Automotive Layered Arch

We can divide the security protection in a vehicle into Zones each Zone handle a specific role to protect against the attackers
We will divide them into a four layers 

Layer1 at ECU Level 

Protect the ECU level what is the inside the ECU it self from the security features as a checking the integrity of the software secure boot Crypto Stack and Crypto HW supported drivers 

Layer 2 : in vehicle communication 

So here we protect the communication between the ECUs and make the Messages are secured ( encrypted - tampered ) 

Layer 3 : Secure Gateways ( Domain Controllers ) 

So here we protect the communications between gateways and between the Gateways and TCUs . so if there is any malware for any specific domain it will kept in that domain and other domains are protected By the Gateways 

Layer 4 : Secure external Communications 

Here we implement the security between v2X as a OEM backend services or between two vehicles 

These layers of protection will keep our system immune to the threats and will be kept updated to fix any vulnerability detected by the attackers