Abstract: Apparatuses and methods are disclosed for monitoring broadcast serial communication buses, analyzing communications on those buses, and providing information relative to the monitoring and analysis. A CAN bus is used as an example to provide details of analysis of a broadcast serial bus. Metadata and temporal neighbor history for each type of message identifiers are developed and analyzed. Alerts may be generated if the metadata, the temporal neighbor history, or a combination thereof fall outside predetermined tolerance levels.