| CPC H04L 63/1425 (2013.01) [G06F 21/552 (2013.01); H04L 63/1416 (2013.01); H04W 4/44 (2018.02); H04W 12/12 (2013.01); H04L 43/062 (2013.01); H04L 63/1433 (2013.01); H04L 67/12 (2013.01); H04W 12/63 (2021.01)] | 20 Claims |

|
1. A system for providing cyber-security to a fleet of vehicles, the system comprising:
a server included in a security operations center (SOC) managing cyber-security of the fleet, the server comprising:
a memory; and
a processor adapted to:
receive from a plurality of data collection units (DCUs) installed in a respective plurality of vehicles in the fleet, a plurality of reports, the reports including information collected by the DCUs and related to cyber security;
correlate information received from a first DCU installed in a first vehicle with information received from a second DCU installed in a second vehicle that is separate from the first vehicle,
based on the correlation, identify at least one of:
a common time of an occurrence of a common event,
a common geographic place,
a common component included in the vehicles,
a common service facility,
a common manufacturer of a common element,
a common source of network messages, and
an attribute which is common to a plurality of vehicles in the fleet; and
based on the identification, determine that at least one of the fleet and a vehicle in the fleet is under a cyber-attack.
|