Vehicle anomaly detection server, vehicle anomaly detection system, and vehicle anomaly detection method

A vehicle anomaly detection server, comprising:

• a communicator that communicates with a vehicle to receive a log of an in-vehicle network included in the vehicle;
• a processor;
• and
• a memory including at least one set of instructions that, when executed by the processor causes the processor to perform operations including:
• selecting, when information indicating that an anomaly is occurring to a first vehicle among a plurality of vehicles is obtained by the processor, an anomaly-related vehicle from among the plurality of vehicles based on the anomaly occurring to the first vehicle, the first vehicle being the vehicle that communicates with the communicator;
• transmitting, to the anomaly-related vehicle via the communicator, a first request to transmit a log of an in-vehicle network included in the anomaly-related vehicle;
• and
• determining whether an anomaly is occurring to the anomaly-related vehicle, based on information indicated by the log transmitted from the anomaly-related vehicle in response to the first request and received by the communicator.