Automotive security has become one of important topics in recent years under new automotive Electronic and Electrical Architecture (EEA). With the development of Intelligent Connected Vehicle (ICV), it has become possible to hack an automotive through in-vehicle networks. The introduction of Information Communications Technology (ICT) brings more risk threats to automotive. Researchers have shown that an attacker can easily tamper with many automotive functions via On-Board Diagnostic II (OBD-II) or In-Vehicle Infotainment (IVI). In order to protect automotive against malicious attacks, automotive security risks were analyzed and then security mechanisms based on network firewall were designed in this paper. Automotive network firewall is a security system that monitors and controls incoming and outgoing network traffics of automotive based on predetermined security rules. The main functions of network firewall include packet filter, anti-DoS and access control. Because of deferent security requirements of in-vehicle networks, CAN/FD and Ethernet were divided into two domains respectively. Packet filter mechanisms were designed to monitor CAN/FD, in which security level and time delay were considered. Ethernet firewall mechanisms were designed based on Stateful Packet Filter (SPF) technology. Beside packet filter mechanisms, anti-DoS and access control mechanisms were also designed. Security Real Time Operating System (SRTOS) was introduced to ensure lower layer security. Considering the ECU constraint, Hardware Security Module (HSM) is chosen to implement cryptography function. At last, proposed automotive network firewall were implemented base on a multicore MCU with HSM. The system is evaluated in several aspects such as packet throughput, time delay, anti-attack and memory usage. The evaluation results show that the automotive network firewall is effective and efficient.


    Zugriff

    Zugriff prüfen

    Verfügbarkeit in meiner Bibliothek prüfen

    Bestellung bei Subito €


    Exportieren, teilen und zitieren



    Titel :

    Security Mechanisms Design of Automotive Gateway Firewall


    Weitere Titelangaben:

    Sae Technical Papers


    Beteiligte:
    Luo, Feng (Autor:in) / Hou, Shuo (Autor:in)

    Kongress:

    WCX SAE World Congress Experience ; 2019



    Erscheinungsdatum :

    2019-04-02




    Medientyp :

    Aufsatz (Konferenz)


    Format :

    Print


    Sprache :

    Englisch




    Security Mechanisms Design of Automotive Gateway Firewall

    Luo, Feng / Hou, Shuo | British Library Conference Proceedings | 2019


    Routing and Security Mechanisms Design for Automotive TSN/CAN FD Security Gateway

    Luo, Feng / Yang, Zhenyu / Wang, Zitong et al. | British Library Conference Proceedings | 2022


    Routing and Security Mechanisms Design for Automotive TSN/CAN FD Security Gateway

    Luo, Feng / Yang, Zhenyu / Wang, Zitong et al. | British Library Conference Proceedings | 2022


    Routing and Security Mechanisms Design for Automotive TSN/CAN FD Security Gateway

    Luo, Feng / Wang, Jiajia / Yang, Zhenyu et al. | SAE Technical Papers | 2022


    Security Mechanisms Design for In-Vehicle Network Gateway

    Luo, Feng / Hu, Qiang | British Library Conference Proceedings | 2018