Karamba Security of Bloomfield Hills says it will be supplying its Carwall runtime integrity cyber-security software to Alpine Electronics for vehicle infotainment systems.
The platform provides an electronic control unit self-protection against remote code execution (RCE), helping to protect vehicles from cyberattacks, which is critical in order to safeguard customer safety in the connected and autonomous vehicle era.
Such exploits of in-memory vulnerabilities can jeopardize customer safety by controlling a vehicle’s speed and direction, according to the company. Karamba’s runtime integrity technology provides protection using control flow integrity (CFI).
“This is the first time a production of commercial, embedded, self-protection software is available for automotive ECUs and vehicles,” says Ami Dotan, co-founder and CEO of Karamba.
Dotan adds that the partnership with Alpine’s product team allowed Karamba to overcome production hurdles (such as automated implementation without delaying time to market) and implement the same security software on Alpine’s various systems.
Karamba’s patented Embedded Runtime Integrity is a state-of-the-art attack detection and prevention software that leverages CFI and continuously maintains vendor settings. With Karamba’s technology installed, the infotainment software system detects, prevents, and reports attempted cyberattacks.
“Protecting our customers against cyberattacks is a key mission for Alpine,” says Yasuhiro Ikeuchi, president of Alpine Europe. “We were looking for a solution that can be seamlessly applied to our product without delaying time to market, with negligible performance impact, while providing strong security measures. We have found those qualities in Karamba Security Carwall.”
