2 ms·
If every ECU has OTA update capability then how could the secure bus possibly be air gapped? You could attack it remotely via OTA updates to an ECU on that bus
by jdsully 5y ago
If every ECU has OTA update capability then how could the secure bus possibly be air gapped? You could attack it remotely via OTA updates to an ECU on that bus.
- 05 5y agoIt can if the only ECU on both buses has read only access (e.g. uses a receive only transceiver or if the TX pin of that transceiver is grounded). Also signed updates aren’t rocket science and work well enough if you keep the verification code minimal, well reviewed and formally verified if possible.
- jdsully 5y agoThe RF path is not via the secondary bus though. The RF path is via the remote update path directly to the secure bus.