Requirements on Intrusion Detection System, No.976, AUTOSAR R21-11 (72) AP

Requirements on Intrusion Detection System, No.976, 

https://www.autosar.org/fileadmin/standards/foundation/21-11/AUTOSAR_RS_IntrusionDetectionSystem.pdf


AUTOSAR R21-11記事一覧はこちら。

AUTOSAR 21-11, 42文書読んだ。2022年5月中に半分到達予定。

https://qiita.com/kaizen_nagoya/items/648b32867635993410c8

AUTOSAR R21-11(0) 仕様ダウンロード一覧。単語帳。参考文献資料作成

https://qiita.com/kaizen_nagoya/items/9b3a1b9b8d1e8d7e288e

# 用語(terms)

|Term|Description|
|:--|:--|
|Filter Chain| A set of consecutive filters which is applied to Security Events
|Intrusion Detection System |An Intrusion Detection System is a security control which detects and processes security events.
|Intrusion Detection System Manager|The Intrusion Detection System Manager handles security events reported by security sensors.
|Intrusion Detection System Reporter|The Intrusion Detection System Reporter handles qualified security events received from Idsm instances.
|Security Extract| The Security Extract specifies which security events are handled by IdsM instances and their configuration parameters.
|Security Event Type| A security event type can be identified by its security event type ID. Instances of security event types are called security events and share the same security event type ID.
|Security Events Onboard |Security Events are instances of security event types which are reported by BSW or SWC to the IdsM.
|Security Event Memory| A user defined diagnostic event memory which is independent from the primary diagnostic event memory.
|Security Sensors| BSW or SWC which report security events to the Idsm.
|Qualified Security Events |*1Security events which pass their filter chain are regarded as Qualified Security Events.
|Security Incident and Event Management|Process for handling a confirmed security incident
|Security Operation Centre| Organization of security and domain experts who are analyzing security events and contributing to mitigation of threats.
|IDS |Intrusion Detection System
|IdsM |Intrusion Detection System Manager
|IdsR |Intrusion Detection System Reporter
|SecXT| Security Extract
|SEv |Security Event
|QSEv| Qualified Security Event
|Sem |Security Event Memory
|SIEM| Security Incident and Event Management
|SOC |Security Operation Centre

## 英日
日本語は仮訳

|no.|count|word|日本語|
|:----|:----|:----|:----|
|1|202|the|その|
|2|131|of|の|
|3|92|security|安全|
|4|74|idsm|idsm|
|5|63|to|に|
|6|50|rs_ids_|rs_ids_|
|7|50|shall|しなければならない|
|8|49|a|一つの|
|9|47|be|です|
|10|46|event|行事|
|11|45|and|と|
|12|45|detection|検出|
|13|45|system|系|
|14|44|autosar|autosar|
|15|42|intrusion|侵入|
|16|42|sev|sev|
|17|40|requirements|要件|
|18|35|by|に|
|19|35|for|にとって|
|20|35|on|の上|
|21|35|qsev|qsev|
|22|34|events|行事|
|23|34|uc|uc|
|24|33|document|資料|
|25|32|filter|濾過|
|26|31|which|どれの|
|27|30|in|中に|
|28|29|description|説明|
|29|28|material|材料|
|30|28|use|使用する|
|31|27|ap|ap|
|32|27|cp|cp|
|33|26|c|c|
|34|26|case|場合|
|35|26|rs_brf_|rs_brf_|
|36|25|appliesto|適用する|
|37|25|are|です|
|38|25|d|d|
|39|25|dependencies|依存関係|
|40|25|rationale|根拠|
|41|25|supporting|対応|
|42|23|r|r|
|43|22|id|id|
|44|21|data|与件|
|45|21|draft|原案|
|46|21|reported|報告|
|47|20|autosar_rs_intrusiondetectionsystem|autosar_rs_intrusiondetectionsystem|
|48|20|can|できる|
|49|20|fo|foundation(短縮名)|
|50|20|is|は|
|51|19|support|対応|
|52|18|or|また|
|53|17|ids|ids|
|54|16|configuration|構成|
|55|16|it|それ|
|56|15|types|型|
|57|14|reporting|報告|
|58|13|chain|鎖|
|59|13|context|文脈|
|60|13|idsr|idsr|
|61|13|memory|記憶装置|
|62|12|if|もし|
|63|11|as|なので|
|64|11|configurable|構成可能|
|65|11|e|e|
|66|11|filters|濾過|
|67|11|from|から|
|68|11|provide|提供|
|69|11|qualified|的確な|
|70|11|software|ソフトウェア|
|71|10|an|一つの|
|72|10|analysis|分析|
|73|10|any|どれか|
|74|10|manager|管理者|
|75|10|mode|状態|
|76|10|onboard|板上の|
|77|10|records|記録|
|78|10|specification|仕様|
|79|9|following|続く|
|80|9|functional|機能的|
|81|9|sensors|感知器|
|82|9|specific|明確|
|83|9|type|型|
|84|8|depending|依存する|
|85|8|diagnostic|診断|
|86|8|g|g|
|87|8|may|かもしれない|
|88|8|qualification|資格|
|89|8|report|報告する|
|90|8|sevs|sevs|
|91|8|this|これ|
|92|8|used|使った|
|93|7|architecture|建築|
|94|7|authenticity|信憑性|
|95|7|basic|基本|
|96|7|elements|要素|
|97|7|further|さらに遠く|
|98|7|instance|実例|
|99|7|optional|選択肢|
|100|7|protocol|規約|
|101|7|qsevs|qsevs|
|102|7|reporter|報告者|
|103|7|soc|soc|
|104|7|without|それなし|
|105|7|work|仕事|

# 参考(reference)

[1] General Specification of Basic Software Modules, AUTOSAR_SWS_BSWGeneral
[2] Standardized M1 Models used for the Definition of AUTOSAR, AUTOSAR_MOD_GeneralDefinitions
[3] Security Extract Template, AUTOSAR_TPS_SecurityExtractTemplate
[4] Specification of Intrusion Detection System Manager, AUTOSAR_SWS_IntrusionDetectionSystemManager
[5] Specification of Intrusion Detection System Manager for Adaptive Platform, AUTOSAR_SWS_AdaptiveIntrusionDetectionSystemManager
[6] Specification of Intrusion Detection System Protocol
AUTOSAR_PRS_IntrusionDetectionSystem
[7] Standardization Template, AUTOSAR_TPS_StandardizationTemplate
[8] Requirements on AUTOSAR Features, AUTOSAR_RS_Features


 ＜この記事は個人の過去の経験に基づく個人の感想です。現在所属する組織、業務とは関係がありません。＞

# 関連文書(Related document)
Requirements on Intrusion Detection System, AUTOSAR R22-11, AP, No.976

https://qiita.com/kaizen_nagoya/items/2e396823d991433b9361

# 文書履歴(document history)
ver. 0.01 初稿 20220513
ver. 0.02 URL追記　20221229