WE CLAIM:
1. A system 100 to detect an intrusion at a smart vehicle and/or component(s)
thereof, the system 100 comprising:
a processor 102;
a non-transitory storage device 104;
the processor 102, which execute one or more executable routines
stored in the non-transitory storage device 104, is operable to;
analyse, a message received by the smart vehicle
to obtain at least:
a message identifier; and
message content;
utilize, at least one rule, to detect a packet
identification of the received message identifier, to
obtain a first detection result;
utilize, at least one content rule, to detect the message
content, to obtain a second detection result; and
determine, the intrusion based on the first detection
result and the second detection result.
2. The system 100 as claimed in claim 1, wherein identification of the message
content of the received message comprises utilizing a content rule chain to
obtain the second detection result.
3. The system 100 as claimed in claim 1, wherein the second detection result is
obtained by:
the packets are grouped on the message content of each message
to be detected, to obtain at least one message packet, based on
packet capacity and acquisition time of each message; and
the at least one message packet is detected, by adopting the
content rule chain, to obtain the second detection result.
4. The system 100 as claimed in claim 1, wherein the message content is
detected using the content rule chain to obtain the second detection result
comprises determining a detected message corresponding to a message to be
detected according to the acquisition time of the message to be detected.
5. The system 100 as claimed in claim 1, wherein if the intrusion is detected
and an intrusion mode is continuous, detecting the message content by
adopting the content detection rule corresponding to the intrusion mode in
the content rule chain, and obtaining the second detection result.
6. The system 100 as claimed in