基于ISO/SAE 21434标准的智能网联电动自行车网络安全研究OA

[Objective]To address emerging cybersecurity challenges for intelligent connected electric bicycles(ICEBs),this study conducts cybersecurity research based on standards such as ISO/SAE 21434 to support cybersecurity development and full lifecycle protection for such products.[Methods]This study pioneers the systematic application of the Threat Analysis and Risk Assessment(TARA)methodology within the ICEB domain.Following the identification of five core asset categories(including software and hardware)and their security attributes,the STRIDE method was employed to uncover typical threat scenarios,with impact ratings conducted across multiple dimensions.Attack trees were utilized to analyse attack paths,combined with CVSS to quantify attack feasibility,thereby constructing a risk matrix and defining risk levels.Corresponding technical protection measures were proposed based on graded response principles.[Results]A comprehensive cybersecurity analysis framework for ICEB was established.Typical threats such as remote hijacking,data leakage,and channel unavailability were identified and risk levels were assessed.Targeted protective measures,including multi-factor authentication,were proposed.[Conclusion]This study,accounting for the industry's cost-sensitive nature,provides theoretical and practical support for product cybersecurity development,full lifecycle security protection,and collaborative security construction across the industrial chain.