| CPC H04L 63/1425 (2013.01) [H04L 63/1466 (2013.01); H04L 67/12 (2013.01); H04L 2012/40215 (2013.01)] | 18 Claims |

|
1. An intrusion detection system comprising:
a computing device configured to:
receive messages communicated on a vehicular communications network;
construct a set of graphs based on the received messages, wherein the set of graphs is constructed for a predetermined number of the received messages;
apply a graph-based anomaly detection technique to the set of graphs for identifying an anomaly among one or more of the received messages;
extract adjacent messages and their corresponding identifiers;
construct an adjacency list from the identifiers extracted from two sequential messages; and
implement a predetermined action to mitigate an intrusion based on identification of the anomaly.
|