UNECE R155/R156 Security Event Logging: Secure Audit Trails and IDS Ingestion
Capturing security anomalies, unauthorized access attempts, and CAN bus frame anomalies into an immutable on-board audit log.
UNECE Regulation 155 mandates that connected vehicles maintain an on-board Intrusion Detection System (IDS) and log cybersecurity events.
The HDO Security logging engine monitors bus traffic for signature anomalies: unexpected diagnostic service requests, rapid failed authentication attempts, and unmapped CAN IDs. Events are formatted into standardized W3C / AUTOSAR Security Event Definition format and cryptographically hashed into an internal append-only Merkle tree. Periodic log hashes are signed and streamed to the OEM's Vehicle Security Operations Center (VSOC) via secure cellular telematics.