ESCRYPT Vehicle security operations center (VSOC)

Protect connected vehicle fleets

The ESCRYPT Vehicle security operations center (VSOC) is a managed security service to protect OEMs’ vehicle fleets, integrating and analyzing data from in-vehicle security sensors, telematics, and vehicle backend systems. The VSOC supports you with continuous data-driven threat detection, helping identify attacks at an early stage and enabling appropriate countermeasures.

Security analysts monitoring connected vehicle cybersecurity operations in a VSOC environment

Your benefits

Expertise

Operational excellence in security SaaS joined with expertise in vehicle cybersecurity.

Integrated solution

Continuous monitoring of attacks in the field combining in-vehicle data sources and the VSOC.

Availability

As-a-service solution including operation, monitoring, and response for worldwide 24/7 coverage.

Features

Open architecture approach

Two colleagues collaborating in a modern office, working together on a computer project. The woman is guiding the man, demonstrating something on the screen, showcasing teamwork and technology in a professional environment.

Open architecture approach

The ESCRYPT VSOC follows an open architecture approach and integrates all sensors in the vehicle and its IT environment that provide information relevant for cybersecurity monitoring. This includes network-based intrusion detection for the CAN bus, automotive Ethernet firewalls and IDS as well as host-based intrusion detection for Linux, QNX, and Android ECUs, and support for the complex distributed IDS architectures of modern E/E architectures.

Numbers zero and two with two people discussing

SOC services

A team of software developers works together in a modern office. They are looking at computer screens displaying lines of code. One person is standing, using a laptop, while the others are sitting at a desk.

SOC services

ETAS cooperates with leading IT security service providers on the commissioning, infrastructure, and services of a security operations center (SOC). It pools the skills and expertise for SOC-as-a-service with its own specialist automotive know-how and portfolio. Existing and mature SOC infrastructure is expanded with trained automotive security analysts and specialized forensics experts, turning it into a highly professional, market-ready, and holistic solution.

Numbers zero and three with a woman sitting with a laptop on a chair

Threat detection and response

Two software engineers collaborate on a project involving vehicle schematics and global data, likely discussing development or deployment strategies.

Threat detection and response

ESCRYPT CycurGUARD, our product for backend monitoring, collects and analyzes anomaly reports of vehicles in operation, combining automated and manual analysis. Automatic classification of events and automated processing of known attack patterns are combined with the manual alert validation of forensic automotive security experts to identify emerging threats. This enables event-based threat hunting, incident support, and proactive response with network threat containment.

A holistic solution for intrusion detection and prevention

This diagram illustrates ETAS's in-vehicle distributed Intrusion Detection System (IDS). It shows how IDS sensors in different vehicle components, such as classic/adaptive AR ECUs and the telematics control unit, feed data into ESCRYPT CycurIDS software modules. These modules perform pre-analysis of security incidents and communicate with the ESCRYPT Vehicle Security Operations Center (SOC).

Integrated security solutions are the only way to reliably protect connected vehicles against cyberattacks. New regulations and standards like UN R-155 and ISO/SAE 21434 require continuous monitoring of incidents and risks of vehicle fleets to effectively implement and update risk-appropriate security mechanisms. One essential component is the ESCRYPT Vehicle security operations center (VSOC) as part of a holistic intrusion detection and prevention solution.

ESCRYPT Intrusion detection and prevention solution

ETAS and Deutsche Telekom partner on cybersecurity monitoring for vehicle fleets

A group of individuals representing Deutsche Telekom and ETAS at an event. They stand before a table displaying signed documents.

ETAS and Deutsche Telekom Security GmbH cooperate on providing vehicle fleets with protection against cyberattacks. The two partners offer an integrated, holistic solution comprising onboard detection of cyberattacks and fleet-wide cybersecurity monitoring via a vehicle security operations center (VSOC). This enables vehicle manufacturers to continuously monitor and manage their fleet-related cybersecurity risks in accordance with UN Regulation No. 155 (UN R155).

Learn more

Explore our related use cases

Stay ahead of cyber threats with compliant automotive product security

Knowledge base

Practical guidance and expertise– our Knowledge Base is your central hub for in-depth insights into automotive software and engineering and provides you with practical information for your success.