Method and device for operating a communications network

An apparatus for operating a communications network in a vehicle, comprising:

• a control entity for the communications network in the vehicle, the control entity being a software-defined networking (SDN) controller situated in the vehicle and being connected to the communication network, the control entity including a processor and a storage device, which includes instructions, which are executable by the processor, and configured to perform the following:
• determining a countermeasure after detecting an attack;
• transmitting, by the control entity to an infrastructure component, a configuration for implementing the determined countermeasure, wherein the infrastructure component is switch situated in the vehicle and connected to the communication network;
• wherein the infrastructure component implements, as a function of the transmitted configuration, the determined countermeasure, by setting at least one filtering, blocking, or forwarding rule;
• wherein the set at least one filtering, blocking, or forwarding rule causes the infrastructure component to one of:
• (i) isolate at least one data stream from or to at least one other infrastructure component, in a portion of the communications network;
• or (ii) isolate at least one data stream to or from a terminal node, in a portion of the communications network.

An infrastructure component for operating a communications network in a vehicle, or for operating an industrial communications network, comprising:

• a switch situated in the vehicle and connected to the communications network in the vehicle, the switch a processor and a storage device, including instructions, which are executable by the processor to perform the following:
• receiving, by the infrastructure component, a configuration for a countermeasure from a control entity for the communications network, after detecting an attack, the control entity being a software-defined network controller situated in the vehicle and connected to the communications network in the vehicle;
• implementing, by the infrastructure component, the countermeasure, as a function of the received configuration, by implementing at least one filtering, blocking, or forwarding rules, so as to perform one of the following:
• (i) isolating at least one data stream from or to at least one other infrastructure component, in a portion of communications network, as a function of the countermeasure, or (ii) isolating at least one data stream to or from a terminal node, in a portion of communications network, as a function of the countermeasure.

A non-transitory computer readable medium on which is stored a computer program,

• having program code for operating a communications network in a vehicle, the program code, when executed by a processor, causing the processor to perform the following:
• determining, with a control entity for the communications network in the vehicle, a countermeasure after detecting an attack, the control entity being a software-defined networking (SDN) controller situated in the vehicle and connected to the communications network;
• transmitting, by the control entity to an infrastructure component, a configuration for implementing the determined countermeasure, wherein the infrastructure component is a switch situated in the vehicle and connected to the communications network;
• implementing, by the infrastructure component, as a function of the transmitted configuration, the determined countermeasure, by setting at least one filtering, blocking or forwarding rule;
• and
• performing, by the infrastructure component applying the set at least one filtering, blocking, for forwarding rule, one of the following:
• (i) isolating at least one data stream from or to at least one other infrastructure component by the infrastructure component in a portion of the communications network;
• or (ii) isolating at least one data stream to or from a terminal node by the infrastructure component in a portion of the communications network.