Defending In-Vehicle Networks Against Bus Injection and Replay Attacks with Hardware Security

Evaluating physical bus attack vectors (CAN injection, headlight harness hacks) and designing hardware-enforced countermeasures.

The Rise of Physical Bus Injection Theft

Sophisticated car thieves increasingly exploit exposed vehicle wiring (such as headlight CAN buses) to inject forged 'unlock and start' messages directly into the vehicle network. Because legacy CAN buses lack native authentication, gateway ECUs accept these forged frames blindly. AutoHSM neutralizes this attack through hardware-accelerated message authentication.

AUTOSAR SecOC Hardware Acceleration

By calculating and verifying truncated MACs (CMAC-AES-128) in under 15 microseconds, AutoHSM allows ECUs to authenticate every critical CAN and CAN-FD frame without consuming host CPU bandwidth or introducing latency into time-sensitive braking commands.

Intrusion Detection and Automated Bus Quarantine

AutoHSM continuously monitors bus timing, error frame frequency, and frame IDs. If an injection attack is detected, the HSM signals the transceiver to enter an isolated quarantine mode, preventing rogue frames from propagating across vehicle gateways.

Ver dominios