Security monitor for a vehicle

1. A method of securing a controlled area network (CAN) of a vehicle, the CAN having a plurality of electronic control units (ECUs) for controlling electronically-controlled vehicular systems, the method comprising:

monitoring, using an electronic processor, an on-board diagnostic (OBD) port of the vehicle for activity, the OBD port being interconnected with the CAN, wherein the monitoring includes:

storing a baseline message profile for at least one of the ECUs of the CAN;

comparing a message in the monitored activity with the baseline message profile of the at least one ECU in the CAN;

flagging a message in the monitored activity as suspicious activity when the message in the monitored activity does not fit the baseline profile of the at least one ECU;

determining whether the flagged message relates to a critical ECU of the plurality of ECUs or to a non-critical ECU of the plurality of ECU;

generating an alert when any monitored activity is suspicious activity that indicates an attack; and

counteracting the suspicious activity to minimize potential harm resulting from the suspicious activity, the counteracting including

determining that the suspicious activity is an attack on a first critical ECU of the plurality of ECUs;

notifying a non-targeted second critical ECU of the plurality of ECUs about the attack on the first critical ECU; and

disabling a non-critical ECU of the plurality of ECUs when the determining determines that the flagged message relates to a critical ECU of the plurality of ECUs.

2. The method of claim 1 , wherein the monitoring includes:

connecting a security monitoring device to the ODB port of the vehicle.

3. The method of claim 1 , wherein the generating includes:

generating at least one of an audible alert and a visual alert.

4. The method of claim 1 , wherein the counteracting includes:

transmitting a reset command to the first critical ECU.

5. A system for securing a controlled area network (CAN) of a vehicle, the CAN having a plurality of electronic control units (ECUs) for controlling electronically-controlled vehicular systems, the system comprising:

a security monitoring device configured to be connected to an on-board diagnostic port (OBD) of the vehicle, the OBD port being interconnected with the CAN, the security monitoring device including

a warning status interface through which an alert is transmitted that suspicious activity has been detected;

an electronic processor having

a CAN driver configured to receive messages that originate external of the CAN;

an output driver coupled to the warning status interface;

wherein the electronic processor is configured to:

monitor the OBD port for activity;

determine whether any monitored activity includes suspicious activity, including

store a baseline message profile for at least one ECU of the plurality of ECUs;

compare a message in the monitored activity with the baseline message profile of the at least one ECU;

flag a message in the monitored activity as constituting suspicious activity when the message in the monitored activity does not fit the baseline message profile of the at least one ECU;

generate an alert when suspicious activity is detected;

generate a message to counteract the suspicious activity to minimize harm resulting from the suspicious activity, including

determine that the suspicious activity is an attack on a first critical ECU of the plurality of ECUs;

notify a non-targeted second critical ECU of the plurality of ECUs about the attack on the first critical ECU; and

disable a non-critical ECU of the plurality of ECUs of the vehicle when the electronic processor determines that the flagged message relates to a critical ECU of the plurality of ECUs.

6. The system of claim 5 , wherein the electronic processor is configured to:

generate at least one of an audible and a visual alert when any monitored activity includes suspicious activity.

7. The system of claim 5 , wherein the electronic processor is configured to:

transmit a reset command to the first critical ECU.

8. The method of claim 1 , further comprising:

running a pre-programmed countermeasure on the non-targeted second critical ECU.

9. The system of claim 5 , wherein the electronic processor is further configured to

run a pre-programmed countermeasure on the non-targeted second critical ECU.

10. A method of securing a controlled area network (CAN) of a vehicle, the CAN having a plurality of electronic control units (ECUs) for controlling electronically-controlled vehicular systems, the method comprising:

monitoring, using an electronic processor, an on-board diagnostic (OBD) port of the vehicle for activity, the OBD port being interconnected with the CAN, wherein the monitoring includes:

storing a baseline message profile for at least one of the ECUs of the plurality of ECUs;

comparing a message in the monitored activity with the baseline message profile of the at least one ECU;

flagging a message in the monitored activity as suspicious activity when the message in the monitored activity does not fit the baseline profile of the at least one ECU;

generating an alert when any monitored activity is suspicious activity that indicates an attack;

counteracting the suspicious activity to minimize potential harm resulting from the suspicious activity, the counteracting including

determining that the suspicious activity is an attack on a first critical ECU of the plurality of ECUs; and

flooding the CAN bus with high priority messages so that lower priority attack messages cannot get through the CAN bus to a non-attacked second ECU of the plurality of ECUs.

11. The method of claim 10 , wherein the monitoring includes:

connecting a security monitoring device to the ODB port of the vehicle.

12. The method of claim 10 , wherein the monitoring includes: determining whether the flagged message relates to a critical ECU of the plurality of ECUs or to a non-critical ECU of the plurality of ECUs.

13. The method of claim 10 , wherein the counteracting includes: disabling a non-critical ECU of the plurality of ECUs when the determining determines that the flagged message relates to a critical ECU of the plurality of ECUs.

14. The method of claim 10 , wherein the generating includes:

generating at least one of an audible alert and a visual alert.

15. The method of claim 10 , wherein the counteracting includes:

transmitting a reset command to the first critical ECU.

16. A system for securing a controlled area network (CAN) of a vehicle, the CAN having a plurality of electronic control units (ECUs) for controlling electronically-controlled vehicular systems, the system comprising:

a security monitoring device configured to be connected to an on-board diagnostic port (OBD) of the vehicle, the OBD port being interconnected with the CAN, the security monitoring device including

a warning status interface through which an alert is transmitted that suspicious activity has been detected;

an electronic processor having

a CAN driver configured to receive messages that originate external of the CAN;

an output driver coupled to the warning status interface;

wherein the electronic processor is configured to:

monitor the OBD port for activity;

determine whether any monitored activity includes suspicious activity, including

store a baseline message profile for at least one ECU of the plurality of ECUs;

compare a message in the monitored activity with the baseline message profile of the at least one ECU;

flag a message in the monitored activity as constituting suspicious activity when the message in the monitored activity does not fit the baseline message profile of the at least one ECU;

generate an alert when suspicious activity is detected;

generate messages to counteract the suspicious activity to minimize harm resulting from the suspicious activity, including

determine that the suspicious activity is an attack on a first critical ECU of the plurality of ECUs; and

flood the CAN bus with high priority messages so that lower priority attack messages cannot get through the CAN bus to a non-attacked second ECU of the plurality of ECUs.

17. The system of claim 16 , wherein the electronic processor is configured to:

disable a non-critical ECU of the plurality of ECUs when the electronic processor determines that the flagged message relates to a critical ECU of the plurality of ECUs.

18. The system of claim 16 , wherein the electronic processor is configured to:

generate at least one of an audible and a visual alert when any monitored activity includes suspicious activity.

19. The system of claim 16 , wherein the electronic processor is configured to:

transmit a reset command to the first critical ECU.