ESCRYPT CycurIDS

Embedded intrusion detection for CAN and Ethernet networks

ESCRYPT CycurIDS is an in-vehicle intrusion detection system (IDS) that identifies, reports and logs attacks and anomalies, either locally or to the Vehicle Security Operations Center. The solution can be tailored to the vehicle with distributed and host-based IDS sensors (ESCRYPT CycurIDS-CAN, ESCRYPT CycurIDS-ETH), an IDS manager (ESCRYPT CycurIDS-M), and an IDS reporter (ESCRYPT CycurIDS-R).

ESCRYPT CycurIDS configuration overview for intrusion detection in automotive networks

Your benefits

Holistic offering

Covers IDS sensors, security event management, and reporting for in-vehicle intrusion detection.

Compliant components

In line with AUTOSAR and current automotive quality requirements.

White box approach

Security concept enables implementation and control of customized cybersecurity policies.

Security guard for electrical system communications

The infographic illustrates the different components of the intrusion detection system within the vehicle and demonstrates how they interact. — With ESCRYPT CycurIDS we offer a modular system of in-vehicle IDS components. The network IDS products ESCRYPT CycurIDS-CAN and ESCRYPT CycurIDS-ETH are fully interoperable with the IDS manager concept and can be incorporated as a “smart sensor” to detect intrusions on CAN and Ethernet.

Features

ESCRYPT CycurIDS-CAN product features

Monitoring forwarded CAN traffic and detecting potential attacks (anomalies)
Providing a configuration GUI for automatic rule generation and simulation
Reporting and logging anomalies, either locally or to vehicle SOC
Utilizing heuristic and signature-based detection on the ECU
ESCRYPT CycurIDS-CAN is fully interoperable with the IDS manager concept and can be incorporated as a “smart sensor” to detect intrusions on CAN

Numbers zero and two with two people discussing

ESCRYPT CycurIDS-M product features

Security event management for automotive ECUs
Comes in two product variants:
- for deeply embedded ECUs, i.e., μCs with classic AUTOSAR or RTOS
- for larger platforms i.e., μPs running adaptive AUTOSAR and/or some POSIX OS
AUTOSAR-compliant solution designed for flexible extension to cover any customer aggregation, persistence, or reporting strategy
Allows selection of relevant security events as early as possible to reduce storage and bandwidth costs
Easy vehicle-wide configuration that can be adapted according to generated security events

Numbers zero and three with a woman sitting with a laptop on a chair

ESCRYPT CycurIDS-ETH product features

Monitoring Ethernet traffic and detecting potential attacks (anomalies)
Providing a configuration GUI for automatic rule generation and simulation
Reporting and logging anomalies, either locally or to a vehicle SOC
Utilizing heuristic and signature-based detection on the ECU
Ready-to-use software solution for current and future Ethernet-based E/E architectures
Can run on an Ethernet switch as well as on µC/µP platforms

Numbers zero and four with two people discussing

ESCRYPT CycurIDS-R product features

Security event reporting for vehicles
Customized solution connecting the vehicle to the Vehicle Security Operations Center (VSOC)
Encapsulated provision of the IDS communication functionality
Allows isolated deployments to fulfill security requirements
Seamless integration with ESCRYPT CycurIDS components

Immune system for connected vehicles

The video thumbnail features a 3D model of a car with highlighted internal components, representing an in-vehicle intrusion detection system. The background is bright pink, with the text “distributed intrusion detection system” on the left, indicating a holistic security solution.

YouTube

Loading the video requires your consent. If you agree by clicking on the Play icon, the video will load and data will be transmitted to Google as well as information will be accessed and stored by Google on your device. Google may be able to link these data or information with existing data.

You can use ESCRYPT CycurIDS as an integral part of the ESCRYPT Intrusion detection and prevention solution IDPS. This holistic solution ensures continuous security monitoring of your vehicle fleet including dedicated incident response to keep the security level stable over the entire lifecycle.

Cooperation of ETAS and NXP semiconductors

Business professionals shaking hands after a successful meeting, potentially discussing ETAS or CycurIDS-CAN solutions.

ETAS offers you ESCRYPT CycurIDS-CAN, tailored to NXP's secure CAN transceiver, to enable hardware support for IDPS systems.

You will benefit from precise rogue sender identification and prevention of network impact.

Learn more

Knowledge base

Practical guidance and expertise– our Knowledge Base is your central hub for in-depth insights into automotive software and engineering and provides you with practical information for your success.