The automotive industry experiences a major change as vehicles are gradually becoming a part of the Internet. Security concepts based on the closed-world assumption cannot be deployed anymore due to a constantly changing adversary model. Automotive Ethernet as future in-vehicle network and a new E/E Architecture have different security requirements than Ethernet known from traditional IT and legacy systems. In order to achieve a high level of security, a new multi-layer approach in the vehicle which responds to special automotive requirements has to be introduced. One essential layer of this holistic security concept is to restrict non-authorized access by the deployment of embedded firewalls.This paper addresses the introduction of automotive firewalls into the next-generation domain architecture with a focus on partitioning of its features in hardware and software. Based on the deployment of the firewall in the in-vehicle network, the corresponding adversary model and automotive requirements such as latency, jitter, CPU load and memory consumption are going to be discussed. Drivers behind these metrics are primarily safety concerns and cost and thus are relevant for both OEMs and hardware manufacturers. As a result, a reasonable implementation of an automotive firewall system has to be a trade-off between hardware and software in order to meet the above-named automotive requirements. We implemented the firewall on an Infineon AURIX TriCore and Altera Cyclone V FPGA to analyze these metrics. The paper shows the options and decision points to find an optimal partitioning between hardware and software for an automotive embedded firewall system.


    Zugriff

    Zugriff prüfen

    Verfügbarkeit in meiner Bibliothek prüfen

    Bestellung bei Subito €


    Exportieren, teilen und zitieren



    Titel :

    Hardware/Software Co-Design of an Automotive Embedded Firewall


    Weitere Titelangaben:

    Sae Technical Papers


    Beteiligte:
    Zweck, Harald (Autor:in) / Schmidt, Karsten (Autor:in) / Pesé, Mert D. (Autor:in)

    Kongress:

    WCX™ 17: SAE World Congress Experience ; 2017



    Erscheinungsdatum :

    2017-03-28




    Medientyp :

    Aufsatz (Konferenz)


    Format :

    Print


    Sprache :

    Englisch




    Hardware/Software Co-Design of an Automotive Embedded Firewall

    Pesé, Mert D. / Schmidt, Karsten / Zweck, Harald | British Library Conference Proceedings | 2017


    Hardware and Software Constraints for Automotive Firewall Systems?

    Zweck, Harald / Schmidt, Karsten / Dannebaum, Udo | SAE Technical Papers | 2016


    Security Mechanisms Design of Automotive Gateway Firewall

    Luo, Feng / Hou, Shuo | SAE Technical Papers | 2019


    Security Mechanisms Design of Automotive Gateway Firewall

    Luo, Feng / Hou, Shuo | British Library Conference Proceedings | 2019