Virtualized intrusion detection and prevention in autonomous vehicles

An embedded system comprising:

• a hypervisor that supports virtualized components with isolated execution environments on partitions of a virtualized environment;
• a first communication channel of the virtualized environment that provides a first guest operating system (OS) on a first of the partitions with connectivity through a network interface of the virtualized environment to a vehicle data bus external to the virtualized environment;
• a second communication channel of the virtualized environment that provides a second guest OS on a second of the partitions with connectivity to the first guest OS over an Internet Protocol (IP) network;
• and
• a security engine of the second communication channel on a third of the partitions that monitors communications between the first guest OS and the second guest OS for security events and executes a security response upon determining a security event from the communications.

A method comprising:

• receiving, by a security engine of a virtualized environment, a communication over a first communication channel to a guest operating system (OS) of the virtualized environment, the virtualized environment providing communication channels to respective guest OSes of the virtualized environment over a shared connection to a network interface external to the virtualized environment;
• analyzing the communication to determine a security event over the first communication channel;
• based at least in part on the determining the security event, determining quality of service (QoS) parameters to limit network resources available to the first communication channel relative to others of the communication channels;
• and
• applying the QoS parameters to the communication channel.