Abstract: Provided is an apparatus for security of vehicle CAN communication including a security module unit included in each node of a vehicle CAN communication network and configured to monitor an identifier (ID) of each CAN message received through a CAN transceiver to determine whether the CAN message is a malicious CAN message to perform error processing, and a control unit configured to set an ID to be monitored by the security module unit and control the security module unit not to perform monitoring on the ID when the node transmits the CAN message.