Automotive Ethernet is on the rise. But an Ethernet-based E/E architecture calls for particularly powerful security functions. That’s why automotive firewalls will play a key role in monitoring and controlling electrical system communications in the future.
ESCRYPT’s CycurGATE automotive firewall offers protection against denial-of-service attacks and enforces permitted Ethernet communication throughout the domain structure.
CycurGATE is integrated directly into the Ethernet switch, where the entire packet flow is monitored and managed centrally – with no resulting interference with the host controller or ECUs. The firewall can be used on the switch either as a library or as a stand-alone solution.
Thanks to well-balanced hardware/software co-design, the firewall solution makes the most of the hardware acceleration on the switch. The switch hardware and software are algorithmically so interwoven that the firewall can process the vast majority of data packets at wire speed.
Intrusion detection and protection calls for continuously effective, comprehensive security mechanisms. The CycurIDS intrusion detection system monitors network traffic to detect and log anomalies and typical attack signatures. In addition, ESCRYPT offers a cyber-defense center backend: CycurGUARD. This evaluates notifications from IDS components, detects new attack trends, helps determine the causes of security incidents, and defines countermeasures for distribution throughout the vehicle fleet.
