Argus CAN IDPS

Intrusion Detection and Prevention System for CAN bus networks

Argus’ Intrusion Detection and Prevention System for CAN networks monitors traffic, detects threats and anomalies, and offers prevention mechanisms for common attack methods such as denial of service and brute force.

why now?

Meet mandatory requirements for CAN cyber security

CAN bus (CAN) is the primary networking technology used in vehicles for safety-critical systems. But CAN technology has well-known security shortcomings. For vehicle homologation today, manufacturers and suppliers need cyber security capabilities in vehicle networks to meet industry standards and regulation and make sure that the CAN bus traffic is cyber-secure.

Product highlights

Automotive-grade

ASPICE (3.1) Level 2 capabilities for products and projects development

Achieve compliance

For vehicles and components coming to market in Europe and Asia (WP.29, GB)

Flexible feature sets

To support different implementations architectures, and requirements

Optimized performance

With minimal impact on memory, CPU, and network latency

Proven protection

Already on the road and trusted by manufacturers and suppliers worldwide

Motivating
factors

  • Current and emerging vehicle cyber security regulation
  • Reducing exposure to corporate liability and costly recalls
  • Protecting brand and reputation through consumer safety and privacy
  • The need for secure products in a connected world
argus can idps features

Safeguarding the vehicles’ critical functions

Argus CAN IDPS brings together advanced security features for robust network protection – from ongoing monitoring to proactive intrusion detection and prevention.

Automatic configuration and validation

Argus has made integration cheaper, simpler, and repeatable.

Baseline and specification enforcement

Detect basic anomalies in message IDs, diagnostics, signals, and network load.

Diagnostics inspection

Identify unexpected use of diagnostics services including timing and stateful analysis.

Data and timing analysis

Monitor for injection attempts and correlate data types for advanced anomaly detection.

A proven way to reduce risk

Tailored to any CAN bus network implementations

Argus CAN IDPS is operating system and hardware agnostic. Whatever the component technologies are, Argus ensures successful integration of the appropriate security functionality.

More argus products

ECU IDPS

Add advanced Intrusion Detection and Prevention to Posix-based ECUs to reduce the risk of software-defined vehicles and drive compliance.

Vehicle Vulnerability Management

Meet regulations and standards like UN R155 and ISO/SAE 21434 with lifecycle vulnerability management that reduces financial, safety, and privacy risk.

VSOC

Leverage expertise that’s already protecting millions of vehicles with a Vehicle Security Operations Center that combines technology, processes, playbook, and knowledge.

Ethernet IDPS

Protect in-vehicle networks with comprehensive network monitoring, threat detection, and attack prevention as an ECU library or pre-integrated into switch firmware.

See how Argus CAN IDPS is protecting vehicles worldwide