Modules used by vehicles/in-vehicle equipment, RoadSide Units, to bootstrap trust; b) software security update processes; c) application security that establishes identity & access control; d) processes for exchanging security information over wireless network, e.g. DSRC and Cellar; and e) security processes at system-level data exchange, e.g. between UTMC and third-party IoT sensors. Sophisticated threats, such as Distributed Denial of Services (DDoS) attacks, are relevant for all layers, thus approaches for meta-models will be explored.Relevant findings and recommendations, where appropriate, will be shared with vendors, local authorities, third parties, and government agencies in a confidential manner.