构建所需所得的汽车安全基础设施
Download as pptx, pdf0 likes75 views
这是对于汽车安全基础设施建设的文档，详细列举了近年来车联网面临的网络安全攻击事件及其造成的损失，并强调了国际社会对汽车网络安全的法规和标准制定情况。此外，文档还探讨了车联网的安全合规需求以及如何通过零信任架构加强汽车行业的网络安全防护。
1 of 17
Download to read offline
Ad
Recommended
AWS-Fortinet Solution Well-Architected-Mapping
AWS-Fortinet Solution Well-Architected-MappingYitao Cen
?
The document outlines the AWS Well-Architected Framework, detailing key design principles, best practices, and security pillars for cloud workloads. It emphasizes the importance of security measures, identity management, and compliance through Fortinet's offerings, which provide visibility, risk assessment, and integration with AWS services. It provides recommendations for operational excellence, cost optimization, and sustainability while explaining how Fortinet enhances AWS security services with its technology and expertise.AWS Cloud WAN Intro and Fortinet Use Cases
AWS Cloud WAN Intro and Fortinet Use CasesYitao Cen
?
The document outlines AWS VPC connectivity options and the use of AWS Cloud WAN for global network management. It discusses key design considerations, including cost, scalability, and routing control across regional and global constructs. Additionally, it highlights benefits such as improved security posture and enhanced app performance through effective segment management and automation.FortiGate 2-ARM Mode integration with AWS GWLB
FortiGate 2-ARM Mode integration with AWS GWLBYitao Cen
?
The document discusses Fortigate deployment in one-arm and two-arm modes for integrating with AWS Gateway Load Balancer (GWLb). It highlights that in one-arm mode, a NAT gateway is necessary for outbound traffic and provides configuration examples, while the two-arm mode enables NAT without special configurations. Key focus is on routing traffic between EC2 and the internet using the GWLb and managing firewall policies and routes to ensure connectivity.Secure AWS with Fortinet Security Fabric.pptx
Secure AWS with Fortinet Security Fabric.pptxYitao Cen
?
The document discusses Fortinet's security solutions and partnerships on AWS, highlighting that Fortinet protects over 70% of Fortune 100 companies, has 30% of the global firewall market share, and over 630,000 customers worldwide. It provides an overview of Fortinet's cloud-native and hybrid cloud security offerings, as well as case studies demonstrating how these solutions help secure AWS environments and hybrid networks. The document also outlines Fortinet's consulting services and flexible consumption models available on AWS Marketplace to help customers design, deploy, and manage Fortinet security technologies in AWS.Fortinet Solution Mapping with AWS Well-Architecture
Fortinet Solution Mapping with AWS Well-ArchitectureYitao Cen
?
The document discusses the AWS Well-Architected Framework and how it describes best practices for designing workloads in the cloud across various pillars including security. It then provides answers to several questions relating to implementing security best practices for detecting and investigating security events, protecting network resources, protecting compute resources, protecting data in transit, anticipating and responding to security incidents, and incorporating security in the application development lifecycle. For each question, it recommends relevant Fortinet security solutions that align with AWS security best practices and provides reasons for choosing Fortinet over native AWS services.安全SD-WAN-Fortinet-AWS Summit2022.pptx
安全SD-WAN-Fortinet-AWS Summit2022.pptxYitao Cen
?
This document discusses challenges that enterprises face when expanding operations globally into the cloud. As workloads move to the cloud, management and connectivity of cloud resources has not kept up with business needs. This brings new security risks from local-cloud, cloud-cloud networking and workloads. The document proposes building a global secure SD-WAN on Cloud WAN to address these challenges, with solutions from Fortinet and partners like Zenlayer that provide flexible purchasing and a global last-mile network and compute infrastructure. Fortinet is recognized as a leader in network firewalls and SD-WAN by Gartner and ranked #1 for security-sensitive, small branch and remote worker use cases.自动化础奥厂中网络威胁检测与响应.辫辫迟虫
自动化础奥厂中网络威胁检测与响应.辫辫迟虫Yitao Cen
?
本文探讨了贵辞谤迟颈苍别迟与亚马逊云科技的合作，提供了一系列自动化的云网络威胁检测与响应解决方案。贵辞谤迟颈苍别迟的安全方案旨在提升云基础设施的安全性，确保合规并简化安全管理，适应不同场景与阶段的需求。文中还详细介绍了动态攻击面下的威胁检测和使用人工智能实现快速响应能力。2024 Trend Updates: What Really Works In SEO & Content Marketing
2024 Trend Updates: What Really Works In SEO & Content MarketingSearch Engine Journal
?
The document outlines key SEO and content marketing trends for 2024, emphasizing the impact of AI, the importance of E-E-A-T (Experience, Expertise, Authoritativeness, Trustworthiness), and a shift towards user-centric content strategies. It advises against focusing on outdated trends like voice search and stresses the need for creating value-driven, authoritative content. Additionally, it highlights the need to leverage AI as a supportive tool rather than relying solely on it for content creation.Storytelling For The Web: Integrate Storytelling in your Design Process
Storytelling For The Web: Integrate Storytelling in your Design ProcessChiara Aliotta
?
The document outlines a livestream presentation by Chiara Aliotta on integrating storytelling into web design to enhance user experiences. It covers the storytelling process for designers, emphasizing aspects such as understanding the audience, structuring narratives, and creating emotional connections. The presentation also includes case studies and practical examples to demonstrate effective storytelling in UX/UI design.Artificial Intelligence, Data and Competition – SCHREPEL – June 2024 OECD dis...
Artificial Intelligence, Data and Competition – SCHREPEL – June 2024 OECD dis...OECD Directorate for Financial and Enterprise Affairs
?
This presentation by Thibault Schrepel, Associate Professor of Law at Vrije Universiteit Amsterdam University, was made during the discussion “Artificial Intelligence, Data and Competition” held at the 143rd meeting of the OECD Competition Committee on 12 June 2024. More papers and presentations on the topic can be found at oe.cd/aicomp.
This presentation was uploaded with the author’s consent.
How to Leverage AI to Boost Employee Wellness - Lydia Di Francesco - SocialHR...
How to Leverage AI to Boost Employee Wellness - Lydia Di Francesco - SocialHR...SocialHRCamp
?
The document discusses leveraging AI to enhance employee wellness through data analytics, automating tasks, and personalized wellness apps, emphasizing the shared responsibility of employee well-being between leaders and organizations. It outlines best practices for using AI in wellness strategies, including ensuring data privacy and security, understanding employee needs, and promoting inclusivity. Lydia Di Francesco, a wellness specialist, shares insights to optimize workplace wellness strategy using AI-driven data analytics and encourages collaboration and transparency.2024 State of Marketing Report – by Hubspot
2024 State of Marketing Report – by HubspotMarius Sescu
?
The State of Marketing 2024 report highlights the transformative impact of AI and automation, emphasizing the importance of personalization and engagement to drive growth in a competitive landscape. Marketers are focusing on optimizing budgets, leveraging social media for brand awareness, and utilizing AI tools to enhance efficiency across tasks. Key trends for 2024 include the rise of experiential marketing, content creation that meets user needs, and strengthened connections through personalized customer experiences.Everything You Need To Know About ChatGPT
Everything You Need To Know About ChatGPTExpeed Software
?
ChatGPT is an AI chatbot developed by OpenAI, built on advanced language models to facilitate human-like conversational interactions. Launched in November 2022, it utilizes a transformer architecture to understand and generate text, with applications ranging from content creation to customer service. Despite its capabilities, there are concerns about potential misuse and biases in its responses, which OpenAI aims to mitigate through moderation and user feedback.Product Design Trends in 2024 | Teenage Engineerings
Product Design Trends in 2024 | Teenage EngineeringsPixeldarts
?
The realm of product design is a constantly changing environment where technology and style intersect. Every year introduces fresh challenges and exciting trends that mold the future of this captivating art form. In this piece, we delve into the significant trends set to influence the look and functionality of product design in the year 2024.How Race, Age and Gender Shape Attitudes Towards Mental Health
How Race, Age and Gender Shape Attitudes Towards Mental HealthThinkNow
?
The November 2023 mental health report indicates that 70% of respondents rate their mental health as 'good' or 'excellent,' with higher diagnoses reported among African Americans and non-Hispanic whites compared to Hispanics and Asians. Younger generations, particularly Gen Z and millennials, are more likely to experience mental health challenges, seek information online, and report that their mental health impacts their work and relationships. Half of the respondents feel comfortable discussing their mental health with professionals, although Gen Z shows the least comfort in this area.AI Trends in Creative Operations 2024 by Artwork Flow.pdf
AI Trends in Creative Operations 2024 by Artwork Flow.pdfmarketingartwork
?
Creative operations teams expect increased AI use in 2024. Currently, over half of tasks are not AI-enabled, but this is expected to decrease in the coming year. ChatGPT is the most popular AI tool currently. Business leaders are more actively exploring AI benefits than individual contributors. Most respondents do not believe AI will impact workforce size in 2024. However, some inhibitions still exist around AI accuracy and lack of understanding. Creatives primarily want to use AI to save time on mundane tasks and boost productivity.Skeleton Culture Code
Skeleton Culture CodeSkeleton Technologies
?
Organizational culture includes values, norms, systems, symbols, language, assumptions, beliefs, and habits that influence employee behaviors and how people interpret those behaviors. It is important because culture can help or hinder a company's success. Some key aspects of Netflix's culture that help it achieve results include hiring smartly so every position has stars, focusing on attitude over just aptitude, and having a strict policy against peacocks, whiners, and jerks.PEPSICO Presentation to CAGNY Conference Feb 2024
PEPSICO Presentation to CAGNY Conference Feb 2024Neil Kimberley
?
PepsiCo provided a safe harbor statement noting that any forward-looking statements are based on currently available information and are subject to risks and uncertainties. It also provided information on non-GAAP measures and directing readers to its website for disclosure and reconciliation. The document then discussed PepsiCo's business overview, including that it is a global beverage and convenient food company with iconic brands, $91 billion in net revenue in 2023, and nearly $14 billion in core operating profit. It operates through a divisional structure with a focus on local consumers.Content Methodology: A Best Practices Report (Webinar)
Content Methodology: A Best Practices Report (Webinar)contently
?
This document provides an overview of content methodology best practices. It defines content methodology as establishing objectives, KPIs, and a culture of continuous learning and iteration. An effective methodology focuses on connecting with audiences, creating optimal content, and optimizing processes. It also discusses why a methodology is needed due to the competitive landscape, proliferation of channels, and opportunities for improvement. Components of an effective methodology include defining objectives and KPIs, audience analysis, identifying opportunities, and evaluating resources. The document concludes with recommendations around creating a content plan, testing and optimizing content over 90 days.How to Prepare For a Successful Job Search for 2024
How to Prepare For a Successful Job Search for 2024Albert Qian
?
The document provides guidance on preparing a job search for 2024. It discusses the state of the job market, focusing on growth in AI and healthcare but also continued layoffs. It recommends figuring out what you want to do by researching interests and skills, then conducting informational interviews. The job search should involve building a personal brand on LinkedIn, actively applying to jobs, tailoring resumes and interviews, maintaining job hunting as a habit, and continuing self-improvement. Once hired, the document advises setting new goals and keeping skills and networking active in case of future opportunities.Social Media Marketing Trends 2024 // The Global Indie Insights
Social Media Marketing Trends 2024 // The Global Indie InsightsKurio // The Social Media Age(ncy)
?
The 2024 social media marketing trends report highlights significant shifts influenced by generative AI, including the emergence of personalized content, the rise of virtual influencers, and a stronger focus on user-generated content. Insights were gathered from 33 experts across 23 leading independent agencies, providing a perspective that emphasizes creativity and authenticity in marketing strategies. Key trends also include the blending of B2B and B2C approaches, reflecting changes in consumer behavior and the evolving landscape of social media engagement.Trends In Paid Search: Navigating The Digital Landscape In 2024
Trends In Paid Search: Navigating The Digital Landscape In 2024Search Engine Journal
?
The document discusses trends in paid search for 2024, highlighting changes in user behavior, the implications for financial services, and privacy challenges. It emphasizes the importance of adapting search strategies, utilizing AI-driven tools like performance max and smart bidding, and leveraging first-party data for better marketing efficacy. Key takeaways include holistic SEO and SEM approaches, monitoring shifting user intents, and the need for continuous performance evaluation.5 Public speaking tips from TED - Visualized summary
5 Public speaking tips from TED - Visualized summarySpeakerHub
?
The document outlines five public speaking tips from Chris Anderson, TED Talks curator, emphasizing the importance of eye contact, vulnerability, humor, humility, and storytelling. These skills are presented as essential for engaging audiences effectively and are increasingly valuable in today's economy. The article posits that mastering these techniques can enhance speakers' ability to communicate ideas powerfully.ChatGPT and the Future of Work - Clark Boyd
ChatGPT and the Future of Work - Clark Boyd Clark Boyd
?
The document provides an overview of generative AI, particularly focusing on ChatGPT and its implications for business and the job market. It discusses the rapid growth of generative AI, its applications in marketing, and the skills needed for the AI era while addressing potential job displacement and the need for adaptation. The agenda includes a Q&A session and emphasizes rethinking work in collaboration with AI technology.Getting into the tech field. what next
Getting into the tech field. what next Tessa Mero
?
The document provides career advice for getting into the tech field, including:
- Doing projects and internships in college to build a portfolio.
- Learning about different roles and technologies through industry research.
- Contributing to open source projects to build experience and network.
- Developing a personal brand through a website and social media presence.
- Networking through events, communities, and finding a mentor.
- Practicing interviews through mock interviews and whiteboarding coding questions.Google's Just Not That Into You: Understanding Core Updates & Search Intent
Google's Just Not That Into You: Understanding Core Updates & Search IntentLily Ray
?
1. Core updates from Google periodically change how its algorithms assess and rank websites and pages. This can impact rankings through shifts in user intent, site quality issues being caught up to, world events influencing queries, and overhauls to search like the E-A-T framework.
2. There are many possible user intents beyond just transactional, navigational and informational. Identifying intent shifts is important during core updates. Sites may need to optimize for new intents through different content types and sections.
3. Responding effectively to core updates requires analyzing "before and after" data to understand changes, identifying new intents or page types, and ensuring content matches appropriate intents across video, images, knowledge graphs and more.How to have difficult conversations
How to have difficult conversations Rajiv Jayarajah, MAppComm, ACC
?
The document provides essential tips on how to handle difficult conversations in a workplace setting, emphasizing the importance of preparation, environment, and timing. It highlights that many employees dread such conversations, often leading to avoidance and worsening situations. Ultimately, the guide aims to promote positive outcomes while maintaining professional relationships.Introduction to Data Science
Introduction to Data ScienceChristy Abraham Joy
?
The document discusses the rise and importance of data science and machine learning, highlighting the growing demand for data scientists and the challenges they face. It explains machine learning concepts such as supervised and unsupervised learning, along with various real-world applications and the necessary steps involved in a machine learning workflow. Additionally, the document emphasizes the iterative process of model improvement and feature engineering used to enhance machine learning outcomes.More Related Content
Featured (20)
Storytelling For The Web: Integrate Storytelling in your Design Process
Storytelling For The Web: Integrate Storytelling in your Design ProcessChiara Aliotta
?
The document outlines a livestream presentation by Chiara Aliotta on integrating storytelling into web design to enhance user experiences. It covers the storytelling process for designers, emphasizing aspects such as understanding the audience, structuring narratives, and creating emotional connections. The presentation also includes case studies and practical examples to demonstrate effective storytelling in UX/UI design.Artificial Intelligence, Data and Competition – SCHREPEL – June 2024 OECD dis...
Artificial Intelligence, Data and Competition – SCHREPEL – June 2024 OECD dis...OECD Directorate for Financial and Enterprise Affairs
?
This presentation by Thibault Schrepel, Associate Professor of Law at Vrije Universiteit Amsterdam University, was made during the discussion “Artificial Intelligence, Data and Competition” held at the 143rd meeting of the OECD Competition Committee on 12 June 2024. More papers and presentations on the topic can be found at oe.cd/aicomp.
This presentation was uploaded with the author’s consent.
How to Leverage AI to Boost Employee Wellness - Lydia Di Francesco - SocialHR...
How to Leverage AI to Boost Employee Wellness - Lydia Di Francesco - SocialHR...SocialHRCamp
?
The document discusses leveraging AI to enhance employee wellness through data analytics, automating tasks, and personalized wellness apps, emphasizing the shared responsibility of employee well-being between leaders and organizations. It outlines best practices for using AI in wellness strategies, including ensuring data privacy and security, understanding employee needs, and promoting inclusivity. Lydia Di Francesco, a wellness specialist, shares insights to optimize workplace wellness strategy using AI-driven data analytics and encourages collaboration and transparency.2024 State of Marketing Report – by Hubspot
2024 State of Marketing Report – by HubspotMarius Sescu
?
The State of Marketing 2024 report highlights the transformative impact of AI and automation, emphasizing the importance of personalization and engagement to drive growth in a competitive landscape. Marketers are focusing on optimizing budgets, leveraging social media for brand awareness, and utilizing AI tools to enhance efficiency across tasks. Key trends for 2024 include the rise of experiential marketing, content creation that meets user needs, and strengthened connections through personalized customer experiences.Everything You Need To Know About ChatGPT
Everything You Need To Know About ChatGPTExpeed Software
?
ChatGPT is an AI chatbot developed by OpenAI, built on advanced language models to facilitate human-like conversational interactions. Launched in November 2022, it utilizes a transformer architecture to understand and generate text, with applications ranging from content creation to customer service. Despite its capabilities, there are concerns about potential misuse and biases in its responses, which OpenAI aims to mitigate through moderation and user feedback.Product Design Trends in 2024 | Teenage Engineerings
Product Design Trends in 2024 | Teenage EngineeringsPixeldarts
?
The realm of product design is a constantly changing environment where technology and style intersect. Every year introduces fresh challenges and exciting trends that mold the future of this captivating art form. In this piece, we delve into the significant trends set to influence the look and functionality of product design in the year 2024.How Race, Age and Gender Shape Attitudes Towards Mental Health
How Race, Age and Gender Shape Attitudes Towards Mental HealthThinkNow
?
The November 2023 mental health report indicates that 70% of respondents rate their mental health as 'good' or 'excellent,' with higher diagnoses reported among African Americans and non-Hispanic whites compared to Hispanics and Asians. Younger generations, particularly Gen Z and millennials, are more likely to experience mental health challenges, seek information online, and report that their mental health impacts their work and relationships. Half of the respondents feel comfortable discussing their mental health with professionals, although Gen Z shows the least comfort in this area.AI Trends in Creative Operations 2024 by Artwork Flow.pdf
AI Trends in Creative Operations 2024 by Artwork Flow.pdfmarketingartwork
?
Creative operations teams expect increased AI use in 2024. Currently, over half of tasks are not AI-enabled, but this is expected to decrease in the coming year. ChatGPT is the most popular AI tool currently. Business leaders are more actively exploring AI benefits than individual contributors. Most respondents do not believe AI will impact workforce size in 2024. However, some inhibitions still exist around AI accuracy and lack of understanding. Creatives primarily want to use AI to save time on mundane tasks and boost productivity.Skeleton Culture Code
Skeleton Culture CodeSkeleton Technologies
?
Organizational culture includes values, norms, systems, symbols, language, assumptions, beliefs, and habits that influence employee behaviors and how people interpret those behaviors. It is important because culture can help or hinder a company's success. Some key aspects of Netflix's culture that help it achieve results include hiring smartly so every position has stars, focusing on attitude over just aptitude, and having a strict policy against peacocks, whiners, and jerks.PEPSICO Presentation to CAGNY Conference Feb 2024
PEPSICO Presentation to CAGNY Conference Feb 2024Neil Kimberley
?
PepsiCo provided a safe harbor statement noting that any forward-looking statements are based on currently available information and are subject to risks and uncertainties. It also provided information on non-GAAP measures and directing readers to its website for disclosure and reconciliation. The document then discussed PepsiCo's business overview, including that it is a global beverage and convenient food company with iconic brands, $91 billion in net revenue in 2023, and nearly $14 billion in core operating profit. It operates through a divisional structure with a focus on local consumers.Content Methodology: A Best Practices Report (Webinar)
Content Methodology: A Best Practices Report (Webinar)contently
?
This document provides an overview of content methodology best practices. It defines content methodology as establishing objectives, KPIs, and a culture of continuous learning and iteration. An effective methodology focuses on connecting with audiences, creating optimal content, and optimizing processes. It also discusses why a methodology is needed due to the competitive landscape, proliferation of channels, and opportunities for improvement. Components of an effective methodology include defining objectives and KPIs, audience analysis, identifying opportunities, and evaluating resources. The document concludes with recommendations around creating a content plan, testing and optimizing content over 90 days.How to Prepare For a Successful Job Search for 2024
How to Prepare For a Successful Job Search for 2024Albert Qian
?
The document provides guidance on preparing a job search for 2024. It discusses the state of the job market, focusing on growth in AI and healthcare but also continued layoffs. It recommends figuring out what you want to do by researching interests and skills, then conducting informational interviews. The job search should involve building a personal brand on LinkedIn, actively applying to jobs, tailoring resumes and interviews, maintaining job hunting as a habit, and continuing self-improvement. Once hired, the document advises setting new goals and keeping skills and networking active in case of future opportunities.Social Media Marketing Trends 2024 // The Global Indie Insights
Social Media Marketing Trends 2024 // The Global Indie InsightsKurio // The Social Media Age(ncy)
?
The 2024 social media marketing trends report highlights significant shifts influenced by generative AI, including the emergence of personalized content, the rise of virtual influencers, and a stronger focus on user-generated content. Insights were gathered from 33 experts across 23 leading independent agencies, providing a perspective that emphasizes creativity and authenticity in marketing strategies. Key trends also include the blending of B2B and B2C approaches, reflecting changes in consumer behavior and the evolving landscape of social media engagement.Trends In Paid Search: Navigating The Digital Landscape In 2024
Trends In Paid Search: Navigating The Digital Landscape In 2024Search Engine Journal
?
The document discusses trends in paid search for 2024, highlighting changes in user behavior, the implications for financial services, and privacy challenges. It emphasizes the importance of adapting search strategies, utilizing AI-driven tools like performance max and smart bidding, and leveraging first-party data for better marketing efficacy. Key takeaways include holistic SEO and SEM approaches, monitoring shifting user intents, and the need for continuous performance evaluation.5 Public speaking tips from TED - Visualized summary
5 Public speaking tips from TED - Visualized summarySpeakerHub
?
The document outlines five public speaking tips from Chris Anderson, TED Talks curator, emphasizing the importance of eye contact, vulnerability, humor, humility, and storytelling. These skills are presented as essential for engaging audiences effectively and are increasingly valuable in today's economy. The article posits that mastering these techniques can enhance speakers' ability to communicate ideas powerfully.ChatGPT and the Future of Work - Clark Boyd
ChatGPT and the Future of Work - Clark Boyd Clark Boyd
?
The document provides an overview of generative AI, particularly focusing on ChatGPT and its implications for business and the job market. It discusses the rapid growth of generative AI, its applications in marketing, and the skills needed for the AI era while addressing potential job displacement and the need for adaptation. The agenda includes a Q&A session and emphasizes rethinking work in collaboration with AI technology.Getting into the tech field. what next
Getting into the tech field. what next Tessa Mero
?
The document provides career advice for getting into the tech field, including:
- Doing projects and internships in college to build a portfolio.
- Learning about different roles and technologies through industry research.
- Contributing to open source projects to build experience and network.
- Developing a personal brand through a website and social media presence.
- Networking through events, communities, and finding a mentor.
- Practicing interviews through mock interviews and whiteboarding coding questions.Google's Just Not That Into You: Understanding Core Updates & Search Intent
Google's Just Not That Into You: Understanding Core Updates & Search IntentLily Ray
?
1. Core updates from Google periodically change how its algorithms assess and rank websites and pages. This can impact rankings through shifts in user intent, site quality issues being caught up to, world events influencing queries, and overhauls to search like the E-A-T framework.
2. There are many possible user intents beyond just transactional, navigational and informational. Identifying intent shifts is important during core updates. Sites may need to optimize for new intents through different content types and sections.
3. Responding effectively to core updates requires analyzing "before and after" data to understand changes, identifying new intents or page types, and ensuring content matches appropriate intents across video, images, knowledge graphs and more.How to have difficult conversations
How to have difficult conversations Rajiv Jayarajah, MAppComm, ACC
?
The document provides essential tips on how to handle difficult conversations in a workplace setting, emphasizing the importance of preparation, environment, and timing. It highlights that many employees dread such conversations, often leading to avoidance and worsening situations. Ultimately, the guide aims to promote positive outcomes while maintaining professional relationships.Introduction to Data Science
Introduction to Data ScienceChristy Abraham Joy
?
The document discusses the rise and importance of data science and machine learning, highlighting the growing demand for data scientists and the challenges they face. It explains machine learning concepts such as supervised and unsupervised learning, along with various real-world applications and the necessary steps involved in a machine learning workflow. Additionally, the document emphasizes the iterative process of model improvement and feature engineering used to enhance machine learning outcomes.Artificial Intelligence, Data and Competition – SCHREPEL – June 2024 OECD dis...
Artificial Intelligence, Data and Competition – SCHREPEL – June 2024 OECD dis...OECD Directorate for Financial and Enterprise Affairs
?
构建所需所得的汽车安全基础设施
- 3. 针对车联网的网络安全攻击事件快速增长 2020.1 ? 黑客使用廉 价电子设备 盗走印度 4118辆汽车 ? Tesla Model X 的ADAS和自动 驾驶系统被黑 客欺骗，导致 触发了刹车冲 向迎面而来的 交通中 ? 梅赛德斯奔驰 E级轿车发现 19个漏洞，黑 客利用漏洞可 直接远程控制 车辆，包括打 开车门及发动 机 2020.2 2020.4 ? 黑客通过对车 辆TCU进行反向 工程，通过 Telematics连接 渗透了车企数 据中心网络， 从而完全控制 了OEM公司的 网络 ? 通过公开提供 的网联汽车部 件的源代码， 黑客发现了戴 姆勒内部系统 的密码和API Token令牌 2020.5 2020.7 ? 本田在欧洲和 日本的网络受 到Snake勒索软 件的攻击后停 止了其许多工 厂的生产，造 成巨额损失 ? 信通院在10个 Tier 1和OEM开 发的40多款 ECU中发现了 300多项漏洞 2020.8 2022.9 ? 黑客操纵了 YandexTaxi 网 约车服务，莫 斯科上演交通 大堵塞 ? 黑客发现了 Hyundai网络 VPN漏洞，并 在暗网中出售 OEMVPN访问 权限 ..... ? 意大利超跑制 造商法拉利 6.99GB 内部文 件泄露 2022.10 2022.11 ? 车联网服务商 SIRIUSXMAPI 漏洞，未授权 远程控制 本 田、日产、英 菲尼迪、讴歌 汽车 ? 重放攻击: 德国 大量交通信号 灯容易受到操 纵 2022.12 ? 蔚来汽车数据 泄露被勒索
- 5. 国际社会对车联网网络安全战略布局 ? 联合国于2020年6月，在《1958 协定书》框架下，表决通过了两 项法规（汽车信息安全领域首个 具有约束力的国际统一技术规 范），正式将网络安全纳入汽车 技术法规范畴： ? 《网络安全与网络安全管理系统》 ? 《软件升级与软件升级管理系统》 ? 该法规已于2021年1月正式实施， 将对1958协定书框架下的48个缔 约国起到约束作用。
- 6. ? 2021年8月31日，汽车信息安全领域首个国 际标准ISO/SAE 21434（道路车辆信息安全 工程）标准正式发布。 ? 国际标准化组织（ISO）是标准化领域中的 一个国际性非政府组织，成立于1947年， 是全球最大最权威的国际标准化组织。中国 是ISO常任理事国，代表中国参加ISO的国 家机构是中国国家标准化管理委员会（由国 家市场监督管理总局管理）。 ? 美国汽车工程师学会（Society of Automotive Engineers，SAE）是美国及世 界汽车工业有重要影响的学术团体，每年都 推出大量的标准资料、技术报告。该学会每 月要向大约14000多个技术人员、商界人 士、政府官员传递世界上最新的科技动态。 ? ISO/SAE 21434是唯一一个由两家重量级组 织联合发布的国际性标准。 国际社会对车联网网络安全战略布局
- 7. ? 车联网是一个复杂的网络生态系统，其合规问题不仅涵盖了传 统汽车行业的合规点，更是涵盖了互联网行业及大数据行业的合规 点。所以，参考的标准应更广泛且多样。加强车联网的整体合规，对 于车联网公司而言，具有重要的意义和价值。 ? 智能汽车安全 ? 网络安全与功能安全视同，纳入汽车制造监管范畴； ? 通信安全 ? 车联网通信需要更可信任的网络通信环境； ? 平台安全 ? 鉴于其关键基础设施属性，车联网平台应具备更高级别的网络 安全技术要求和管理要求； ? 应用服务安全 ? 汽车资产属性下降，作为服务时安全责任界定需要重新梳理； ? 数据安全 ? 数据防泄漏、数据跨境管理、数据信息共享风险、用户个人信 息保护 安全合规标准 是助推车联网 安全的必要手段
- 8. 互联网车辆全生命周期的信息安全管理 车外 车内 车机信息安全 网络连接安全 数据中心 / 云安全 OTA 高精度地图 安全日志 驾驶日志 整车厂, Tier 1供应商 驾驶记录 驾驶辅助 车内娱乐 WiFi 第三方服务商 V2x 通讯 工厂 制造信息安全
- 9. 经销商维修车间车联网零信任安全架构 车企云 HA Mode 堡垒机 Microsoft AD、DNS等 SD-Branch FortiManager 统一管理平台 FortiAnalyzer 日志分析平台 FortiClientEMS 策略管控平台 运维人员 Internet CDN 海外 零信任+SD-WAN 安全网关 SD-Branch 安全交换机 Wireless AP 安全无线 汽车诊断 A类机 汽车诊断 C类机 Internet线路 车企经销商4S店 汽车诊断 A类机 汽车诊断 C类机 外部救援场景 Off-Line状态 On-Line状态 On-Line状态 三网通4G WIFI 有线网络 FortiGate HUB FortiGate HUB
- 10. 车辆生产制造 销售与服务网络 车辆信息安全 车联网安全 互联网车辆全生命周期的信息安全管理 ? 用零信任和Purdue模型构 建分层的工业制造安全 ? 工业互联网和物联网网络 与安全的可视化 ? 零信任体系保障灵活的工 业互联网管理 ? 采用安全的SD-WAN高效 和低成本的互联各4S店 ? 4S店服务终端零信任安全 和数据防泄漏 ? 符合国际和国内信息安全 强制性标准 ? 对车内各个域进行加固和 防御 ? 对现代应用系统进行高阶 威胁防护 ? 符合云数据中心的等保要 求 ? 防御攻击，避免用户数据 泄露 贯穿始终的信息安全保障
- 11. 为车企出海提供全面安全保护 混合环 境网络 安全 SAP/ 应用访 问安全 应用开 发安全 应用运 行时安 全 安全运 营与托 管服务 FortiGate ? 亚马逊云科技南北与东西向流 量检测 ? 全球SD-WAN组网 ? 工厂网络与产线安全 ? 分支网络安全 FortiGate + FortiClient ? ZTNA零信任访问 ? SSL VPN ? 应用入侵防御 SOC平台与托管运营服务 ? 自动化安全运营与响应 ? 攻击面管理与品牌保护 ? 24x7安全托管运维服务 FortiWeb ? Web威胁检测与防御 ? API威胁检测与防御 ? 僵尸/机器人攻击防御 云安全 与架构 咨询 云架构设计咨询服务 ? 亚马逊云科技与Fortinet架构设计 ? 安全评估与改进建议 ? 培训 FortiDevSec + FortiDAST ? CI/CD安全 ? 静、动态代码检测 ? Web/API安全测试
- 12. 与亚马逊云科技原生集成的安全架构 Fortinet Security Fabric 完整交付在亚马逊云科技平台上 Amazon GuardDuty Amazon Outposts Amazon Transit Gateway Amazon Gateway Load Balancer Amazon EC2 Amazon CloudFront 集成服务： FortiCNP Amazon Outpost On-premises
- 13. 某知名车企出海案例-南北向隔离 1. 从APP子网去往互联网的流量被路由至同一VPC 的GWLB endpoint； 2. 该endpoint关联了安全VPC内GWLB的endpoint 服务，一旦GWLB收到流量，便将之加密转发至 后端安全实例，即FortiGateVM04V（FGT）； 3. 当FGT完成流量的检测后，流量回到GWLB及 GWLB endpoint； 4. 当流量回到最初的VPC后，跟随出向 （Egress）子网路由表，被送往互联网网关 （IGW）； 5. IGW将流量送往互联网； 1. 从互联网来的入向流量到达IGW； 2. 跟随入向（Ingress）路由表，流量被路由至 GWLB endpoint； 3. 该endpoint关联了安全VPC内GWLB的endpoint 服务，一旦GWLB收到流量，便将之加密转发至 后端安全实例，即FortiGateVM04V（FGT）； 4. 当FGT完成流量的检测后，流量回到GWLB及 GWLB endpoint； 5. 从GWLB endpoint到达APP VPC的流量被本地 路由至APP子网的资源
- 14. 某知名车企出海案例-东西向隔离 1. IP为10.0.1.10的流量想要访问到达APP2 VPC内 的10.1.2.20，其子网路由表通过默认路由 （0.0.0.0/0）将之路由到TGW； 2. APP1 VPC关联了Amazon TGW中的“TGW RT APP”路由表，其设置通过安全VPC的关联组件 （attachment）来转发所有流量（0.0.0.0/0）； 3. 安全VPC内的TGW网卡（ENI）使用其子网路由 表转发所有流量至GWLB endpoint1； 4. GWLB endpoint转发流量至GWLB； 5. 流量被送往GWLB后的安全实例即 FortiGateVM08V（FGT）做响应安全检测； 6. 一旦流量完成检测，其被送回至GWLB； 7. GWLB转发流量至GWLB endpoint； 8. GWLB endpoint使用其子网路由表，通过正关联 着TGW组件（attachment）的TGW网卡 （ENI），转发所有非本地流量至TGW； 9. 当流量到达TGW，其使用关联在安全VPC的 “TGW RT Sec”路由表，通过APP2 VPC的关联组 件关系，找到目标地址； 10. 一旦其到达APP2路由表，会发现数据包目标地址 （10.1.2.20）为本地地址，于是转发其至目标实 例。
- 16. Fortinet 始终与亚马逊云科技紧密合作 1 2 3 按需付费 按年付费 永久许可 网络与访问安全 应用及API安全 SD-WAN组网 与全球加速 连续三年 “年度合作伙伴” Fortinet为用户提供全面、妥善的 网络及安全解决方案
- 17. THANKS!