Millions of malicious attacks of intelligent connected automobile safety supervision needs for half a year are urgent

Report reporter Pei Yu Beijing

"The first test ride was a bit nervous. After experiencing no one, I didn't feel scared in the car, but I felt quite safe." This is a user who has taken the trial operation of Baidu many times. The feedback message given by a person after driving a taxi. In the development of intelligent connected cars, security issues cannot be ignored.

A few days ago, the 2022 World New Energy Vehicle Conference (hereinafter referred to as the "Conference") was held in Beijing and Hainan. Li Keqiang, an academician of the Chinese Academy of Engineering, chief scientist of the National Intelligent Network Automobile Innovation Center, and professor of Tsinghua University, said in a speech that in the first half of this year, the network malicious behavior against the Internet of Vehicles had exceeded 1 million times, and the problem of car information security threats was increasingly serious.

The Ministry of Industry and Information Technology and other central ministries and commissions have already started to solve this problem. By the end of 2023, it will initially build a system of network security and data security standards for networking, and complete the development of more than 50 urgent need for standards. By 2025, a relatively complete car network network security and data security standard system will be formed.

Safety threat increases

In the context of the consensus of automobile intelligence, the security issues of intelligent connected cars are not only concerned about the industry, but also the public's attention.

A survey conducted by 360 (7.380, 0.12, 1.65%) (601360.SH) showed that 84.2%of people believe that intelligence should become standard for cars, and 61.1%of people believe that smart cars collect driving data or infringe personal privacy of personal privacy 86.4%of people are worried that the Internet of Vehicles will encounter cyber attacks, and 83.8%of people think that hackers may be able to remotely control smart cars, thereby bringing potential safety hazards.

The CEO Cheng Peng, the CEO of Four Audit New (13.360, 0.32,2.45%), used a more vivid saying: the case where the autonomous vehicles often appeared in movies were controlled in reality. Once used for it, it was used for it. Various illegal behaviors will affect public safety. By then, it is not just a question of personal information leakage.

Academician Li Keqiang has long been engaged in research on intelligent connected cars for a long time, and is one of the authoritative experts in this field. Regarding the security of intelligent connected cars, he said that intelligent connected cars are a complex system. After sorting out the risk points in the meantime, it is found that the information security problem of intelligent connected cars is becoming increasingly serious. "The problems (medium) now exist, and the problem of information security is the most serious." He also revealed that in the first half of this year, the network malicious behavior against the Internet of Vehicles had exceeded 1 million times.

With the continuous improvement of intelligent connected cars, the number of various sensors such as cameras, radar, speed measuring instruments, navigators and other sensors integrated in automobiles has continued to increase. Control information and data such as the use and operation information of automatic summons.

"A large part of these data will be transmitted and stored in the cloud. Once leakage, or malicious programs interfere with autonomous driving through the network back door, the vehicle will be controlled. The key information is used by others for illegal use, and the consequences will be used. Very serious, Academician Li Keqiang's reminder is very timely. "A person in charge of a intelligent connected car R & D business, who was unnamed, told a reporter from China Business Daily.

Intelligent connected cars are the achievements that are widely used and deeply integrated in new energy vehicles such as artificial intelligence. New energy vehicles have shown a rapid growth trend in China. Li Guoping, director of safety of the Ministry of Transport, revealed that during the "Thirteenth Five -Year Plan" period, the transportation industry has accumulated more than 1 million new energy vehicles, which greatly exceeds the original goal of 600,000 vehicles.

According to statistics from the Ministry of Public Security, as of the end of June 2022, my country's new energy (5.440, -0.04, -0.73%) car ownership exceeded 10 million vehicles, accounting for 3.23%of the total vehicle. Among them, pure electric vehicles have 810,400 vehicles, accounting for 80.93%of the total new energy vehicles. The industry believes that the higher the popularity rate, the more urgent the information security of intelligent connected cars.

Solving complex problems

In the increasingly prominent problem of intelligent connected cars, data security plays an important role. To solve this problem, the first thing to face is complexity. Cheng Peng shared a new case of four vitamins: Through normal business cooperation, they have installed OBD devices (on-Buard Diagnostics automatic diagnostic systems) in some cars, which can obtain working status data of vehicle parts. When the installation volume is large, they find that the failure of certain brands of specific components is a common issue.

"The OEM is very nervous, saying that this thing can be said to the outside world." Cheng Peng said that this involves the confirmation of the collected data, that is, who this data belongs to Laws and regulations are stipulated that they are still in a blurred area.

People in the industry told reporters that such data are simpler, and there are more data related to intelligent connected cars, and their ownership is more complicated. "If it affects supervision due to confirmation, it is difficult to solve the information security problem of intelligent connected cars," he said.

Academician Li Keqiang also felt this complexity. He emphasized that the information security of intelligent connected cars is a broad information security. Personal information data, vehicle operation data, automatic driving data at all levels, and high -precision map information should be included in it. "This is a strategic resource, which must be safely protected by data," he said. He tends to build a platform where the underlying data can be shared to cope with the complexity of intelligent connected car information security. "The 'chimney platform' is extremely unreasonable. Data management should increase management costs, while data cannot interact." Academician Li Keqiang said. In the research practice, he adopted the idea of ​​"based on key technology, based on platform component libraries, established a technical platform, and at the same time with security applications as the needs", focusing on changing the current "single -point protection, lack of systematic protection" Status, build a comprehensive and scientific information security protection system.

On such a platform, first realize the sharing of multiple parties, and then use it to all areas of intelligent connected cars, including both government management, upstream and downstream enterprises, security research institutions, etc., to realize personalized services to share underlying technologies. At present, the platform that follows this idea has been tested in Yizhuang in Beijing.

In addition, it is also important to establish a standard system. The Ministry of Industry and Information Technology clearly stated in the "Guidelines for the Construction of Network Security and Data Security Standard Systems" that by the end of 2023, it will initially build a system of network security and data security standards for the network, and complete the development of more than 50 urgent need for standards. By 2025, a relatively complete car network network security and data security standard system will be formed.

Academician Li Keqiang believes that the supervision of intelligent connected car information security must also fully consider how to empower the industry, "need to use security supervision and data governance and industrial development collaboration." He emphasized.

- END -