VicOne xCarbon In-Vehicle Intrusion Detection & Prevention

VicOne is a vehicle and robotics cybersecurity company with global headquarters in Tokyo, Japan. It was launched in 2022 as a dedicated company built on years of automotive research and the threat intelligence of Trend Micro, to help vehicle makers and suppliers secure software-defined vehicles, EV charging and robots.

xCarbon is a software-based intrusion detection and prevention system that runs on vehicle ECUs, from low-end MCUs to high-performance computers, on Embedded Linux, Android Automotive OS and QNX, and is compatible with AUTOSAR, SOA, containers and hypervisors. It uses more than 2,000 expert rules to detect DoS attacks, CAN and Ethernet anomalies, container escapes and unauthorised apps, can deploy virtual patches, and uses an NPU-based edge AI feature to correlate events across ECUs. It acts as a sensor for VicOne's xNexus fleet VSOC.

• Expert rule engine: Applies more than 2,000 rules built from automotive threat intelligence.
• Network anomaly detection: Catches CAN and Ethernet anomalies and DoS attacks.
• Virtual patching: Deploys protective rules before vendor patches are available.
• Edge AI correlation: Uses the NPU to link security events across ECUs into attack paths.
• Central rule management: Updates and deploys rules to many xCarbon instances from one console.
• VSOC sensor: Sends threat-relevant telemetry to the xNexus fleet monitoring platform.

A Vietnamese EV maker can embed xCarbon in gateway and infotainment ECUs to support UN R155 type approval. An electric bus or ride-hailing fleet operator can feed in-vehicle alerts into a fleet security operations centre. An auto parts supplier can add intrusion detection to the ECUs it delivers to global OEMs.

Vehicle makers can detect and block in-vehicle attacks without waiting for supplier patches; the page cites an average of 102 days of protection through virtual patches. Edge filtering cuts system log transfer volume by at least 60%, lowering connectivity costs for fleet monitoring. The modular design lets teams enable only the functions their E/E architecture needs, and customised solutions can be delivered in as little as two days.

UN R155 and ISO/SAE 21434 make cybersecurity management mandatory for new vehicle types in many markets, and software-defined vehicles and connected EV charging widen the attack surface. Vietnam's growing EV and vehicle assembly sector, and its exports to regulated markets, increase demand for in-vehicle intrusion detection and fleet monitoring.

Launched in 2022 with Trend Micro's research and threat intelligence foundation; global headquarters in Shibuya, Tokyo. Holds ISO/SAE 21434 and Automotive SPICE CL2 certifications from DEKRA and TISAX Assessment Level 3. Co-hosts Pwn2Own Automotive with the Zero Day Initiative. xCarbon won the 2023 Intrusion Detection Solution of the Year award.