Specification of Intrusion Detection System Protocol, No.981, AUTOSAR R21-11 (75) FO

Specification of Intrusion Detection System Protocol, No.981, 2021-11

AUTOSAR R21-11記事一覧はこちら。

AUTOSAR 21-11, 42文書読んだ。2022年5月中に半分到達予定。

AUTOSAR R21-11(0) 仕様ダウンロード一覧。単語帳。参考文献資料作成

用語(terms)

term	Description
Adaptive Platform	AUTOSAR Adaptive Platform
BSW	Standardized AUTOSAR Software modules, which provides basic functionalities usually required in electronic control unit.
Controller Area Network/Controller Area Network with Flexible Data-Rate	An automotive network communication protocol.
Context Data	Relevant information to a SEv. It is optional data that provides a broader understanding of the security event (e.g. the corrupted data). The content and encoding of the context data is externally defined by the sensor and unknown to the IdsM module.
Classic Platform	AUTOSAR Classic Platform
Context Data Buffer	Buffer with variable sizes to fit to the needs of the context data of the SEvs.
ECU	Electronic Control Unit which provides functionalities in electronic system of a car, e.g. brake system or window lifter.
Event Buffer	Buffer to temporarily store the reported SEv.
Event Frame	Main frame of IDS protocol which includes the basic information like the Security Event ID.
Filter Chain	A set of consecutive filters which is applied to security events. The output are Qualified Security Events.
FlexRay	An automotive network communication protocol.
General Purpose I-Pdu	General Purpose Interaction Layer Protocol Data Unit.
Intrusion Detection System	An Intrusion Detection System is a security control which detects and processes security events.
Intrusion Detection System protocol	The IDS protocol specifies the message format which is used by IDS.
Intrusion Detection System Message	Message which is send by the IdsM with the IDS protocol.
Intrusion Detection System Manager	The Intrusion Detection System Manager handles security events reported by security sensors.
Intrusion Detection System Reporter	The Intrusion Detection System Reporter handles Qualified Security Events received from IdsM instances.
I-PDU Multiplexer	An AUTOSAR Basic Software module which specifies the protocol to multiplex multiple Pdus with one Protocol Control information.
LIN	Local Interconnect Network: serial communication bus to connect sensors and actuators.
Protocol Data Unit Router	An AUTOSAR component responsible for routing of messages independent from underlying communication network.
Protocol Requirement Specification Intrusion Detection System	The specification document which describes all elements of the IDS protocol.
Qualified Security Event (QSEv)	Security events which pass their filter chain are regarded as Qualified Security Events and are sent to the configured sink.
Security Extract	The Security Extract specifies which security events are handled by IdsM instances and their configuration parameters.
Security Events	Onboard security events are reported by BSW, CDD, SWC or other software components or applications to the IdsM.
Security Event Memory	A user defined diagnostic event memory which is independent from the primary diagnostic event memory.
Security Sensorsv	BSW, CDD, SWC or other software components or applications which report security events to the IdsM.
Security Incident and Event Management	Technology concept to collect, correlate and analyze security incidents to detect a threat.
Sensor	Reporting identity that informs the IdsM module about SEvs. It can be a BSW module, a proprietary CDD or a SWC Application.
Security Operation Centre	Security Operation Center is the Backend of the IDS in which data can be processed and analysed.
Socket Adapter	Socket Adaptor is a Basic Software module of AUTOSAR which creates interface between Pdu-Based communication on service level and socket based TCP/IP
AP	AUTOSAR Adaptive Platform
API	Application Programming Interface
BSW	Basic Software
CAN	Controller Area Network
CAN FD	Controller Area Network with Flexible Data-Rate
CDD	Complex Device Driver
CP	AUTOSAR Classic Platform
ECU	Electronic Control Unit
ID	Identifier
IDS	Intrusion Detection System
I-PDU	Interaction Layer Protocol Data Unit
IdsM	Intrusion Detection System Manager
IdsR	Intrusion Detection System Reporter
LIN	Local Interconnect Network
ms	Miliseconds
N-PDU	Network Layer Protocol Data Unit
OEM	Original Equipment Manufacturer
PDU	Protocol Data Unit Router
PRS IDS	Protocol Requirement Specification Intrusion Detection System
QSEv	Qualified Security Event
SecXT	Security Extract
SEv	Security Event
Sem	Security Event Memory
SIEM	Security Incident and Event Management
SOME/IP	Scalable service-Oriented MiddlewarE over IP
SOC	Security Operation Center
SWC	Software Component

英日

日本語は仮訳

no.	count	word	日本語
1	270	the	その
2	192	of	の
3	131	protocol	規約
4	121	ids	ids
5	120	byte	束
6	101	data	与件
7	93	to	に
8	86	is	です
9	83	bit	binary digit(短縮名)
10	80	id	id
11	72	context	文脈
12	72	event	行事
13	71	security	安心
14	63	and	と
15	62	autosar	autosar
16	61	system	系
17	60	in	中に
18	60	message	伝言
19	54	detection	検出
20	54	for	にとって
21	54	intrusion	侵入
22	53	prs_ids_	prs_ids_
23	53	signature	署名
24	49	a	一つの
25	49	idsm	idsm
26	48	timestamp	時刻印
27	46	specification	仕様
28	45	c	c
29	44	header	見出し
30	43	be	です
31	43	bytes	束
32	43	length	長さ
33	41	frame	枠
34	40	document	文書
35	40	instance	実例
36	39	with	と
37	35	by	に
38	35	r	r
39	34	can	できる
40	32	autosar_prs_intrusiondetectionsystem	autosar_prs_intrusiondetectionsystem
41	32	fo	foudation(短縮名)
42	31	size	大きさ
43	30	separation	分離
44	29	or	また
45	27	events	行事
46	27	which	どの
47	26	qsev	qsev
48	26	sensor	感知器
49	22	are	です
50	20	d	d
51	19	bits	binary digits(短縮名)
52	19	figure	形
53	19	it	それ
54	19	table	表
55	19	this	これ
56	18	not	いいえ
57	18	used	使った
58	17	an	一つの
59	17	communication	通信
60	17	idsr	idsr
61	17	on	の上
62	17	qualified	資格あり
63	16	configured	構成済み
64	16	msb	msb
65	16	pdu	pdu
66	15	count	計数
67	15	included	含む
68	15	information	情報
69	15	lsb	lsb
70	15	no	いいえ
71	15	reserved	予約済み
72	15	seconds	秒
73	14	as	なので
74	14	from	から
75	14	version	版
76	13	messages	伝言
77	13	option	選択肢
78	12	encoded	符号化した
79	12	optional	選択肢
80	12	rs_ids_	rs_ids_
81	11	e	e
82	11	if	もし
83	11	interface	界面
84	11	network	通信網
85	11	one	1
86	11	other	他の
87	11	refer	参照
88	11	set	設定する
89	11	specific	明確
90	11	use	使う
91	10	configuration	構成
92	10	definition	意味
93	10	format	書式
94	10	layer	層
95	10	maximum	最大
96	10	note	覚書
97	10	only	だけ
98	10	software	ソフトウェア
99	10	time	時間
100	9	all	すべて
101	9	any	どれか
102	9	dependencies	依存関係
103	9	ethernet	イーサネット
104	9	example	例
105	9	g	g
106	9	i	私
107	9	module	部品
108	9	multiple	多数
109	9	nano	ナノ
110	9	oem	OEM
111	9	platform	枠組み
112	9	standard	標準
113	9	there	そこの
114	9	unit	単位

参考(reference)

[1] Requirements on Intrusion Detection System
AUTOSAR_RS_IntrusionDetectionSystem
[2] Specification of Time Synchronization
AUTOSAR_SWS_TimeSynchronization
[3] Specification of I-PDU Multiplexer
AUTOSAR_SWS_IPDUMultiplexer
[4] Specification of FlexRay Interface
AUTOSAR_SWS_FlexRayInterface
[5] Specification of Socket Adaptor
AUTOSAR_SWS_SocketAdaptor
[6] System Template
AUTOSAR_TPS_SystemTemplate
[7] Security Extract Template
AUTOSAR_TPS_SecurityExtractTemplate

＜この記事は個人の過去の経験に基づく個人の感想です。現在所属する組織、業務とは関係がありません。＞

関連文書(Related document)

Specification of Intrusion Detection System Protocol, AUTOSAR R22-11, FO, No.981

文書履歴(document history)

ver. 0.01 初稿 20220528
ver. 0.02 URL追記　20221229