Ethernet switch integrates firewall to bolster in-vehicle security

By Majeed Ahmad, contributing writer

Marvell has partnered with ESCRYPT to build multi-layered protection around its 88Q5050 Ethernet switch for in-vehicle networks. ESCRYPT’s CycurGATE automotive firewall makes the most of hardware acceleration on the switch; the switch hardware and firewall software are algorithmically so interwoven that CycurGATE can process most of the data packets at wire speed.

ESCRYPT’s CycurGATE firewall supports all standard routing schemes and can be used on the switch as either a library or a standalone solution. The automotive firewall supports all filter mechanisms inside the Marvell’s Ethernet switch, including stateless packet inspection, dynamic stateful inspection, and deep packet inspection (DPI).

This means that the entire packet flow is monitored and managed centrally and there is no interference with the host controller of the individual ECUs. Here, it’s worth mentioning that Marvell’s 88Q5050 Ethernet switch itself features security features like DPI and Trusted Boot functionality to prevent malicious attacks or compromises to the data streamed in the vehicle.

The Ethernet switch is also available with ESCRYPT’s integrated intrusion detection system . The intrusion detection system, an embedded security component, monitors in-vehicle communication to detect anomalies, typical intrusion signatures, and abuse of diagnostic mechanisms.

The integration of ESCRYPT’s CycurGATE firewall and intrusion detection system into Marvell’s secure switch facilitates comprehensive protection against unauthorized access. And that significantly enhances the end-to-end security of in-vehicle communications.