“…1, it also leads to a giant system consisting of tremendous processes interacting with each other to perform complex functions, including sensing, data processing, localization, route planning, motion control, trajectory control, etc., which makes it vulnerable to malware, software failures, or even a kernel panic [1], [2], [39], [40]. For example, malware can be remotely distributed into selfdriving cars [6], [23] to disrupt system execution or intrude the in-vehicle bus. Thus, it is urgent and necessary to decouple and isolate each functionality.…”