This is why cars typically have two CAN busses. One for the safety critical low level stuff, and one for the bells and whistles.
The bells and whistles should be replace-able with TCP/IP very easily.
The low-level stuff, not so much, obviously.
Posted Sep 27, 2012 16:39 UTC (Thu) by alison (✭ supporter ✭, #63752)
[Link]
Check out autosec.org and read the (refereed academic) papers there about how the alleged firewalling between CAN subnets is largely unimplemented. In my own vehicle using the scantool.net STN1110 OBDLink MX, I can listen to ECUs on several subnets. CAN (actually controller area network) has very little security, and GENIVI has a Networking Expert Group and a Security Team that are laboring to create new standards to address the situation.
As someone who has participated in GENIVI, I am excited about the new AGL and look forward to learning more. I am delighted that the previously quiet Toyota is stepping up to provide leadership alongside Samsung and Intel with Tizen. Linux is winning big in automotive, which will be an increasingly vital arena as autonomous vehicles become inevitable. California has made self-driving cars legal within the week, so we shouldn't squabble, but roll up our sleeves and get to the work.
The article is yet more great coverage of Linux IVI by Nate Willis and Michael Kerrisk. Thank you LWN!
ALS: Automotive Grade Linux
Posted Sep 27, 2012 18:43 UTC (Thu) by dmk (subscriber, #50141)
[Link]
Well, at least in cars of one big manufacturer there are more than 2 CAN Busses...
ALS: Automotive Grade Linux
Posted Oct 6, 2012 6:26 UTC (Sat) by alison (✭ supporter ✭, #63752)
[Link]
My car has MS-CAN, HS-CAN and OBDII. I can read all three from the OBDII port:
My vehicle dates to 2005, so newer cars likely do have better security, although the kind of inter-bus communication I report is observed in many newer models as well.