A network device implements a method to protect a vehicle from insertion of malicious operations. The method includes establishing a communication session with a requestor as a proxy for the vehicle, receiving status information from the vehicle, querying a deep learning platform with the status information and message from the requestor, and dropping the message from the requestor in response to the deep learning platform indicating the message is malicious.