Abstract: Aiming at the information security problems of invehicle network, on the basis of anomaly detection method of the controller area network (CAN) bus, we
proposed an anomaly detection method for CAN bus message based on the random forest model. Firstly, a large number of normal and abnormal message data were used to construct a random forest model and perform a series of parameter adjustments. Secondly, the CAN bus message to be detected was input into a random forest model of the corresponding ID. Finally, a classification of the normal or abnormal message was completed by the model.  The results of simulation experiment show that the model can effectively detect the abnormal data on the bus, and improve the safety of the vehicle operation.

Key words: invehicle CAN bus, anomaly detection,  Internet of vehicle, random forest