Recover from vehicle security breach via vehicle to anything communication

A system, comprising:

• an in-vehicle-network (IVN);
• a plurality of electronic control units (ECUs) communicatively coupled via the IVN;
• intrusion detection system (IDS) circuitry coupled to the IVN, the IDS circuitry to identify an attack on the IVN by one of the ECUs;
• and
• vehicle-to-vehicle (V2X) communication circuitry comprising a processor and memory, the memory comprising instructions that when executed by the processor cause the processor to:
• receive, from the IDS circuitry, a notification of the attack;
• generate an information element comprising an indication of the attack and a request for help in recovering from the attack, the attack comprising a malicious message detected on the IVN, the malicious message comprising an indication of data;
• broadcast the information element to a connected vehicle via a vehicle-to-vehicle (V2X) network;
• receive, via the V2X network, a response from the connected vehicle, the response comprising an indication of a physical characteristic;
• initiate recovery from the attack based in part on the response and
• estimate corrected data based in part on the physical characteristic.

At least one non-transitory machine-readable storage medium comprising instructions that when executed by at least one processor, cause the at least one processor to:

• receive, from intrusion detection system (IDS) circuitry coupled to an in-vehicle network (IVN), a notification of an attack on the IVN;
• generate an information element comprising an indication of the attack and a request for help in recovering from the attack, the attack comprising a malicious message detected on the IVN, the malicious message comprising an indication of data;
• broadcast, via wireless circuitry the information element to a connected vehicle via a vehicle-to-vehicle (V2X) network;
• receive, via the V2X network, a response from the connected vehicle, the response comprising an indication of a physical characteristic;
• initiate recovery from the attack based in part on the response;
• and
• estimate corrected data based in part on the physical characteristic.