关键词: 智能网联汽车, 网络安全, 安全威胁, 渗透测试, 安全防护

Abstract: This essay first analyzes the current cyber security threats faced by smart connected cars from four dimensions: Telematics cloud service platform, Telematics communication, invehicle terminals, and externally connected terminals. Secondly, in order to fully understand the current cyber security level of smart connected cars, 10 different mainstream car manufacturers’ smart connected cars are selected from the market and penetration tests are conducted based on six attack vectors: TCU, HU, invehicle network, radio, TSP and car control APP, and the test results are sorted and analyzed to assess their cyber security level. Then, the corresponding security protection strategies are proposed from four aspects: the security of the Telematics cloud service platform, the security of Telematics communication, the security of invehicle terminals and the security of externally connected terminals. Finally, based on the constantly diverse and unpredictable characteristics of automotive cyber security attack vectors, an outlook on the cyber security of smart connected vehicles is provided.

Key words: intelligent networked vehicles, cyber security, security threats, penetration testing, security protection