System and method for identifying compromised electronic controller using intentionally induced error

An electronic device for identifying a compromised electronic control unit (ECU) that transmits an attack message on a controller area network bus (CAN bus) in a periodic transmission cycle, the electronic device comprising:

• an error generating unit configured to, in response to detecting the attack message, transition a first ECU among a plurality of ECUs connected to the CAN bus to a bus-off state intentionally;
• and
• a compromised-ECU identification unit configured to determine whether the first ECU is the compromised ECU based at least in part on a time, which is predicted from recovery parameters related to the first ECU, for when the first ECU resumes a transmission of a CAN message and a time when the attack message is redetected on the CAN bus.

An electronic device for analyzing recovery parameters related to a recovery of an electronic control unit (ECU), connected to a controller area network bus (CAN bus), from a bus-off state, the electronic device comprising:

• an error generating unit configured to transition the ECU that periodically transmits a controller area network message (CAN message) to the bus-off state intentionally;
• and
• a parameter analysis unit configured to monitor the CAN bus to receive the CAN message that is resumed to be transmitted following the recovery of the ECU from the bus-off state, and to analyze the recovery parameters of the ECU based in part on a time when the CAN message is received.