ESCRYPT CycurGATE

High-performance automotive Ethernet & IP firewall and router

ESCRYPT CycurGATE automotive firewall offers protection against denial-of-service attacks and enforces permitted Ethernet communication throughout the domain structure. The solution is integrated directly into the Ethernet switch to centrally monitor the entire packet flow. This prevents interferences with the host controller or ECUs, allowing high-speed data processing.

Connected vehicle traffic representing secure Ethernet communication protected by ESCRYPT CycurGATE

Your benefits

Multiple use cases

Works with central or distributed firewall.

Highly configurable

Customizable communications policy (whitelisting, blacklisting).

Cost-effective

Runs entirely on switch.

Firewall solution for current and future E/E architectures

Image of a transparent vehicle highlighting the elements that can be made secure by ESCRYPT CycurGATE. — The automotive Ethernet and IP firewall ESCRYPT CycurGATE is a market-proven solution and indispensable to meet the increased security requirements of current and future gateways.

Features

Perfectly balanced hardware-software co-design

The firewall is integrated directly into the Ethernet switch, where the entire packet flow is monitored and managed centrally – without interference with the host controller or individual ECUs. It can be used on the switch either as a library or as a stand-alone solution.
Thanks to balanced hardware-software co-design, the firewall solution makes the most of the hardware acceleration on the switch. The switch hardware and software are algorithmically interwoven in a way that enables the firewall to process the vast majority of data packets at wire speed.

ETAS’ c-library-based firewall solution is tailored to run on microcontrollers and microprocessors.

Effective protection and control of data flow

Firewall to protect against a wide landscape of cyberattacks
- Denial of service
- Blocking of illegitimate communication to individual ECUs or the entire network
- Creation of secure external interfaces

Data routing: effective control of data flow between network segments and domains

Comprehensive and highly efficient application

Highly configurable and updatable – OTA-update (over-the-air-update) ready: future-proof solution that adapts to changing threat landscape
Supports logging and statistics of suspicious data
Provides all important filter mechanisms
- Stateless packet inspection
- Dynamic stateful inspection
- Deep packet inspection
- Black- and whitelisting of messages
Routing and firewall functionality – also compatible with ETAS’ Ethernet IDS features

ETAS and CycurGATE colleagues collaborate on a project using a computer workstation.

Security strategy for the entire vehicle life cycle

With the ESCRYPT Intrusion detection and prevention solution (IDPS) we at ETAS offer you a holistic approach to vehicle security: while ESCRYPT CycurGATE provides a powerful firewall, ESCRYPT CycurIDS takes care of intrusion detection, monitoring network traffic to detect and log attack signatures. In addition, ESCRYPT CycurGUARD evaluates notifications from IDS components, identifies new attack trends, helps determine the causes of security incidents, and defines countermeasures for distribution throughout the vehicle fleet.

ESCRYPT Intrusion detection and prevention solution

Explore our related use cases

Knowledge base

Practical guidance and expertise– our Knowledge Base is your central hub for in-depth insights into automotive software and engineering and provides you with practical information for your success.