Link anomaly detector

1. A system for anomalous communication detection, comprising:

a first processor;

a second processor;

an inter-processor link to connect the second processor to the first processor; and

an anomalous detector and corrector module (ADCM) located on at least one of the first processor and the second processor, the ADCM to monitor a data exchange over the inter-processor link and initiate a correction action in response to an identification that the data exchange over the inter-processor link is anomalous when analyzed against a trained model, wherein the ADCM is located on a more powerful processor between the first and the second processor, and the ADCM monitors data exchange both outgoing and incoming over the inter-processor link to the more powerful processor.

2. The system of claim 1 , wherein the ADCM comprises a trained model of nominal data exchange over the inter-processor link.

3. The system of claim 2 , wherein the ADCM identifies that data exchange over the inter-processor link is anomalous in response to the ADCM analyzing the data exchange over the inter-processor link against the trained model of nominal data exchange over the inter-processor link.

4. The system of claim 1 , comprising a second ADCM, wherein the ADCM is located on the first processor and the second ADCM is located on the second processor and both the ADCM and the second ADCM monitor the inter-processor link.

5. The system of claim 4 , comprising:

a third processor;

a second inter-processor link between the third processor and the second processor; and

a third ADCM located on the third processor to monitor the data exchange of the second inter-processor link.

6. The system of claim 1 , comprising a vehicle bus, wherein the first processor is communicatively connected to the vehicle bus, and the second processor is communicatively connected to the vehicle bus solely through an interceding connection to the first processor.

7. The system of claim 1 , wherein the correction action is a notification to a user of an anomalous communication.

8. The system of claim 1 , wherein the correction action is to block communications arriving from sources that are not connected to a vehicle bus in order to block communication coming from unauthorized sources.

9. The system of claim 1 , wherein the correction action is an instruction to block a most recently added channel of communication from a source not connected to a vehicle bus to the first processor or the second processor.

10. A method for anomalous communication detection, comprising:

generating a nominal data exchange model from a data exchange over an inter-processor link during vehicle testing;

monitoring, with an anomalous detection and correction module (ADCM), a production data exchange over the inter-processor link between a first processor and a second processor, wherein the ADCM is located on a more powerful processor between the first and the second processor, and the ADCM to monitor data exchange both outgoing and incoming over the inter-processor link to the more powerful processor;

analyzing, with the ADCM, the production data exchange to the nominal data exchange model; and

initiating a correction action in response to an identification that the data exchange over the inter-processor link is anomalous from the nominal data exchange model.

11. The method of claim 10 , wherein the ADCM is located on the first processor and a second ADCM is located on the second processor and both the ADCM and the second ADCM monitor the first inter-processor link.

12. The method of claim 10 , wherein the correction action is a notification to a user of an anomalous communication.

13. The method of claim 10 , wherein the correction action is to block communications arriving from sources that are not connected to a vehicle bus in order to block communication coming from unauthorized sources.

14. The method of claim 10 , wherein the correction action is an instruction to block a most recently added channel of communication from a source not connected to a vehicle bus to the first processor or the second processor.

15. A non-transitory computer-readable medium containing instructions that when executed on a processor, cause the processor to:

generate a nominal data exchange model from a data exchange over an inter-processor link during vehicle testing;

monitor, with an anomalous detection and correction module (ADCM), a production data exchange over the inter-processor link between the processor and a second processor, wherein the ADCM is located on a more powerful processor between the first and the second processor, and the ADCM to monitor data exchange both outgoing and incoming over the inter-processor link to the more powerful processor;

analyze, with the ADCM, the production data exchange to the nominal data exchange model; and

initiate a correction action in response to an identification that the data exchange over the inter-processor link is anomalous from the nominal data exchange model.

16. The computer-readable medium of claim 15 , wherein the correction action is a notification to a user of an anomalous communication.

17. The computer-readable medium of claim 15 , wherein the correction action is to block communications arriving from sources that are not connected to a vehicle bus in order to block communication coming from unauthorized sources.

18. The computer-readable medium of claim 15 , wherein the correction action is an instruction to block a most recently added channel of communication from a source not connected to a vehicle bus to the processor or the second processor.