Method for Detecting a Manipulation of a Message of a Bus System of a Vehicle

A method of using a controller of a vehicle to detect manipulation of a message of a bus system of the vehicle:

• receiving, at the controller, the message from the bus system of the vehicle;
• ascertaining a state of a learning method of the controller based on a vehicle state;
• when the state of the learning method indicates that the learning method is not trained:
• training the learning method using the received message;
• when the state of the learning method indicates that the learning method is trained:
• using the trained learning method to detect manipulation of the message;
• and
• providing an alarm message from the controller to a server outside of the vehicle when the trained learning method has detected manipulation of the message.

A non-transient computer-readable medium using a controller of a vehicle to detect manipulation of a message of a bus system of the vehicle, wherein the computer-readable medium comprises instructions which, when executed by the controller, cause the controller to:

• receive the message from the bus system of the vehicle;
• ascertain a state of a learning method of the controller based on a vehicle state;
• when the state of the learning method indicates that the learning method is not trained:
• train the learning method using the received message;
• when the state of the learning method indicates that the learning method is trained:
• use the trained learning method to detect manipulation of the message;
• and
• provide an alarm message from the controller to a server outside of the vehicle when the trained learning method has detected manipulation of the message.

A vehicle comprising:

• a bus system;
• and
• a controller configured to:
• receive a message from the bus system of the vehicle;
• ascertain a state of a learning method of the controller based on a vehicle state;
• when the state of the learning method indicates that the learning method is not trained:
• train the learning method using the received message;
• when the state of the learning method indicates that the learning method is trained:
• use the trained learning method to detect manipulation of the message;
• and
• provide an alarm message from the controller to a server outside of the vehicle when the trained learning method has detected manipulation of the message.