ESCRYPT GmbH

Modern vehicles are increasingly equipped with internet connectivity, which in turn is making vehicle IT systems more vulnerable to attacks. These systems must be protected against unauthorized access by intruders who may attempt to manipulate the ECU software (e.g. tuning) or manipulate the vehicle’s anti-theft mechanism (immobilizer). There is also a risk that criminals could misuse the internet connection of the vehicle to access the in-vehicle communication system and carry out targeted manipulation of the vehicle’s behavior.

ESCRYPT’s new CycurHSM product is an innovative and flexible HSM security firmware that ensures secure boot of the ECU, secure in-vehicle communication, ECU component protection and secure flashing.

As vehicle connectivity increases, new gateways are opening up for hacker attacks. Preventing such attacks, or at least detecting them in time to initiate countermeasures, is imperative for the effective protection of today’s vehicles.

With its CycurIDS intrusion detection system, ESCRYPT is offering a solution that is tailored-made for vehicle electronics and connectivity.

CycurIDS is an embedded security component that detects anomalies and typical intrusion signatures, such as cyclical messages and the abuse of diagnostic requirements.

The calibration of CycurIDS is based on manufacturer-specific configuration data (DBC/ARXML) for vehicle CAN networks. This configuration is optimized and validated by running a simulation based on the recorded network traffic and through automated analysis of detection and error rates. The result is a high detection rate coupled with a low number of false alarms.