Vehicle attack event continuity determination method, vehicle attack event continuity determination device, and non-transitory computer-readable recording medium

Abstract

A vehicle attack continuity determination method includes: obtaining first vehicle attack event information pertaining to a first vehicle attack event which has occurred in an in-vehicle network, second vehicle attack event information pertaining to a second vehicle attack event which has occurred in the in-vehicle network before the first vehicle attack event, and in-vehicle network information indicating a configuration of the in-vehicle network; determining whether there is continuity between the first vehicle attack event and the second vehicle attack event based on the first vehicle attack event information, the second vehicle attack event information, and the in-vehicle network information; and outputting a result of the determining.