Abstract: The present disclosure relates to systems and methods for determining a potential malicious event. The systems and methods may obtain real-time information related to a vehicle. The systems and methods may determine a probability of arising malicious event based on the real-time information of the vehicle. The systems and methods may determine whether the probability of arising malicious event exceeds a probability threshold. The systems and methods may in response to a determination that the probability of arising malicious event exceeds the probability threshold, determine that a potential malicious event exists.