Abstract: Security system for protecting a vehicle electronic system by selectively intervening in the communications path in order to prevent the arrival of malicious messages at ECUs, in particular at the safety critical ECUs. The security system includes a filter which prevents illegal messages sent by any system or device communicating over a vehicle communications bus from reaching their destination. The filter may, at its discretion according to preconfigured rules, send messages as is, block messages, change the content of the messages, request authentication or limit the rate such messages can be delivered, by buffering the messages and sending them only in preconfigured intervals.

Abstract: Security system for protecting a vehicle electronic system by selectively intervening in the communications path in order to prevent the arrival of malicious messages at ECUs, in particular at the safety critical ECUs. The security system includes a filter which prevents illegal messages sent by any system or device communicating over a vehicle communications bus from reaching their destination. The filter may, at its discretion according to preconfigured rules, send messages as is, block messages, change the content of the messages, request authentication or limit the rate such messages can be delivered, by buffering the messages and sending them only in preconfigured intervals.

Abstract: Security system for protecting a vehicle electronic system by selectively intervening in the communications path in order to prevent the arrival of malicious messages at ECUs, in particular at the safety critical ECUs. The security system includes a filter which prevents illegal messages sent by any system or device communicating over a vehicle communications bus from reaching their destination. The filter may, at its discretion according to preconfigured rules, send messages as is, block messages, change the content of the messages, request authentication or limit the rate such messages can be delivered, by buffering the messages and sending them only in preconfigured intervals.

Abstract: Method and system for lossless and stateless compression scheme is used with a fixed-length data such as frames. Frames having a payload of M bits length are mapped into a payload of N bits length, where N<M. The N bits payload of each received frame is extracted, and mapped using a memory, PLD, or a processor, to reconstruct the uncompressed M bits payload, and to form the original frame. The reconstruction may use a set of N coefficients that are each multiplied by the corresponding received payload bit, and summarized modulo-2 to obtain the original pre-compressed M payload bits. The method and system may be used with a vehicle bus, such as Controller Area Network (CAN). The compressed frames may use the same or different protocol than the uncompressed ones, and may further carry an additional code such as metadata, error detection or correction code, or authentication related code.

Abstract: Security system for protecting a vehicle electronic system by selectively intervening in the communications path in order to prevent the arrival of malicious messages at ECUs, in particular at the safety critical ECUs. The security system includes a filter which prevents illegal messages sent by any system or device communicating over a vehicle communications bus from reaching their destination. The filter may, at its discretion according to preconfigured rules, send messages as is, block messages, change the content of the messages, request authentication or limit the rate such messages can be delivered, by buffering the messages and sending them only in preconfigured intervals.

Abstract: Method and system for lossless and stateless compression scheme is used with a fixed-length data such as frames. Frames having a payload of M bits length are mapped into a payload of N bits length, where N<M. The N bits payload of each received frame is extracted, and mapped using a memory, PLD, or a processor, to reconstruct the uncompressed M bits payload, and to form the original frame. The reconstruction may use a set of N coefficients that are each multiplied by the corresponding received payload bit, and summarized modulo-2 to obtain the original pre-compressed M payload bits. The method and system may be used with a vehicle bus, such as Controller Area Network (CAN). The compressed frames may use the same or different protocol than the uncompressed ones, and may further carry an additional code such as metadata, error detection or correction code, or authentication related code.

Abstract: Method and system for lossless and stateless compression scheme is used with a fixed-length data such as frames. Frames having a payload of M bits length are mapped into a payload of N bits length, where N<M. The N bits payload of each received frame is extracted, and mapped using a memory, PLD, or a processor, to reconstruct the uncompressed M bits payload, and to form the original frame. The reconstruction may use a set of N coefficients that are each multiplied by the corresponding received payload bit, and summarized modulo-2 to obtain the original pre-compressed M payload bits. The method and system may be used with a vehicle bus, such as Controller Area Network (CAN). The compressed frames may use the same or different protocol than the uncompressed ones, and may further carry an additional code such as metadata, error detection or correction code, or authentication related code.

Abstract: Method and system for lossless and stateless compression scheme is used with a fixed-length data such as frames. Frames having a payload of M bits length are mapped into a payload of N bits length, where N<M. The N bits payload of each received frame is extracted, and mapped using a memory, PLD, or a processor, to reconstruct the uncompressed M bits payload, and to form the original frame. The reconstruction may use a set of N coefficients that are each multiplied by the corresponding received payload bit, and summarized modulo-2 to obtain the original pre-compressed M payload bits. The method and system may be used with a vehicle bus, such as Controller Area Network (CAN). The compressed frames may use the same or different protocol than the uncompressed ones, and may further carry an additional code such as metadata, error detection or correction code, or authentication related code.

Abstract: Security system for protecting a vehicle electronic system by selectively intervening in the communications path in order to prevent the arrival of malicious messages at ECUs, in particular at the safety critical ECUs. The security system includes a filter which prevents illegal messages sent by any system or device communicating over a vehicle communications bus from reaching their destination. The filter may, at its discretion according to preconfigured rules, send messages as is, block messages, change the content of the messages, request authentication or limit the rate such messages can be delivered, by buffering the messages and sending them only in preconfigured intervals.

Abstract: An analyzer for monitoring a configuration of a wired network medium that is used for communication between multiple devices. The configuration change includes an additional device tapping to the medium for eavesdropping, or the substituting one of the devices. The analyzer is connected to the medium for receiving, storing, and analyzing waveforms of the physical-layer signals propagated over the medium. The analysis includes comparing the received signals to reference signals, and notifying upon detecting a difference according to pre-set criteria. The analysis may be time or frequency-domain based, and may use a feed-forward Artificial Neural Network (ANN). The wired network may be an automotive or in-vehicle network, PAN, LAN, MAN, or WAN, may use balanced or unbalanced signaling, and may be configured as point-to-point or multi-point topology. The analyzer may be connected at an end of the medium, and may be integrated with one of the devices.

Abstract: A method of real-time data security of a communications bus, the method comprising the steps of: reading at least an early portion of a message being transmitted over a communications bus, determining whether the message is suspicious, according to at least one rule applied on the read early portion of the message, and upon determining that the message is suspicious, corrupting at least a part of the message.

Abstract: Security system for protecting a vehicle electronic system by selectively intervening in the communications path in order to prevent the arrival of malicious messages at ECUs, in particular at the safety critical ECUs. The security system includes a filter which prevents illegal messages sent by any system or device communicating over a vehicle communications bus from reaching their destination. The filter may, at its discretion according to preconfigured rules, send messages as is, block messages, change the content of the messages, request authentication or limit the rate such messages can be delivered, by buffering the messages and sending them only in preconfigured intervals.

Abstract: An analyzer for monitoring a configuration of a wired network medium that is used for communication between multiple devices. The configuration change includes an additional device tapping to the medium for eavesdropping, or the substituting one of the devices. The analyzer is connected to the medium for receiving, storing, and analyzing waveforms of the physical-layer signals propagated over the medium. The analysis includes comparing the received signals to reference signals, and notifying upon detecting a difference according to pre-set criteria. The analysis may be time or frequency-domain based, and may use a feed-forward Artificial Neural Network (ANN). The wired network may be an automotive or in-vehicle network, PAN, LAN, MAN, or WAN, may use balanced or unbalanced signaling, and may be configured as point-to-point or multi-point topology. The analyzer may be connected at an end of the medium, and may be integrated with one of the devices.

Abstract: A method of real-time data security of a communications bus, the method comprising the steps of: reading at least an early portion of a message being transmitted over a communications bus, determining whether the message is suspicious, according to at least one rule applied on the read early portion of the message, and upon determining that the message is suspicious, corrupting at least a part of the message.

Abstract: A protected network connected to an external network is protected by analyzing messages received from the external network or from devices connected to the network that may be substituted, compromised, or otherwise malware infected. An analyzer functionality for detecting the malware in the received messages is located separately from the physical connection to the external network. The received messages are re-directed via a tunnel to the analyzer functionality for malware detection, and the tunnel may be Layer-2, Layer-3, or Software Defined Network (SDN) based tunnel. In case of no malware detection, the messages are directed to the original destination. In case of malware detection, various actions are taken. The network may be a wired network, such as an automotive network, PAN, LAN, MAN, or WAN, and may be configured as point-to-point or multi-point topology. The external network may be a wireless network or a public network such as the Internet.

Abstract: Security system for protecting a vehicle electronic system by selectively intervening in the communications path in order to prevent the arrival of malicious messages at ECUs, in particular at the safety critical ECUs. The security system includes a filter which prevents illegal messages sent by any system or device communicating over a vehicle communications bus from reaching their destination. The filter may, at its discretion according to preconfigured rules, send messages as is, block messages, change the content of the messages, request authentication or limit the rate such messages can be delivered, by buffering the messages and sending them only in preconfigured intervals.

Abstract: Security system for protecting a vehicle electronic system by selectively intervening in the communications path in order to prevent the arrival of malicious messages at ECUs, in particular at the safety critical ECUs. The security system includes a filter which prevents illegal messages sent by any system or device communicating over a vehicle communications bus from reaching their destination. The filter may, at its discretion according to preconfigured rules, send messages as is, block messages, change the content of the messages, request authentication or limit the rate such messages can be delivered, by buffering the messages and sending them only in preconfigured intervals.

Abstract: An analyzer for monitoring a configuration of a wired network medium that is used for communication between multiple devices. The configuration change includes an additional device tapping to the medium for eavesdropping, or the substituting one of the devices. The analyzer is connected to the medium for receiving, storing, and analyzing waveforms of the physical-layer signals propagated over the medium. The analysis includes comparing the received signals to reference signals, and notifying upon detecting a difference according to pre-set criteria. The analysis may be time or frequency-domain based, and may use a feed-forward Artificial Neural Network (ANN). The wired network may be an automotive or in-vehicle network, PAN, LAN, MAN, or WAN, may use balanced or unbalanced signaling, and may be configured as point-to-point or multi-point topology. The analyzer may be connected at an end of the medium, and may be integrated with one of the devices.

Abstract: Security system for protecting a vehicle electronic system by selectively intervening in the communications path in order to prevent the arrival of malicious messages at ECUs, in particular at the safety critical ECUs. The security system includes a filter which prevents illegal messages sent by any system or device communicating over a vehicle communications bus from reaching their destination. The filter may, at its discretion according to preconfigured rules, send messages as is, block messages, change the content of the messages, request authentication or limit the rate such messages can be delivered, by buffering the messages and sending them only in preconfigured intervals.

Abstract: A method of real-time data security of a communications bus, the method comprising the steps of: reading at least an early portion of a message being transmitted over a communications bus, determining whether the message is suspicious, according to at least one rule applied on the read early portion of the message, and upon determining that the message is suspicious, corrupting at least a part of the message.