Patent ID: 9231967
Filing Date: 2016-01-05
CPC Classification: H04L

Claim Text:
1. An apparatus for detecting an in-vehicle network attack under an in-vehicle network environment in which devices having defined priorities for packet transmission are connected to an in-vehicle network bus, the apparatus comprising: a packet collector configured to collect packets transferred via the in-vehicle network bus; a packet counter configured to cumulatively count the number of packets collected by the packet collector; a check value calculator configured to calculate a check value based on a generation time difference of packets having an identical ID; a cumulated value calculator configured to calculate a cumulated value by summing the check value calculated by the check value calculator and a check value just previously calculated; an average cumulated value calculator configured to calculate an average cumulated value by dividing the cumulated value calculated by the cumulated value calculator by a value cumulatively counted by the packet counter; and an attack determinator configured to determine whether an attack occurs based on the average cumulated value calculated by the average cumulated value calculator, wherein the check value calculator is configured to generate the check value based on a difference between a current time t