ESCRYPT SECURITY EXPERTS SPEARHEAD DEVELOPMENT OF NEW AUTOSAR FIREWALL SPECIFICATION

Automotive Ethernet will be a communication standard in the software-defined vehicle (SDV) of the future, and this technology is already becoming a more common feature of the vehicle electrical system. This is because Ethernet-based electrical system architectures allow for larger volumes of data and higher bitrates. But since they also offer new attack vectors, Ethernet-specific security components are required to fend off cyberattacks.

The goal of AUTOSAR, the software standard used by leading automotive manufacturers and suppliers alike, is to achieve more control over the growing complexity of the software used in today’s vehicles with the help of a middleware specification. AUTOSAR offers a range of modules that can be used in conjunction with vehicle applications – in particular, IT security modules. Experts from ESCRYPT have served on the AUTOSAR partnership’s security steering committee for many years. This allowed them to first define the requirements for the new “Firewall” security module. The next step was to develop and standardize the module, and ESCRYPT was instrumental in advancing and managing this process. As a result, the new feature has now been released; it is already available for AUTOSAR Adaptive and will be added to the Classic platform next year. This new specification means that AUTOSAR fulfills a key requirement for mastering future cybersecurity challenges in highly connected, increasingly software-defined vehicles (SDVs).

AUTOSAR is thus now also defining the specifications for firewalls that security solution providers such as ESCRYPT need to implement in their AUTOSAR stacks for OEMs and suppliers. The big advantage is that, since AUTOSAR is now widely used for E/E architectures and is already applied in many ECUs, it is easy to integrate the firewall guidelines specified by AUTOSAR.

Firewall for automotive Ethernet
ESCRYPT drew on its many years of firewall experience to develop the new security module: the CycurGATE automotive Ethernet firewall is already designed with the future vehicle electrical system architecture in mind, and multiple customers have put it through its paces in practice. This firewall provides protection against denial-of-service attacks, and it controls the authorized communication within the vehicles own network. Furthermore, it supports its segmentation into virtual local area networks (VLANs). CycurGate is available as a switch-based and a software-based variant. The switch-based variant can be directly implemented in smart Ethernet switches and the software-based variant can run in any microcontroller, microprocessor running Adaptive, Classic AUTOSAR or any other operating system. Specific integration to popular operating systems like QNX and Linux are also available.

www.escrypt.com