Symantec Anomaly Detection for Automotive (v. 1.0) - Essential Support (renewal) (1 year)

Symantec Anomaly Detection for Automotive protects vehicles by monitoring the CANBUS to detect threats in real time, including detecting anomalies that might indicate a sophisticated adversary acting or hiding in the vehicle's systems. It is a passive, security solution which can be plugged into or integrated with the vehicle and can learn the normal behavior for any model vehicle, and increase both safety and security by informing the vehicle when it might either be under attack, or simply malfunctioning. This can give Auto Manufacturers and Fleet operators realtime situational awareness of a vehicle's current security state without needing to send all the CAN Bus information. For disconnected vehicles, the solution also logs information helpful in revealing whether hackers have attacked or experimented on the vehicle, logging the information for easy retrieval in routine dealer maintenance. This in-vehicle analytics software is engineered to perform well in automotive environments with limited compute, memory and bandwidth capabilities. The small footprint enables deployment on head units, IVN gateways, and On-Board Diagnostic (OBD-2) dongles. Symantec Anomaly Detection for Automotive uses several algorithms and techniques to determine normal operation of the system for nearly any model of vehicle. Once the system has learned a baseline for a given model of vehicle, that baseline can be used in continuous monitoring of vehicles shipped worldwide to detect deviations from normal with high sensitivity and precision. By using machine learning techniques, the solution can automatically discriminate potentially dangerous anomalous messaging behavior from normal behavior. Using machine learning in this way avoids the pain of manually crafting detailed policies.