Distributed ECU Cybersecurity Layers for Connected Vehicle Threats
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Connected vehicles face challenges in adapting traditional IT cybersecurity measures due to the complexity of electronic control units (ECUs) sourced from multiple third-party suppliers, leading to susceptibility to cyberattacks and difficulties in detecting both known and unknown threats effectively.
Innovation Solution
A distributed, multilayered cybersecurity framework is implemented, combining onboard signature-based and rule-based modules with offboard anomaly-based and signature-based modules to detect and validate cyberattacks across various logical layers, minimizing false positives.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional IT cybersecurity measures are applied to connected vehicles, then cybersecurity protection is provided, but the measures are not readily adaptable due to ECU complexity and limited computing power
Solution Approach 1:
The cybersecurity framework is divided into multiple logical layers (Layer 0 through Layer 5) with different detection mechanisms at each layer. Signature-based detection, anomaly-based detection, and rule-based detection are segmented and deployed at appropriate layers based on their computational requirements and detection capabilities, making the overall system adaptable to the constrained ECU environment.
Solution Approach 2:
The patent introduces a vertical dimension to cybersecurity detection by stacking multiple logical layers with increasing abstraction levels. Instead of applying traditional flat IT security measures, the system creates a hierarchical structure where lower layers handle basic filtering and higher layers perform sophisticated analysis, adapting security measures to the multi-dimensional nature of connected vehicle systems.
2Adaptability or versatility
If ECUs are sourced from multiple third-party suppliers to meet vehicle complexity requirements, then functional capabilities are improved, but unique attack surfaces and security vulnerabilities increase
Solution Approach 1:
The cybersecurity framework segments the vehicle system into multiple ECUs, each protected by its own onboard cybersecurity modules. This segmentation allows security measures to be tailored to each ECU's specific attack surfaces and functional requirements, rather than applying a monolithic security approach that would be inadequate for the diverse third-party supplied ECUs.
Solution Approach 2:
The patent introduces cybersecurity modules as intermediary components between the ECUs and external threats. These modules act as mediators that filter, monitor, and protect ECU communications, reducing the exposed attack surfaces of third-party supplied ECUs while maintaining their functional capabilities.
3Speed
If onboard signature-based and rule-based modules are used for cyberattack detection, then detection speed is improved, but false positives increase
Solution Approach 1:
The framework implements feedback loops where detection results from onboard modules are validated by offboard modules. The offboard anomaly-based modules receive data from onboard signature-based and rule-based modules, analyze patterns across multiple vehicles, and provide feedback to reduce false positives while maintaining fast detection capabilities.
Solution Approach 2:
The offboard cybersecurity platform acts as an intermediary that validates detections made by onboard modules. It provides a second layer of verification that reduces false positives without significantly impacting the overall detection speed, as the validation can be performed asynchronously for suspected threats.
4Measurement precision
If distributed multilayered cybersecurity framework is implemented, then detection accuracy is improved, but system complexity increases
Solution Approach 1:
The complex cybersecurity framework is segmented into standardized logical layers with defined interfaces and functions. Each layer has a specific detection responsibility, which reduces the perceived complexity by providing a modular, organized structure that can be implemented and maintained systematically despite the overall system's sophistication.
Data Source
AI summary
A connected vehicle includes electronic control units (ECUs) that host onboard cybersecurity modules. The cybersecurity modules are part of a cybersecurity framework that protects the connected vehicle at various logical layers using signature-based modules and rule-based modules that are onboard hosted by the ECUs, and signature-based and anomaly-based modules that are offboard hosted by a computer system that is external to the connected vehicle. Attack techniques of a cyberattack are detected and correlated to validate detection of the cyberattack onboard the connected vehicle and offboard by the external computer system.