Abstract: A system and method for protecting a vehicle from theft includes monitoring transmissions over an in-vehicle network; determining, based on at least two of the content of at least one message, electrical characteristics of the transmission of the message, and the context of the vehicle, that an unauthorized device is connected to the in-vehicle network and is used to perform at least one of: stealing the vehicle, and bypassing security or access system of the vehicle. A system or method includes performing at least one of: recording and reporting information related to the unauthorized component, preventing or mitigating an attack on the vehicle, and preventing theft or unauthorized use of the vehicle.

Abstract: A system and method for providing fleet cyber-security comprising may include collecting, by a plurality of data collection units installed in a respective plurality of vehicles in the fleet, information related to cyber security and including the information in reports to a server. Data in reports may be aggregated, by the server. A cyber-attack may be identified based on aggregated data.