System and method for providing security to a communication network
A system and method for providing security to a network may include identifying a message sent over a network, the message related to a data transfer from an initiator to a target node, and transmitting, over the network, at least one disruptive message that causes the data transfer to fail.
1. A system for providing cyber security to an in-vehicle communication network comprising:
a vehicle including:
a memory; and
a controller included in a security enforcement unit, the controller configured to:
determine that a message sent from an initiator to a target node, jeopardizes the security of the in-vehicle communication network, wherein the message is related to a data transfer which is related to a diagnostic session and wherein at least one of: the initiator and the target node is connected to the in-vehicle network;
generate a disruptive message designed to terminate or prevent transfer of data over the session; and
send, to at least one of the initiator and the target node, over the in-vehicle communication network, the disruptive message, wherein when sent, the disruptive message prevents the initiator from transferring data to the target node by at least one of:
causing at least one of the initiator and the target node to terminate the session, and
preventing at least one message sent from the initiator from reaching the target node.
2. The system of claim 1 , wherein the identified message is one of: a message sent by the initiator in order to prepare the target node to receive the data transfer and a message sent by the target node in reply to a message sent by the initiator.
3. The system of claim 1 , wherein the disruptive message modifies a state of a node.
4. The system of claim 1 , wherein the controller is further configured to select an operational mode and selectively send disruptive messages based on the selected operational mode.
5. The system of claim 1 , wherein the controller is further configured to select whether or not to send the disruptive message based on a context.
6. The system of claim 1 , wherein the controller is further configured to send a first disruptive message to the initiator and a second disruptive message to the target node.
7. The system of claim 1 , wherein the controller and memory are embedded in a node that is adapted to control at least one system in the vehicle.
8. The system of claim 1 , wherein the controller is further configured to select the disruptive message according to a predefined protocol.
9. The system of claim 1 , wherein the controller is further configured to select the disruptive message based on at least one of: a state of the vehicle, a context, a message received by the controller, the target node and a stage of a session.
10. The system of claim 1 , wherein the controller is further configured to send disruptive messages when in a protective operational mode and monitor traffic on the network when in a passive operational mode.
11. A method for providing cyber security to an in-vehicle network in a vehicle, the method comprising:
determining, by a controller, that a message sent from an initiator to a target node, jeopardizes the security of the in-vehicle network, wherein the message is related to a data transfer which is related to a diagnostic session and wherein at least one of: the initiator and the target node is connected to the in-vehicle network;
generating a disruptive message designed to terminate or prevent transfer of data over the session; and
sending, to at least one of the initiator and the target node, by the controller, over the in-vehicle network, the disruptive message, wherein when sent, the disruptive message prevents the initiator from transferring data to the target node by at least one of:
causing at least one of the initiator and the target node to terminate the session, and
preventing at least one message sent from the initiator from reaching the target node.
12. The method of claim 11 , wherein the identified message is one of: a message sent by the initiator in order to prepare the target node to receive the data transfer and a message sent by the target node in reply to a message sent by the initiator.
13. The method of claim 11 , wherein the disruptive message modifies a state of a node.
14. The method of claim 11 , comprising selecting whether or not to send the disruptive message based on a context.
15. The method of claim 11 , comprising sending a first disruptive message to the initiator and a second disruptive message to the target node.
16. The method of claim 11 , wherein the controller is embedded in a node that is adapted to control at least one system in the vehicle.
17. The method of claim 11 , comprising selecting the disruptive message according to a predefined protocol.
18. The method of claim 11 , comprising selecting the disruptive message based on at least one of: a state of the vehicle, a context, a message received by the controller, the target node and a stage of a session.
19. The method of claim 11 , comprising selecting the disruptive message based on one of: a context, a message received by the controller, the target node and a stage of a session.