GB/T 38628-2020Information security technology—Cybersecurity guide for automotive electronics systems (English PDF)

3.1 Automotive electronics systems

The system that realizes control or service in the automobile through electronic technology, which is a type of embedded system applied in the automotive field, including the vehicle control electronics system and the onboard service electronics system.

3.2 Pending question

When conducting security evaluations, cybersecurity threats that cannot be reduced or determined to reduce by existing cybersecurity control measures, as well as the problems that need further analysis and handling in subsequent processes.

3.3 System context

A collection which defines the system hardware and software interfaces, key data streams, storage and information processing, etc.

3.4 Attack tree analysis

The method of analyzing the possible attack path of the attacker from the aspect of the system application layer.

3.5 Cyber-physical system

A system composed of computing components and physical control components.

3.6 Cyber-physical vehicle system

The vehicle embedded control system as tightly coupled between the computing and physical components of the system and the surrounding environment of the system.

5.1 Overview

The cybersecurity activity framework of automotive electronic system is as shown in Figure 1, which includes automotive electronic system's cybersecurity activities, organizational management, support guarantees, of which cybersecurity activities are the core of the framework, which mainly refers to the relevant security activities as carried out at various stages of the automotive electronic system's life cycle. These stages include conceptual design stage, system-level product development stage, hardware-level product development stage, software-level product development stage, product production, operation and service stage.

5.2 Organization management

Organization management refers to the organization, personnel capabilities, systems required to carry out cybersecurity activities in automotive electronic systems.

5.3 Cybersecurity activities

5.3.1 Conceptual design stage

The conceptual design stage mainly includes activities such as system function definition, cybersecurity process startup, threat analysis and risk evaluation, determination of cybersecurity goal, cybersecurity strategy design, identification of cybersecurity demand, initial cybersecurity evaluation, stage Setup of organization structure Establishment of communication & coordination platform Cybersecurity system and personal training Test and evaluation Stage inspection

5.3.2 Product development stage

The product development stage includes the development stage of system-level product, the development stage of hardware-level product, the development stage of software-level product. Figure 2 shows the basic process of the product development stage as well as the relationship between product development at the system level, hardware level, and software level.

5.3.3 Product production, operation and service stage

The product production, operation and service stages mainly include field monitoring, incident response, follow-up related incident tracking management.

5.4 Support guarantee

The support guarantee of cybersecurity for automotive electronic systems mainly include configuration management, demand management, change management, document management, supply chain management, cloud Initiation of 6 Cybersecurity organization management of automotive electronics systems

6.1 Set organizational structure

Organizations need to attach great importance to cybersecurity; consider cybersecurity at the strategic level of the organization; specifically reflect it from the following aspects. […]

6.2 Establish a communication and coordination platform

The organization should establish internal and external information communication and coordination channels for cybersecurity, including but not limited to the following. […]

6.3 System construction and employee training

The organization should take the cybersecurity system as an important content of organization construction; create, cultivate and maintain the organization's cybersecurity culture, in order to enhance employees' cybersecurity awareness.

The organization work can be carried out from the following aspects. […]

6.4 Test and evaluation

6.4.1 Cybersecurity evaluation team

Cybersecurity testing and evaluation should be completed by an experienced and impartial evaluation team; the specific conditions may include.

6.4.2 Cybersecurity test content

Vulnerability testing, penetration testing and fuzzy testing are important methods for evaluating an object's cybersecurity capabilities. Among them, vulnerability testing is a more common method, which can include but not limited to the following specific methods.

6.4.3 Cybersecurity evaluation

The cybersecurity evaluation is used to verify whether the currently implemented cybersecurity strategy meets cybersecurity requirements and whether it can effectively reduce threats and risks, which may include but not limited to the following. […]

6.5 Stage inspection

Before the end of each stage of the life cycle, it should conduct a stage inspection, to ensure that the activities of the current stage have been completed correctly and consistently before the start of the next stage.

The stage inspection can be carried out by an organized group of technical experts, which should be independent of the product development team.

7.1 Conceptual design stage

7.1.1 Overview

The activity flow in the conceptual design stage is as shown in Figure 4, including system function's definition, cybersecurity process's start-up, risk evaluation and target's determination, cybersecurity strategy's design, cybersecurity demand's identification, initial cybersecurity evaluation, concept design stage inspection.

7.1.2 Definition of system function

The organization should clarify the application scope of the subsystems and functions developed in the automotive electronic system that can implement cybersecurity; analyze them as follows. […]

7.1.3 Initiation of cybersecurity process

When initiating the cybersecurity life cycle process of an automotive electronic system, the organization should formulate a corresponding cybersecurity plan, including but not limited to the following. […]

7.1.6 Design of cybersecurity policy

The organization should determine the policies needed to meet cybersecurity goals, including but not limited to.

7.1.7 Identification of cybersecurity needs

The organization should extract and identify cybersecurity needs from the determined cybersecurity objectives, or define specific cybersecurity needs by refining cybersecurity policies.

7.1.8 Initial cybersecurity evaluation

The organization should carry out an initial cybersecurity evaluation, which is mainly used to describe the requirements of system functions for cybersecurity at the current stage. The content of the initial evaluation report formed may include but not limited to.

7.1.9 Inspection at conceptual design stage

The organization should conduct a stage inspection when the activities in the conceptual design stage are completed, to ensure that all activities in the conceptual stage have been completed and produce an appropriate output. The main content is to check the following. […]

7.2 System-level product development stage

7.2.1 Overview of process steps

7.2.2 Initiation of system-level product development

The organization should initiate cybersecurity activities for system-level product development, which may include.

7.2.5 Identification of cybersecurity technology needs

The organization should further determine the cybersecurity technology needs based on the actual situation, which may include the following steps.

7.2.6 System design

When carrying out the system design, the organization should follow the established process, tool use and specific process requirements, to design a system that can meet its functional requirements and cybersecurity requirements.

7.2.7 System integration and testing

In the integration and testing of system functions, organizations can confirm the following through testing.

7.2.8 Cybersecurity verification

In order to ensure that the applied security technology can meet the cybersecurity technology requirements of the system, the organization should verify its effectiveness through an independent cybersecurity evaluation team. The available verification methods include.

7.3 Hardware-level product development stage

7.4 Software-level product development stage

7.4.1 Overview

7.4.2 Initiation of software-level product development

The organization should initiate cybersecurity activities for software-level product development, which may include but are not limited to.

8.1 Configuration management

Configuration management may include.

8.2 Demand management

The goal of demand management is to ensure that demands conform to system characteristics and attributes and are correctly defined, meanwhile ensure consistency of requirements at all stages of the life cycle. The specific content of requirements management may include.

8.3 Change management

The goal of change management is to analyze and control the changes of the system or product in the life cycle process, systematically carry out the activities such as the planning of change, the control and monitoring of change, the implementation of change, etc.; form a document to implement the decision-making and responsibility allocation of change. The specific content of change management may include.

8.4 Document management

The goal of document management is to formulate a document management strategy for the entire life cycle of the system, to implement an effective and repeatable document management process. The organization needs to formulate a document preparation plan, to ensure that the document is available before the corresponding stage of activities. The following types of documents can be incorporated into document management policy.

8.5 Supply chain management

8.6 Cloud management

8.6.1 Cloud service security

Cloud service providers that provide back-end services for automotive electronic systems with networking capabilities should deploy & improve corresponding security measures and establish & improve the security guarantee capabilities of cloud services in accordance with GB/T 31167-2014 and GB/T 31168-2014. Related security measures include but are not limited to. […]