Kaspersky has announced the first integration of its automotive KasperskyOS into an electronic control unit (ECU) of an advanced driver-assistance system (ADAS), developed by AVL Software and Functions (AVL SFR).
This controller is an open and customizable development platform for both prototype and series development. According to Kaspersky, the controller is safe and ‘secure by design’ as it runs on KasperskyOS (operating system). In this application, the operating system is designed to protect communications between ADAS (advanced driver assistance systems) components and to safeguard all the autonomous vehicle functions. As part of the security features, the operating system enables that undeclared functionality – either unnoticed at launch or inserted through system updates – cannot be exploited and will not affect the performance of autonomous vehicles, explained Kaspersky.
Automation in vehicles is set to improve people’s lives, by enhancing the mobility experience, improving road capacity, and freeing up time that would have been previously spent on driving. However, one of the main concerns that sceptics have with the technology is its safety, said the company. There have already been several cases that prove just how important cybersecurity is to ensure physical safety, as vulnerabilities have previously allowed malefactors to take control of a car. That’s why Kaspersky is continuing its research and development of solutions and services for securing vehicles with ADAS functionalities by collaborating with AVL SFR – a member of an automotive engineering company for development, simulation, and testing.
Based on a ECU platform by AVL SFR, the ADAS ECU features two high-performance system-on-a-chip processors, a safety controller, and provides vast connectivity capabilities - including links to cameras, lidars, and other related components. The hardware platform also supports CAN and Ethernet standards, allowing secure communication between devices within a vehicle. The ECU features twelve Classical CAN respectively CAN FD interfaces.
In most known cases, unauthorized persons exploited code mistakes, unintentionally left by developers. This can happen because modern vehicles are complex systems, making it hard to manage the security of all the components. Moreover, these systems are regularly updated, and it is important to ensure that changes in one component will not affect how a vehicle operates. The introduced operating system provides separation between components, so any unwanted interference is not possible by default. The interaction between all electronic components is controlled by the Kaspersky Security System, the security policy engine within KasperskyOS. It monitors the launch of processes, as well as communications between each component and with the operating system.
As a associate partner of Autosar, a consortium aimed to develop mutual standards for automotive software architecture, the company has also developed a software development kit (SDK) dubbed as the Kaspersky Automotive Adaptive Platform. With this SDK, AVL SFR can develop applications for automated and even driverless vehicles – such as delivering auto-piloting features, controlling safety systems, and monitoring their health. This set of libraries also allows for other software to be adopted, which follow Autosar adaptive requirements, and work on KasperskyOS without additional changes. Kaspersky Automotive Adaptive Platform is ready to be delivered and AVL SFR is showcasing its auto-piloting application to several automotive customers.
“When it comes to partially controlled autonomous vehicles, it becomes especially important to guarantee security and safety of the driver, along with passengers and pedestrians. Even if there are vulnerabilities in a vehicle’s software, any attempts to leverage them to cause harm will not succeed, as they will be prevented by our operating system, KasperskyOS. We are excited to partner with AVL SFR on developing the autonomous driving controller and proud that together we have created a system that combines security and safety,” commented Grigory Sizov, Head of KasperskyOS Business Unit, Kaspersky.
Dirk Geyer, Head of Product Segment Safety and Security at AVL SFR, said: “The sophisticated and complex functionality running on connected high performance controllers, like the ADAS ECU, must be protected by a holistic security base, which is located at the level of the operating system. The automotive KasperskyOS has been explicitly designed in that way, as to provide a layer of trust for safety, availability, privacy, and reliability for these control systems.”
News and reports