Vehicle network security situation assessment method based on attack tree

Abstract

In order to solve the problem that the current vehicle network security situation assessment methods are seriously few, and the existing methods have low accuracy and are greatly affected by subjective factors, an attack tree-based vehicle network security situation assessment method is proposed. Firstly, the attack tree models are established to describe the network attacks the internet of vehicles may suffer from. Secondly, the security attributes of the attack path are determined, and each attack path is scored. At the same time, the fuzzy analytic hierarchy process is used to solve the weight values of each attack path. After that, weights and ratings are used to assess the security situation level of the threat. Finally, a comparative analysis of the security situation assessment with the analytic hierarchy process shows that the fuzzy analytic hierarchy process method can reduce the influence of human subjective factors and improve the credibility of the security situation assessment.