Specification of Firewall for Classic Platform, AUTOSAR 1084, R23-11, CP

Specification of Firewall for Classic Platform, AUTOSAR 1084, R23-11, CP
https://www.autosar.org/fileadmin/standards/23-11/CP/AUTOSAR_CP_SWS_Firewall.pdf

<この項は書きかけです。順次追記します。>
This article is not completed. I will add some words in order.

# Release Overviews

Classic Platform Release Overview, AUTOSAR No.0 ,R23-11, CP
https://qiita.com/kaizen_nagoya/items/8468435185e109189ead

Foundation Release Overview, AUTOSAR 781, R23-11, FO
https://qiita.com/kaizen_nagoya/items/f249bdb8c313d8bff883

Adaptive Platform Release Overview, AUTOSAR 782, R23-11, AP
https://qiita.com/kaizen_nagoya/items/13a104606a34fe24fcf7

# Terms
|Short Name(Acronym, Abbreviation)|Description|
|:--|:--|
Firewall|An automotive Ethernet firewall is a network security device that monitors incoming and outgoing network traffic and grants or rejects network access between two or more Electronic Control Units (ECU) or between network zones (e.g. vehicle domain (ADAS, infotainment, diagnostics etc), trusted/non-trusted zones).
Firewall Rule|Pattern of expected values for a network packet together with an associated action in case a network packet matches the pattern (e.g., block or allow the network packet).
Firewall State|The Firewall State reflects the current state of the vehicle (e.g. driving, in a diagnostic session, ...) and can be set by a user application. Based on the currently active Firewall State, a specific set of Firewall Rules matching the current vehicle state is active.
Allowlist|Collection of Firewall Rules where the network packet is allowed in case of a pattern match.
Blocklist|Collection of Firewall Rules where the network packet is blocked in case of a pattern match.
OSI Layer|Network layer according to the ISO OSI model as specified in ISO/IEC 7498.
BswM|Basic Software Mode Manager
DDS|Data Distribution Service
DDS-RTPS|DDS Real-Time Publish Subscribe Protocol
DoIP|Diagnostics over IP
EthIf|Ethernet Interface
IDS|Intrusion Detection System
IdsM|IDS Manager
IdsR|IDS Reporter
IP|Internet Protocol
SEv|Security Event
SOME/IP|Service oriented Middleware over IP
TCAM|Ternary content-addressable memory
TCP|Transmission control protocol
UCM|Update & Configuration Management
UDP|User datagram protocol

# Reference

[1] Glossary AUTOSAR_FO_TR_Glossary
https://www.autosar.org/fileadmin/standards/23-11/FO/AUTOSAR_FO_TR_Glossary.pdf
[2] Requirements on Firewall AUTOSAR_FO_RS_Firewall
[3] System Template AUTOSAR_CP_TPS_SystemTemplate
[4] General Specification of Basic Software Modules AUTOSAR_CP_SWS_BSWGeneral
[5] IEEE Standard for Ethernet https://ieeexplore.ieee.org/document/7428776
[6] SOME/IP Protocol Specification AUTOSAR_FO_PRS_SOMEIPProtocol
[7] SOME/IP Service Discovery Protocol Specification AUTOSAR_FO_PRS_SOMEIPServiceDiscoveryProtocol
[8] DDS Interoperability Wire Protocol, Version 2.2 http://www.omg.org/spec/DDSI-RTPS/2.2
[9] Road vehicles – Diagnostic communication over Internet Protocol (DoIP) – Part 2: Network and transport layer requirements and services (Release 2019-12) https://www.iso.org
[10] Specification of Ethernet Switch Driver AUTOSAR_CP_SWS_EthernetSwitchDriver


# 文書履歴(document history)
ver. 0.01 初稿 　 20231203
### 最後までおよみいただきありがとうございました。
いいね　💚、フォローをお願いします。
####  Thank you very much for reading to the last sentence.
Please press the like icon 💚　and follow me for your happy life.