Specification of Intrusion Detection System Protocol, No.981, AUTOSAR R21-11 (75) FO

Specification of Intrusion Detection System Protocol, No.981, 2021-11

https://www.autosar.org/fileadmin/standards/foundation/21-11/AUTOSAR_PRS_IntrusionDetectionSystem.pdf


AUTOSAR R21-11記事一覧はこちら。

AUTOSAR 21-11, 42文書読んだ。2022年5月中に半分到達予定。

https://qiita.com/kaizen_nagoya/items/648b32867635993410c8

AUTOSAR R21-11(0) 仕様ダウンロード一覧。単語帳。参考文献資料作成

https://qiita.com/kaizen_nagoya/items/9b3a1b9b8d1e8d7e288e

# 用語(terms)
|term|Description|
|:--|:--|
|Adaptive Platform| AUTOSAR Adaptive Platform
|BSW |Standardized AUTOSAR Software modules, which provides basic functionalities usually required in electronic control unit.
|Controller Area Network/Controller Area Network with Flexible Data-Rate|An automotive network communication protocol.
|Context Data| Relevant information to a SEv. It is optional data that provides a broader understanding of the security event (e.g. the corrupted data). The content and encoding of the context data is externally defined by the sensor and unknown to the IdsM module.
|Classic Platform| AUTOSAR Classic Platform
|Context Data Buffer| Buffer with variable sizes to fit to the needs of the context data of the SEvs.
|ECU |Electronic Control Unit which provides functionalities in electronic system of a car, e.g. brake system or window lifter.
|Event Buffer| Buffer to temporarily store the reported SEv.
|Event Frame | Main frame of IDS protocol which includes the basic information like the Security Event ID.
|Filter Chain| A set of consecutive filters which is applied to security events. The output are Qualified Security Events.
|FlexRay| An automotive network communication protocol.
|General Purpose I-Pdu |General Purpose Interaction Layer Protocol Data Unit.
|Intrusion Detection System| An Intrusion Detection System is a security control which detects and processes security events.
|Intrusion Detection System protocol|The IDS protocol specifies the message format which is used by IDS.
|Intrusion Detection System Message|Message which is send by the IdsM with the IDS protocol.
|Intrusion Detection System Manager|The Intrusion Detection System Manager handles security events reported by security sensors.
|Intrusion Detection System Reporter| The Intrusion Detection System Reporter handles Qualified Security Events received from IdsM instances.
|I-PDU Multiplexer |An AUTOSAR Basic Software module which specifies the protocol to multiplex multiple Pdus with one Protocol Control information.
|LIN |Local Interconnect Network: serial communication bus to connect sensors and actuators.
|Protocol Data Unit Router |An AUTOSAR component responsible for routing of messages independent from underlying communication network.
|Protocol Requirement Specification Intrusion Detection System| The specification document which describes all elements of the IDS protocol.
|Qualified Security Event (QSEv)|Security events which pass their filter chain are regarded as Qualified Security Events and are sent to the configured sink.
|Security Extract | The Security Extract specifies which security events are handled by IdsM instances and their configuration parameters.
|Security Events| Onboard security events are reported by BSW, CDD, SWC or other software components or applications to the IdsM.
|Security Event Memory| A user defined diagnostic event memory which is independent from the primary diagnostic event memory.
|Security Sensorsv |BSW, CDD, SWC or other software components or applications which report security events to the IdsM.
|Security Incident and Event Management|Technology concept to collect, correlate and analyze security incidents to detect a threat.
|Sensor |Reporting identity that informs the IdsM module about SEvs. It can be a BSW module, a proprietary CDD or a SWC Application.
|Security Operation Centre | Security Operation Center is the Backend of the IDS in which data can be processed and analysed.
|Socket Adapter| Socket Adaptor is a Basic Software module of AUTOSAR which creates interface between Pdu-Based communication on service level and socket based TCP/IP
|AP| AUTOSAR Adaptive Platform
|API| Application Programming Interface
|BSW| Basic Software
|CAN| Controller Area Network
|CAN FD| Controller Area Network with Flexible Data-Rate
|CDD |Complex Device Driver
|CP| AUTOSAR Classic Platform
|ECU| Electronic Control Unit
|ID |Identifier
|IDS |Intrusion Detection System
|I-PDU| Interaction Layer Protocol Data Unit
|IdsM |Intrusion Detection System Manager
|IdsR| Intrusion Detection System Reporter
|LIN| Local Interconnect Network
|ms |Miliseconds
|N-PDU| Network Layer Protocol Data Unit
|OEM |Original Equipment Manufacturer
|PDU |Protocol Data Unit Router
|PRS IDS |Protocol Requirement Specification Intrusion Detection System
|QSEv|Qualified Security Event
|SecXT |Security Extract
|SEv |Security Event
|Sem |Security Event Memory
|SIEM |Security Incident and Event Management
|SOME/IP| Scalable service-Oriented MiddlewarE over IP
|SOC |Security Operation Center
|SWC |Software Component


## 英日
日本語は仮訳

|no.|count|word|日本語|
|:----|:----|:----|:----|
|1|270|the|その|
|2|192|of|の|
|3|131|protocol|規約|
|4|121|ids|ids|
|5|120|byte|束|
|6|101|data|与件|
|7|93|to|に|
|8|86|is|です|
|9|83|bit|binary digit(短縮名)|
|10|80|id|id|
|11|72|context|文脈|
|12|72|event|行事|
|13|71|security|安心|
|14|63|and|と|
|15|62|autosar|autosar|
|16|61|system|系|
|17|60|in|中に|
|18|60|message|伝言|
|19|54|detection|検出|
|20|54|for|にとって|
|21|54|intrusion|侵入|
|22|53|prs_ids_|prs_ids_|
|23|53|signature|署名|
|24|49|a|一つの|
|25|49|idsm|idsm|
|26|48|timestamp|時刻印|
|27|46|specification|仕様|
|28|45|c|c|
|29|44|header|見出し|
|30|43|be|です|
|31|43|bytes|束|
|32|43|length|長さ|
|33|41|frame|枠|
|34|40|document|文書|
|35|40|instance|実例|
|36|39|with|と|
|37|35|by|に|
|38|35|r|r|
|39|34|can|できる|
|40|32|autosar_prs_intrusiondetectionsystem|autosar_prs_intrusiondetectionsystem|
|41|32|fo|foudation(短縮名)|
|42|31|size|大きさ|
|43|30|separation|分離|
|44|29|or|また|
|45|27|events|行事|
|46|27|which|どの|
|47|26|qsev|qsev|
|48|26|sensor|感知器|
|49|22|are|です|
|50|20|d|d|
|51|19|bits|binary digits(短縮名)|
|52|19|figure|形|
|53|19|it|それ|
|54|19|table|表|
|55|19|this|これ|
|56|18|not|いいえ|
|57|18|used|使った|
|58|17|an|一つの|
|59|17|communication|通信|
|60|17|idsr|idsr|
|61|17|on|の上|
|62|17|qualified|資格あり|
|63|16|configured|構成済み|
|64|16|msb|msb|
|65|16|pdu|pdu|
|66|15|count|計数|
|67|15|included|含む|
|68|15|information|情報|
|69|15|lsb|lsb|
|70|15|no|いいえ|
|71|15|reserved|予約済み|
|72|15|seconds|秒|
|73|14|as|なので|
|74|14|from|から|
|75|14|version|版|
|76|13|messages|伝言|
|77|13|option|選択肢|
|78|12|encoded|符号化した|
|79|12|optional|選択肢|
|80|12|rs_ids_|rs_ids_|
|81|11|e|e|
|82|11|if|もし|
|83|11|interface|界面|
|84|11|network|通信網|
|85|11|one|1|
|86|11|other|他の|
|87|11|refer|参照|
|88|11|set|設定する|
|89|11|specific|明確|
|90|11|use|使う|
|91|10|configuration|構成|
|92|10|definition|意味|
|93|10|format|書式|
|94|10|layer|層|
|95|10|maximum|最大|
|96|10|note|覚書|
|97|10|only|だけ|
|98|10|software|ソフトウェア|
|99|10|time|時間|
|100|9|all|すべて|
|101|9|any|どれか|
|102|9|dependencies|依存関係|
|103|9|ethernet|イーサネット|
|104|9|example|例|
|105|9|g|g|
|106|9|i|私|
|107|9|module|部品|
|108|9|multiple|多数|
|109|9|nano|ナノ|
|110|9|oem|OEM|
|111|9|platform|枠組み|
|112|9|standard|標準|
|113|9|there|そこの|
|114|9|unit|単位|

# 参考(reference)

[1] Requirements on Intrusion Detection System
AUTOSAR_RS_IntrusionDetectionSystem
[2] Specification of Time Synchronization
AUTOSAR_SWS_TimeSynchronization
[3] Specification of I-PDU Multiplexer
AUTOSAR_SWS_IPDUMultiplexer
[4] Specification of FlexRay Interface
AUTOSAR_SWS_FlexRayInterface
[5] Specification of Socket Adaptor
AUTOSAR_SWS_SocketAdaptor
[6] System Template
AUTOSAR_TPS_SystemTemplate
[7] Security Extract Template
AUTOSAR_TPS_SecurityExtractTemplate


 ＜この記事は個人の過去の経験に基づく個人の感想です。現在所属する組織、業務とは関係がありません。＞

# 関連文書(Related document)
Specification of Intrusion Detection System Protocol, AUTOSAR R22-11, FO, No.981

https://qiita.com/kaizen_nagoya/items/33576e4d5d606d48b601

# 文書履歴(document history)
ver. 0.01 初稿 20220528
ver. 0.02 URL追記　20221229