公开(公告)号：US20210349997A1

公开(公告)日：2021-11-11

申请号：US17380228

申请日：2021-07-20

Applicant: Panasonic Intellectual Property Corporation of America

Inventor： Ryo HIRANO ,  Takeshi KISHIKAWA ,  Yoshihiro UJIIE ,  Tomoyuki HAGA

IPC: G06F21/56

Abstract: An anomalous vehicle detection server includes an anomaly score calculator that detects a suspicious behavior different from a predetermined driving behavior based on pieces of vehicle information that are received from a plurality of vehicles, respectively, and are each based on a vehicle log including the content of an event that has occurred in a vehicle system provided in the vehicle, and acquires an anomaly score of each of the plurality of vehicles that indicates a likelihood that reverse engineering is performed on the vehicle; and an anomalous vehicle determiner that determines whether one vehicle of the plurality of vehicles is an anomalous vehicle based on the anomaly score of the one vehicle and a statistical value of the anomaly scores of two or more vehicles of the plurality of vehicles.

公开(公告)号：US20210056206A1

公开(公告)日：2021-02-25

申请号：US17094377

申请日：2020-11-10

Applicant: Panasonic Intellectual Property Corporation of America

Inventor： Ryo HIRANO ,  Takeshi KISHIKAWA

IPC: G06F21/56

Abstract: An intrusion point identification device includes: a threat information collector that collects and stores threat information including identification information identifying a moving body, route information indicating a route through which the threat has intruded into the moving body, and discovery information indicating a discovery date of an attack; a vehicle log collector that collects logs, extracts, from the logs, histories of points that indicate locations of one or more moving bodies within a predetermined period, and stores the histories of the points as history information, the logs indicating points that indicate locations of the one or more moving bodies, the predetermined period being set based on the discovery information; an intrusion point identification unit that identifies an intrusion point of the threat from a first attack source through a first route among the points indicated in the history information; and an intrusion point notifier that outputs the intrusion point.