Configuring a firewall system in a vehicle network

One or more non-transitory computer-readable media containing instructions which, when executed, cause a computing device to perform operations comprising:

• receiving a software code of a network node connected to a trusted network of a vehicle network that comprises the trusted network internal to a vehicle and an untrusted network external to the vehicle, wherein the trusted network comprises one or more functional domains for controlling functionalities of the vehicle;
• performing an analysis of the software code to identify connectivity of the network nodes in the vehicle network, wherein the performing the analysis comprises:
• turning off one or more firewalls in the vehicle network;
• and
• determining the connectivity paths by performing a packet sniffing;
• determining connectivity information of the network nodes in the vehicle network based on the analysis, wherein the connectivity information comprises at least one of Network Layer connectivity information, Transport Layer connectivity information, or Application Layer connectivity information;
• and
• configuring one or more firewalls in the vehicle network based on the connectivity information.

A device, including:

• at least one hardware processor;
• and
• one or more computer-readable storage media coupled to the at least one hardware processor and storing programming instructions for execution by the at least one hardware processor, wherein the programming instructions, when executed, cause the at least one hardware processor to perform operations including:
• receiving a software code of a network node connected to a trusted network of a vehicle network that comprises the trusted network internal to a vehicle and an untrusted network external to the vehicle, wherein the trusted network comprises one or more functional domains for controlling functionalities of the vehicle;
• performing an analysis of the software code to identify connectivity of the network nodes in the vehicle network, wherein the performing the analysis comprises:
• turning off one or more firewalls in the vehicle network;
• and
• determining the connectivity paths by performing a packet sniffing;
• determining connectivity information of the network nodes in the vehicle network based on the analysis, wherein the connectivity information comprises at least one of Network Layer connectivity information, Transport Layer connectivity information, or Application Layer connectivity information;
• and
• configuring one or more firewalls in the vehicle network based on the connectivity information.