标准化学报Issue(8)：16-25,10.DOI:10.3969/j.issn.2097-857X.2026.08.002
基于ISO/SAE 21434标准的智能网联电动自行车网络安全研究
Research on Cybersecurity of Intelligent Connected Electric Bicycles Based on ISO/SAE 21434 Standard
摘要
Abstract
[Objective]To address emerging cybersecurity challenges for intelligent connected electric bicycles(ICEBs),this study conducts cybersecurity research based on standards such as ISO/SAE 21434 to support cybersecurity development and full lifecycle protection for such products.[Methods]This study pioneers the systematic application of the Threat Analysis and Risk Assessment(TARA)methodology within the ICEB domain.Following the identification of five core asset categories(including software and hardware)and their security attributes,the STRIDE method was employed to uncover typical threat scenarios,with impact ratings conducted across multiple dimensions.Attack trees were utilized to analyse attack paths,combined with CVSS to quantify attack feasibility,thereby constructing a risk matrix and defining risk levels.Corresponding technical protection measures were proposed based on graded response principles.[Results]A comprehensive cybersecurity analysis framework for ICEB was established.Typical threats such as remote hijacking,data leakage,and channel unavailability were identified and risk levels were assessed.Targeted protective measures,including multi-factor authentication,were proposed.[Conclusion]This study,accounting for the industry's cost-sensitive nature,provides theoretical and practical support for product cybersecurity development,full lifecycle security protection,and collaborative security construction across the industrial chain.关键词
TARA/智能网联电动自行车/网络安全/威胁分析/风险评估Key words
TARA/intelligent connected electric bicycles/cybersecurity/threat analysis/risk assessment引用本文复制引用
张兴辉,刘建建,黄志晨,王豪,郑兢,陈良..基于ISO/SAE 21434标准的智能网联电动自行车网络安全研究[J].标准化学报,2026,(8):16-25,10.基金项目
本文受2024年度国家市场监督管理总局科技计划项目"基于AI模型的智能可穿戴设备信息安全检测技术研究"(项目编号:2024MK148) （项目编号:2024MK148）
2025年福建省工业和信息化厅软件业技术创新重点攻关及产业化项目"基于DeepSeek的智能交通车载信息交互系统"(闽工信函软件[2025]587号)资助. （闽工信函软件[2025]587号）
