摘要
为快速准确地检测出车载网络数据内部异常和网络安全威胁,制定有效的异常检测方案,通过车载终端采集车辆正常行驶阶段的真实CAN总线报文数据,从基于时间和数据特征的可视化的角度,设计消息事件时序散点图和报文内容时序变化图,表现和发掘车辆内部CAN总线网络的通信频率和通信内容等数据的变化特征;并采用统计和计算汉明距离等方法对原始报文数据进行二次加工处理,结合各种可视化方法,设计概略图等交互视图来表现网络内部变化态势。研究结果显示,此设计可有效实现车载网络安全数据的消息频率特征、消息内容特征和统计特征的可视化。
To understand the pattern of distribution of vehicle network data to make quick and accurate detection of the internal anomalies and cyber security threats of the network for effective abnormal test plans,the real CAN bus message data was collected by the vehicle terminal in the normal driving phase. From the perspective of visualization based on time and data characteristics, the time sequence scatter plot of message events and the time sequence change plot of message content were designed to show and discover the changing characteristics of data such as communication frequency and communication content of the CAN bus network inside the vehicle. In addition, the original message data was processed by using methods such as statistics and hamming distance calculation, and interactive views such as various visualization methods and schematic diagram were designed to show the internal changes of the network. The research results show that the design can effectively realize the visualization of message frequency characteristics, message content characteristics and statistical characteristics of vehicle network security data.
作者
曲建云
QU Jianyun(Xiamen Yaxon Network,Xiamen 361008,China)
出处
《厦门理工学院学报》
2019年第1期53-59,共7页
Journal of Xiamen University of Technology
关键词
网络安全
车载网络
数据可视化
异常检测
汉明距离
network security
vehicle network
data visualization
anomaly detection
Hamming distance
