A method for providing security on an externally connected automotive controller within a vehicle , the method comprising: launching, by the automotive controller , a kernel level security layer that includes a whitelist of permitted processes on the automotive controller , the whitelist being part of a custom security policy for the automotive controller and including (i) signatures for processes that are authorized to be executed by the automotive controller and (ii) context information identifying permitted vehicle contexts within which the processes are authorized to be executed by the automotive controller ; receiving , at the security layer , a request to run a particular process ; determining , by the security layer , a signature for the particular process ; determining , by the security layer , whether the particular process is permitted to be run on the automotive controller based on a comparison of the determined signature with a verified signature for the particular process from the whitelist ; identifying , by the security layer , a current vehicle context for the automotive controller , the current vehicle context including at least one of a determined context internal to the vehicle or a determined context external to the vehicle ; determining , by the security layer , whether the particular process is permitted to be run on the automotive controller based on a comparison of the current vehicle context with one or more permitted vehicle contexts for the particular process from the whitelist ; and blocking , by the security layer , the particular process from running on the automotive controller based on whether the determined signature matches the verified signature for the process and whether the current vehicle context is included in the one or more permitted vehicle contexts. launching, by the automotive controller , a kernel level security layer that includes a whitelist of permitted processes on the automotive controller , the whitelist being part of a custom security policy for the automotive controller and including (i) signatures for processes that are authorized to be executed by the automotive controller and (ii) context information identifying permitted vehicle contexts within which the processes are authorized to be executed by the automotive controller ; receiving , at the security layer , a request to run a particular process ; determining , by the security layer , a signature for the particular process ; determining , by the security layer , whether the particular process is permitted to be run on the automotive controller based on a comparison of the determined signature with a verified signature for the particular process from the whitelist ; identifying , by the security layer , a current vehicle context for the automotive controller , the current vehicle context including at least one of a determined context internal to the vehicle or a determined context external to the vehicle ; determining , by the security layer , whether the particular process is permitted to be run on the automotive controller based on a comparison of the current vehicle context with one or more permitted vehicle contexts for the particular process from the whitelist ; and blocking , by the security layer , the particular process from running on the automotive controller based on whether the determined signature matches the verified signature for the process and whether the current vehicle context is included in the one or more permitted vehicle contexts. <EOS>