Vehicle security monitoring apparatus, method and non-transitory computer readable medium

A vehicle security monitoring method executed by a vehicle security monitoring apparatus capable of communicating with an in-vehicle network having a function of transmitting log data related to an operation state of an in-vehicle apparatus, the vehicle security monitoring apparatus comprising:

• acquiring the log data;
• detecting an abnormal state in the in-vehicle network based on the acquired log data;
• and
• estimating an influence range affected by the detected abnormal state;
• and
• managing information indicating the estimated influence range.

A non-transitory computer readable medium storing a program that causes a hardware processor of a vehicle security monitoring apparatus capable of communicating with an in-vehicle network having a function of transmitting log data related to an operation state of an in-vehicle apparatus, to:

• acquire the log data;
• detect an abnormal state in the in-vehicle network based on the acquired log data;
• estimate an influence range affected by the detected abnormal state;
• and
• manage information indicating the estimated influence range.