PROCÉDÉ DE DÉTECTION D'ANOMALIE, DISPOSITIF DE DÉTECTION D'ANOMALIE ET SYSTÈME DE DÉTECTION D'ANOMALIE

摘要

An abnormality detection method is provided for detecting an abnormality that may be transmitted to a bus in an on-board network system including a plurality of electronic control units that transmit and receive messages via the bus in a vehicle according to a CAN protocol. In the abnormality detection method, for example, a gateway transmits vehicle identification information to a server and receives a response thereto thereby determining a detection window size, and performs an operation process using feature information based on the number of messages received from the bus within the determined unit time and using a particular model indicating a criterion in terms of a message occurrence frequency and making a judgment as to an abnormality according to a result of the operation process.