Specification of Intrusion Detection System Manager, No.977, AUTOSAR 21-11 (223) CP

Specification of Intrusion Detection System Manager, No.977, 2021-11

https://www.autosar.org/fileadmin/standards/classic/21-11/AUTOSAR_SWS_IntrusionDetectionSystemManager.pdf


AUTOSAR R21-11記事一覧はこちら。

AUTOSAR 21-11, 200文書読んだ。2022年5月に全部到達。

https://qiita.com/kaizen_nagoya/items/4043e8414f850ce266a4

AUTOSAR R21-11(0) 仕様ダウンロード一覧。単語帳。参考文献資料作成

https://qiita.com/kaizen_nagoya/items/9b3a1b9b8d1e8d7e288e

# 用語(terms)

|Term|Description|
|:--|:--|
|API |Application Programming Interface
|BSW |Basic Software
|BswM |Basic Software Mode Manager
|CDD |Complex Device Driver
|Classic Platform |AUTOSAR Classic Platform
|Csm |Crypto Service Manager
|Dcm |Diagnostic Communication Manager
|Dem |Diagnostic Event Manager module
|DET| Default Error Tracer
|ECU |Electronic Control Unit
|ECUC| ECU configuration
|ID |Identifier
|IDS| Intrusion Detection System
|IdsM |Intrusion Detection System Manager
|IdsR |Intrusion Detection System Reporter
|IF |Interface
|MCU| Microcontroller Unit
|NvM |Non-volatile memory
|NVRAM |Non-volatile random access memory
|OEM |Original Equipment Manufacturer
|PDU| Protocol Data Unit
|PDU ID |PDU Identifier
|PduR |PDU Router
|QSEv |Qualified Security Event
|RTE |Runtime Environment
|SecXT |Security Extract
|Sem| Security Event Memory
|SEv| On-board Security Event
|StbM |Synchronized Time-Base Manager
|SW-C| Software Component
|SOC| Security Operation Center
|TP |Transport Protocol
|Context Data Buffer |Buffer with variable sizes to fit to the needs of the context data of the SEvs.
|Context Data| Relevant information to a SEv. It is optional data that provides a broader understanding of the security event (e.g. the corrupted data ). The content and encoding of the context data is externally defined by the sensor and unknown to the IdsM module.
|Event Buffer |Buffer to temporarily store the reported SEv IDS.
|Filter |A modifier of the security events which can drop or alter an incoming SEv.
|Filter Chain |One configured sequence of filters.
|IdsM block state|State reported by the BswM via IdsM_BswM_StateChanged. The states are used to suspend the collection of security events.
|Intrusion Detection System Manager|The Intrusion Detection System Manager handles security events reported by security sensors.
|IdsR |The IdsR is an OEM specific adaptive application that can be used to further propagate the QSEvs to the SOC.
|Qualified Security Event (QSEv)| Events that have passed their corresponding filter chain and are sent to the configured sink.
|Security Event (SEv) |On-board Security Events are instances of security event types which are reported by BSW or SW-C to the IdsM. They are structured data originating from a sensor which serve as fundamental input and output data format for filters. These reported events to the IdsM that are indicative of an ongoing attack or are somehow suited to assess the security state of the vehicle. This means that events can occur during the normal operation without any ongoing attack.
|Security Event Type| A security event type can be identified by its security event type ID. Instances of security event types are called security events and share the same security event type ID.
|Sem |Security event memory is a Dem Module user defined memory which is separated from the Dem’s primary memory.
|Sensor |Reporting identity that informs the IdsM module about SEvs. It can be a BSW Module, a proprietary CDD or an SW-C Application.
|Sink |Destination of a QSEv. Depending on the configuration the QSEv can be persisted, propagated or both.
|Timestamp Provider |Service or SW-Component which provides a TimeStamp. e.g. in CP Stbm.

## 英日単語帳
日本語は仮訳

T.B.D.

# 参考(reference)

[1] Requirements on Intrusion Detection System
AUTOSAR_RS_IntrusionDetectionSystem
[2] Glossary, AUTOSAR_TR_Glossary
https://www.autosar.org/fileadmin/standards/foundation/21-11/AUTOSAR_TR_Glossary.pdf
[3] General Specification of Basic Software Modules
AUTOSAR_SWS_BSWGeneral
[4] Specification of Intrusion Detection System Protocol
AUTOSAR_PRS_IntrusionDetectionSystem
[5] Standardized M1 Models used for the Definition of AUTOSAR
AUTOSAR_MOD_GeneralDefinitions
[6] Security Extract Template
AUTOSAR_TPS_SecurityExtractTemplate
[7] General Requirements on Basic Software Modules
AUTOSAR_SRS_BSWGenera

 ＜この記事は個人の過去の経験に基づく個人の感想です。現在所属する組織、業務とは関係がありません。＞

# 関連文書(Related document)

Specification of Intrusion Detection System Manager, AUTOSAR R22-11, CP, No.977

https://qiita.com/kaizen_nagoya/items/aa2deca7750c92fa7892

# 文書履歴(document history)
ver. 0.01 初稿 20220528
ver. 0.02 URL追記　20221229