CLOUD-ASSISTED THREAT DEFENSE FOR CONNECTED VEHICLES

摘要

In an example embodiment herein, there is provided methods and a system for cloud-assisted threat defense for connected vehicles. A vehicle suitably includes an on-board computer system for operating and/or controlling various systems on the vehicle. The on-board computer system suitably operates in connection with or includes an on-board threat defense module for detecting and protecting against malware attacks and other security threats to the vehicle. In an example embodiment, a cloud-based security component or security cloud assists with the detection and protection against security threats and malware attacks to the vehicle while minimizing the processing load and memory requirements for the on-board threat defense module.

主权项

1. A system comprising:
a non-transient memory configured to store data representative of security threats; an interface operable to communicate with an associated motor vehicle and at least one source external to the associated motor vehicle; and control logic coupled with the interface and with the memory; wherein the control logic is operable to receive data from at least one on-board unit of the associated motor vehicle, the at least one source external to the associated motor vehicle, or combinations thereof, wherein the received data includes data representative of one or more files identified for operation on the associated motor vehicle; wherein the control logic is operable to determine whether at least one predefined characteristic exists with respect to at least one file of the one or more files identified for operation on the associated motor vehicle; wherein, in response to a determination that at least one predefined characteristic exists with respect to a file, the control logic is operable to determine whether such file includes a security threat by analyzing the at least one file based on the data representative of security threats stored in memory; and wherein the control logic is operable to generate a signal indicating a result of the determination of whether an analyzed file includes a security threat.