Abstract: A gateway apparatus is connected to a plurality of buses. A data frame is received by using one of the plurality of buses as a reception bus. Whether the received data frame is a monitoring target data frame is determined based on monitoring target information. The monitoring target information is stored in a storage to associate the monitoring target data frame with a monitoring target transmission source bus connected to a transmission source electronic control unit. Whether the reception bus matches the monitoring target transmission source bus is determined based on the monitoring target information in response to determining that the received data frame is a monitoring target data frame. An abnormality detection on the received data frame is performed in response to determining that the reception bus matches the monitoring target transmission source bus.

Abstract: In an anomaly detection by an electronic control unit connected to an other electronic control unit via a communication network, a data frame is received from the other electronic control unit, and a reception interval is calculated between a first data frame and a second data frame received immediately before the first data frame. A determination value for determining whether the data frame is anomalous is updated by adding a predetermined value to the determination value when the reception interval is equal to or less than a threshold value, and the data frame is determined to be anomalous when the determination value exceeds a limit value.

Abstract: A gateway apparatus is connected to a plurality of buses. A data frame is received by using one of the plurality of buses as a reception bus. Whether the received data frame is a monitoring target data frame is determined based on monitoring target information. The monitoring target information is stored in a storage to associate the monitoring target data frame with a monitoring target transmission source bus connected to a transmission source electronic control unit. Whether the reception bus matches the monitoring target transmission source bus is determined based on the monitoring target information in response to determining that the received data frame is a monitoring target data frame. An abnormality detection on the received data frame is performed in response to determining that the reception bus matches the monitoring target transmission source bus.

Abstract: In an anomaly detection by an electronic control unit connected to an other electronic control unit via a communication network, a data frame is received from the other electronic control unit, and a reception interval is calculated between a first data frame and a second data frame received immediately before the first data frame. A determination value for determining whether the data frame is anomalous is updated by adding a predetermined value to the determination value when the reception interval is equal to or less than a threshold value, and the data frame is determined to be anomalous when the determination value exceeds a limit value.