Intelligent and connected vehicles face many information security challenges, it is necessary to carry out systematic security testing, in order to verify the ability of intelligent and connected vehicles to defend against various attacks, as far as possible to find its potential vulnerability threats, and constantly improve the level of information security of intelligent and connected vehicles. It is an effective way to carry out information security evaluation of intelligent vehicle based on attack technique and tactics system. This paper discusses the selection of attack techniques and tactics, test case design, test process and security evaluation methods suitable for intelligent and connected vehicles. Based on the test environment provided by vehicle network emulation platform, orderly and efficient testing and security evaluation are carried out with the T-BOX device as the example target. All possible vulnerabilities related are found and evaluated with reasonable risk levels, which helps determine the final security level of the whole device.