Re:European crash tester says carmakers must bring back phys...
by jojobas on Tuesday March 05, 2024 @09:50PM
(#39611716)
Why even have the firewall? Wouldn't a true airgap be preferable? At the same time, having say steering and brakes on the same bus adds a single point of failure to both steering and brakes, which is not ideal.
Re:European crash tester says carmakers must bring back phys...
by fodkodrasz on Wednesday March 06, 2024 @03:00AM
(#39613467)
Cost and risk management. These systems undergo rigorous safety evaluation, auditing, and testing. This is a manageable risk (very low) given the business requirements and the threat model.
To overcome this the plan back when I was working on that product was to use 2 system buses, one isolated internal for the safe critical sensor/control network, and one user facing untrusted bus, with a ECU designed to serve as a firewall basically.