Typical CANBUS Acrhitecture

  • CANBUS is a shared-bus architecture.

     A single misbehaving node can effectively block all network communication.
     This can be accomplished by performing a simple Denial-Of-Service attack.

     Any node can send any Message (called "CAN Frame").
     For example, there is nothing stopping the Radio from sending a command to the Brakes...

OttoSec CANBUS Firewall

  • OttoSec CANBUS Firewall divides the CANBUS network into segments.

     This prevents a device behind the firewall from performing an attack.
     Any malicious data would simple not pass through the firewall.

     Multiple Firewall devices can be install in a single vehicle.
     One Firewall can protect the vehicle against one or more connected-devices.