xCarbon
Say Goodbye to System
Overhauls With Our Lightweight,Precise, and Frictionless IDS/IPS

Building an IDS/IPS In-House
Sounds Good, But Maintaining It
Is a Hassle​

High Footprint​
Anxiety

False Alert​
OverloadEscalating​Transmission Costs

Maintaining effective detection

Dealing with high volumes ofTransmitting data from over arule updates for proactive

false alarms daily necessitates

million vehicles to the cloud candefense is challenging. Poorly

either investing in additional

trigger data transmission costs tocrafted rules can disrupt

manpower or implementing

soar to as much as US$2.1M per

network traffic and prolong

filtering mechanisms to minimize

month,* potentially becoming an

detection times. This strains

inaccuracies. But this introduces

overwhelming financial load. How

already resource-tight electronic

additional complexity into theto minimize sending unnecessarycontrol units (ECUs), potentiallysystem design.

security events to the vehicle

impacting system reliability.

security operations center (VSOC)
becomes a major consideration.
*Source: AECC

1 of 2 | SOLUTION BRIEF

Lightweight, Precise, and Frictionless IDS/IPS
Compliant with AUTOSAR IDS protocol
DETECTvm
Ad rotectionpACT

REPORTRESPOND

SIPxCatio

Fric nlessIDonS/rb anced systeVehicle status

Remediation

Vehicle on-boarddetection logMitigation

noC A N a c tiedet

In tt-galyNexe lli g ence senﬁr

onmenEew th ern eta ll(e.g., telemetry)

Securelog servicesor

ECU4
ECU1

ECU2

ECU5

ECU3

ECU6Flexible Design:

Firewall rule/App policy/Conﬁguration/CAN anomaly detection/Virtual patchFeature Highlights•Next-gen Ethernet firewall. Identify suspicious events inEthernet (e.g., DoS attacks, malicious payloads) and network
vulnerabilities.​•CAN anomaly detection. Detect malicious CAN messages,
such as messages with abnormal IDs, frequencies, and payloads
caused by attacks.​•Advanced system protection. Our host-based IDS can detect
abnormal system activities to ensure system integrity and block
unauthorized applications from running on an ECU or serviceoriented architecture (SOA).​•Frictionless integration. xCarbon supports various operating
systems, including Embedded Linux, Android Automotive OS,QNX, Red Hat In-Vehicle Operating System, and Wind River
VxWorks. It is also edge AI– and edge computing–ready.

•Readiness for risks in software-defined vehicles (SDVs). Ouraward-winning xCarbon not only provides container security
but also supports operations within virtual machine (VM)
environments. ​•Unique virtual patch technology. xCarbon can deploy
virtual patches, providing you with an average of 102 days ofprotection while awaiting the availability of a vendor patch. ​•Automated detection and response at the edge. xCarbonenables you to build your own detection and response
capabilities based on different scenarios.​

Experience a lightweight,
modular, and configurable
design that adapts tovarious ECU and EEA
needs.​​•

Precise Detection: Benefit
from unique threat expert
rules that minimize false
positives, ensuring accurate
threat detection.​•

Cost Efficiency: Enjoy areduction in transmission
costs by up to 60%,
optimizing your operational
expenses.​​•Long-Term Support:
Rely on dedicated experts
for ongoing support
throughout the entire life
cycle of your vehicle.

AcceptanceUPDATEECUn

Key Benefits
•OEM
VSOC

Report or blockxCarbon
Copyright © 2024 VicOne Inc.
All Rights Reserved.

Learn more about VicOne
by visiting VicOne.com orscanning this QR code: