Abstract: An attack analysis device configured to analyze an attack against an electronic control system constructed in a vehicle, the attack being against the electronic control system via a network is provided. The attack analysis device includes a determination section configured to determine whether correspondence information matches a preset type of the attack, the correspondence information being obtained by associating a system log that is a log of the electronic control system with a communication log that is a log of communication between the electronic control system and an outside of the vehicle, and determine whether a target element representing at least one of the electronic control system or a component of the electronic control system has been violated.

Abstract: An attack analysis device includes a storage device storing attack anomaly relation information indicating a relation among (i) predicted attack information indicating an attack predicted to be received by an electronic control system, (ii) predicted anomaly information indicating an anomaly predicted to occur when the electronic control system receives the predicted attack, and (iii) predicted anomaly location information indicating a location within the electronic control system where the predicted anomaly occurs. The attack analysis device is configured to: acquire a security log indicating (i) an anomaly detected in the electronic control system and (ii) a location where the anomaly is detected; acquire an indicator indicating an internal state and/or external state of the mobile object when the anomaly occurs; estimate the received attack based on (i) the security log, (ii) the attack anomaly relation information, and (iii) the indicator; and output the attack information indicating the estimated attack.

Abstract: In an attack monitoring center apparatus, an event log transmitted from an attack monitoring terminal apparatus is received via a communication network. A first pattern and a second pattern are read from an event log occurrence pattern database which describes event log occurrence patterns. The first pattern is referred to in response to an abnormality being detected in the attack monitoring center apparatus; the second pattern is referred to in response to an abnormality being detected in the attack monitoring terminal apparatus. An abnormality is detected based on the event log and the first pattern. The second pattern is transmitted to the attack monitoring terminal apparatus in response to detecting the abnormality based on the event log and the first pattern.

Abstract: An attack analyzer includes: a common log acquisition unit acquiring a common security log including abnormality information indicating abnormality detected by an electronic control system, and a common abnormality position indicating an abnormality position of the abnormality converted to be common among the electronic control system and other electronic control systems; an attack/abnormality relationship table storage unit storing an attack/abnormality relationship table; an estimation unit; and an output unit outputting attack information including the attack type.

Abstract: An attack analysis device stores attack abnormality relationship information indicating a relationship among (i) predicted attack information indicating an attack predicted to be received by an electronic control system, (ii) predicted abnormality information indicating an abnormality predicted to occur in response to the predicted attack, and (iii) predicted abnormality location information indicating a location within the electronic control system where the predicted abnormality occurs.

Abstract: A security monitoring system that detects abnormalities in moving body and analyzes a response method includes: a reception unit that receives a security log from the moving body; an attack determination unit that analyzes the security log to determine whether or not there was a cyber attack; a dynamic response permission confirmation unit that confirms whether communication with a software distribution management server (i.e., an over the air (OTA) center or simply a management server) is permitted; an information requesting unit that requests the OTA center for predetermined information when communication with the OTA center is permitted; and an execution instruction unit that instructs the OTA center to execute software update of the moving body based on the received predetermined information.

Abstract: A log analysis device is provided. The log analysis device receives a log indicating status of an electronic control system mounted in a movable object from the electronic control system, analyzes an abnormality in the electronic control system by using the log received. Depending on a result of the analyzing, the log analysis device determines, on a log-by-log basis, priority for the electronic control system to transmit the log to the log analysis device. Based on the priority determined, the log analysis device generates instruction information that gives an instruction for controlling transmission of the log, and transmits the instruction information to the electronic control system.

Abstract: A vehicle electronic control system includes a mode determination unit that is configured to determine whether a customization mode for a screen display related to an approval to a program update is set through a user's customization operation, and a screen display instruction unit that is configured to instruct the display terminal to display a progress screen of the program update according to a current update phase and a setting of the customization mode when the mode determination unit determines that the customization mode is set and instruct the display terminal to display the progress screen of the program update according to the current update phase and an initial setting when the mode determination unit determines that the customization mode is not set. The display terminal is configured to display the progress screen of the program update as instructed by the screen display instruction unit.

Abstract: A log transmission controller includes a log acquirer, a priority storage, an update instruction acquirer, a priority updater and a transmitter. The log acquirer acquires a log indicating respective states of electronic control units connected to the log transmission controller equipped in a moving object. The priority storage stores priority information indicating a priority for transmitting the log to a server. The update instruction acquirer acquires a first update instruction generated by an update instructor for updating the priority information, and second and third update instructions generated by the server for updating the priority information. The priority updater updates the priority information based on the update instruction. The transmitter transmits the log based on the priority. The first and second update instructions are for updating the priority to be higher than a predetermined priority, and the third update instruction is for updating the priority to the predetermined priority.

Abstract: A center device is provided that manages data to be written to electronic control units mounted on a vehicle. The center device includes an update data storage unit that stores update data for a data update target device among the electronic control units. The center device distributes the update data to the vehicle. The center device includes an individual vehicle configuration information storage unit that stores identification information of target vehicles targeted for update using the update data, and update status information regarding update completion status and update-in-progress status acquired as update status from target vehicles. The center device manages the update status information of the target vehicles in a statistically tabulatable manner on basis of the update status information.

Abstract: A vehicle electronic control system includes a center device and a vehicle master device. The center device includes: a campaign information obtainer obtaining campaign information of a program update; a vehicle state obtainer obtaining a vehicle state of a target vehicle of the program update; an execution requirement setter setting an execution requirement of a phase in the program update based on the campaign information obtained by the campaign information obtainer and the vehicle state obtained by the vehicle information obtainer; an execution requirement notifier notifying the vehicle master device of the execution requirement set by the execution requirement setter; and an update data deliverer delivering the update data to the vehicle master device.

Abstract: A vehicle electronic control system includes a center device and a master device and a data relay device capable of performing data communication therebetween. The center device obtains campaign information of the program update, transmits the obtained campaign information to the data relay device, and transmits the update data to the data relay device. When receiving the campaign information from the center device, the data relay device changes setting of the received campaign information and delivers the information to the master device, and, when receiving the update data from the center device, the data relay device delivers the received update data to the master device. When receiving the campaign information from the data relay device, the master device instructs a target electronic control device to update the program with the update data received from the data relay device according to the received campaign information.

Abstract: A data update device for electronic control devices includes: a charge schedule setting unit for setting a charge schedule of a battery of an electric vehicle; a charge control unit for charging the battery according to the charge schedule; and a data update control unit for updating data of one electronic control device by acquiring update data from a center device on a condition that an acknowledgement of the user is obtained when receiving a notification of the update data from the center device together with information about time required for the updating, and determining that the updating is possible even if the charge control unit charges the battery according to the charge schedule.

Abstract: A log transmission controller includes a log acquirer, a priority storage, an update instruction acquirer, a priority updater and a transmitter. The log acquirer acquires a log indicating respective states of electronic control units connected to the log transmission controller, which is equipped in a moving object. The priority storage stores priority information indicating a priority for transmitting the log to a server, which is disposed at exterior of the moving object. The update instruction acquirer acquires an update instruction, which is generated by an update instructor equipped in the moving object, for instructing to update the priority information stored in the priority storage. The priority updater updates the priority information based on the update instruction. The transmitter transmits the log to the server based on the priority indicated by the updated priority information.

Abstract: An attack analyzer includes: a common log acquisition unit acquiring a common security log including abnormality information indicating abnormality detected by an electronic control system, and a common abnormality position indicating an abnormality position of the abnormality converted to be common among the electronic control system and other electronic control systems; an attack/abnormality relationship table storage unit storing an attack/abnormality relationship table; an estimation unit; and an output unit outputting attack information including the attack type.

Abstract: In an attack monitoring center apparatus, an event log transmitted from an attack monitoring terminal apparatus is received via a communication network. A first pattern and a second pattern are read from an event log occurrence pattern database which describes event log occurrence patterns. The first pattern is referred to in response to an abnormality being detected in the attack monitoring center apparatus; the second pattern is referred to in response to an abnormality being detected in the attack monitoring terminal apparatus. An abnormality is detected based on the event log and the first pattern. The second pattern is transmitted to the attack monitoring terminal apparatus in response to detecting the abnormality based on the event log and the first pattern.

Abstract: A security monitoring system that detects abnormalities in moving body and analyzes a response method includes: a reception unit that receives a security log from the moving body; an attack determination unit that analyzes the security log to determine whether or not there was a cyber attack; a dynamic response permission confirmation unit that confirms whether communication with a software distribution management server (i.e., an OTA center or simply a management server) is permitted; an information requesting unit that requests the OTA center for predetermined information when communication with the OTA center is permitted; and an execution instruction unit that instructs the OTA center to execute software update of the moving body based on the received predetermined information.

Abstract: A log analysis device is provided. The log analysis device receives a log indicating status of an electronic control system mounted in a movable object from the electronic control system, analyzes an abnormality in the electronic control system by using the log received. Depending on a result of the analyzing, the log analysis device determines, on a log-by-log basis, priority for the electronic control system to transmit the log to the log analysis device. Based on the priority determined, the log analysis device generates instruction information that gives an instruction for controlling transmission of the log, and transmits the instruction information to the electronic control system.

Abstract: A center device is provided that receives a log from vehicle-mounted equipment transmitting the log based on an external transmission rule and analyzes the log to detect a cyber attack. Based on a result of the detecting, the center device determines update of the external transmission rule. The center devices transmits an external transmission rule update instruction. As attack depth of the cyber attack is deeper, the center device sets an external transmission target to the log that is generated in a deeper layer among layers in which constituent elements of the vehicle-mounted equipment are defined.

Abstract: A log transmission controller includes a log acquirer, a priority storage, an update instruction acquirer, a priority updater and a transmitter. The log acquirer acquires a log indicating respective states of electronic control units connected to the log transmission controller equipped in a moving object. The priority storage stores priority information indicating a priority for transmitting the log to a server. The update instruction acquirer acquires a first update instruction generated by an update instructor for updating the priority information, and second and third update instructions generated by the server for updating the priority information. The priority updater updates the priority information based on the update instruction. The transmitter transmits the log based on the priority. The first and second update instructions are for updating the priority to be higher than a predetermined priority, and the third update instruction is for updating the priority to the predetermined priority.