本报告首先从域内身份认证、域内授权通信、域间身份认证、域间授权通信等方面出发,对多域骨干网E/E架构网络安全设计和Zonal架构网络安全设计做了介绍;其次,说明了态势感知平台在智能网联汽车领域的重要作用,并从产品架构和技术架构两方面对态势感知平台的理论基础和工作流程做了阐述;最后,将汽车网络安全与数据安全防御技术分为基于应用密码学的被动防御和基于入侵检测的主动防御两类,分别就其发展背景及实际应用技术进行了梳理。
<<This section first introduces the E/E architecture network security design and the Zonal architecture network security design from the aspects of intra-domain identity authentication,intra-domain authorized communication,inter-domain identity authentication,and inter-domain authorized communication. Then,the important role of situational awareness platform in the field of intelligent networked vehicles is explained,and the theoretical basis and workflow of situational awareness platform are elaborated from both product architecture and technical architecture. Finally,the automotive network security and data security defense technologies are divided into two categories:passive defense based on applied cryptography and active defense based on intrusion detection,and their development background and practical application technologies are sorted out respectively.
<<Keywords: | AuthenticationMulti-domain Backbone E/E ArchitectureAuthorized CommunicationZonal ArchitectureSituational Awareness Platform |