Strategies for Integrating Control Flows in Software-Defined In-Vehicle Networks and Their Impact on Network Security

摘要: Current In-Vehicle Networks (IVNs) connect Electronic Control Units (ECUs) via domain buses. A gateway forwards messages between these domains. Automotive Ethernet emerges as a flat, high-speed backbone technology for IVNs that carries the various control flows within frames. Recently, Software-Defined Networking (SDN) has been identified useful building block of vehicular domain, it allows differentiation packets based on all header fields and thus can isolate unrelated flows. In this work, we systematically explore different strategies integrating automotive in switched Ether-networks analyze their security impact software-defined IVN. We discuss how flow identifiers be embedded layers resulting range solutions from fully exposed embedding to deep encapsulation. evaluate realistic IVN communication matrix production grade vehicle, which map into modern topology. find visibility packet headers is essential network infrastructure enable isolation access control. With an embedding, SDN establish survey trust zones largely reduce attack surface connected cars. An strategy also minimizes expenses.