Specification of Intrusion Detection System Manager for Adaptive Platform, No.978, 2021-11

AUTOSAR R21-11記事一覧はこちら。

AUTOSAR 21-11,318文書読んだ。2022年6月初めにFO, AP, CP 全部到達。

AUTOSAR R21-11(0) 仕様ダウンロード一覧。単語帳。参考文献資料作成

用語(terms)

Term	Description
Filter Chain	A set of consecutive filters which is applied to Security Events
Intrusion Detection System	An Intrusion Detection System is a security control which detects and processes security events.
Intrusion Detection System Manager	The Intrusion Detection System Manager handles security events reported by security sensors.
Intrusion Detection System Reporter	The Intrusion Detection System Reporter handles qualified security events received from Idsm instances.
Security Extract	The Security Extract specifies which security events are handled by IdsM instances and their configuration parameters.
Security Event Type	A security event type can be identified by its security event type ID. Instances of security event types are called security events and share the same security event type ID.
Security Events	Onboard Security Events are instances of security event types which are reported by BSW or SWC to the IdsM.
Security Event Memory	A user defined diagnostic event memory which is independent from the primary diagnostic event memory.
Security Sensors	BSW or SWC which report security events to the Idsm.
Qualified Security Events	Security events which pass their filter chain are regarded as Qualified Security Events.
Security Event Memory	User defined diagnostic event memory which is separated from the main diagnostic event memory.
Security Incident and Event Management	Process for handling a confirmed security incident
Security Operation Centre	Organization of security and domain experts who are analyzing security events and contributing to mitigation of threats.
DID	Data Identifier according to Unified Diagnostic Services
DTC	Diagnostics Trouble Code
FC	Functional Cluster
IDS	Intrusion Detection System
IdsM	Intrusion Detection System Manager
IdsR	Intrusion Detection System Reporter
SecXT	Security Extract
SEv	Security Event
QSEv	Qualified Security Event
Sem	Security Event Memory
SIEM	Security Incident and Event Management
SOC	Security Operation Centre
SWCL	Software Cluster

英日

日本語は仮訳

T.B.D.

参考(reference)

Glossary も　参考に入れましょう。
https://www.autosar.org/fileadmin/standards/foundation/21-11/AUTOSAR_TR_Glossary.pdf

[1] Requirements on Intrusion Detection System
AUTOSAR_RS_IntrusionDetectionSystem
[2] Specification of Intrusion Detection System Protocol
AUTOSAR_PRS_IntrusionDetectionSystem
[3] Security Extract Template
AUTOSAR_TPS_SecurityExtractTemplate
[4] Specification of Adaptive Platform Core
AUTOSAR_SWS_AdaptivePlatformCore
[5] Specification of Cryptography
AUTOSAR_SWS_Cryptography

＜この記事は個人の過去の経験に基づく個人の感想です。現在所属する組織、業務とは関係がありません。＞

関連文書(Related document)

Specification of Intrusion Detection System Manager for Adaptive Platform, AUTOSAR R22-11, AP, No.978

文書履歴(document history)

ver. 0.01 初稿 20220606
ver. 0.02 URL追記　20221229