INTRUSION DETECTION AND PREVENTION FOR HEAVY-DUTY VEHICLES (SAE J1939)Network
Heavy-duty vehicles use the SAE standard J1939 protocol for control area networks (CAN). This protocol can be exploited to commit cyber-attacks on the vehicle’s, frequently interoperable, electronic control units (ECUs).
Arilou’s Sentinel-TRK overcomes these issues by incorporating intrusion detection (IDS) with an optional intrusion prevention (IPS) mechanism for heavy-duty vehicles using the SAE J1939 protocol.
Inspect
Inspect traffic for deviation from allowed rules and baseline
Detect
Detect violations of established baseline or expected behavior
Report
Report and log detected cyber-events for further analysis
Discard
Discard events that are hazardous to safety or functionality
INTEGRATION ARCHITECTUREARCHITECTURE
Sentinel-TRK is an SDK integrated into an ECU. It may be an existing ECU such as a gateway, a TCU, or a dedicated ECU attached to the J1939 CAN-Bus in-vehicle network.
Incoming J1939 CAN messages are routed to SENTIENL-TRK.
Messages are inspected and any anomaly is reported.
When configured as an IPS, messages hazardous to safety or functionality are discarded.
Arilou offers flexible implementation modes tailored to meet OEM needs and architectural environments.
Learn
Learn and define rules and communication profile
Monitor
Monitor and examine J1939 CAN-bus traffic
Detect
Detect deviations from established profile and rules
BENEFITS AND FEATURESFEATURES
Optional Prevention
Optionally discard message frames identified as attacks
Flexible Implementation
Gateway or endpoint integration options
High Performance
Optimized for high performance frame processing
Context Aware
Manages rare event cases including emergency braking and reckless driving
Custom Event Reporting
Report via telematics, cellular SMS, Cellular IP or as specified
