Method and system for intrusion detection for an in-vehicle infotainment system

A computing device comprising:

• a processor;
• and
• a communications subsystem,
• wherein the computing device is configured to:
• maintain, at the computing device, a plurality of synthetic sensors, each of the plurality of synthetic sensors being configured to generate insights from sensor data received from at least one physical sensor, the at least one physical sensor being separated from the synthetic sensors by a hardware abstraction layer;
• place a trace on a plurality of behaviors within a kernel on the computing device;
• generate data from the trace;
• format the data into a security sensor output;
• and
• provide the security sensor output to a security sensor, wherein the security sensor is a synthetic sensor from the plurality of synthetic sensors.

A non-transitory computer readable medium for storing instruction code, which, when executed by a processor of a computing device cause the computing device to:

• maintain, at the computing device, a plurality of synthetic sensors, each of the plurality of synthetic sensors being configured to generate insights from sensor data received from at least one physical sensor, the at least one physical sensor being separated from the synthetic sensors by a hardware abstraction layer;
• place a trace on a plurality of behaviors within a kernel on the computing device;
• generate data from the trace;
• format the data into a security sensor output;
• and
• provide the security sensor output to a security sensor, wherein the security sensor is a synthetic sensor from the plurality of synthetic sensors.