For the security defense in the current Intelligent Transportation System (ITS). malware is often used as the security analysis data source. but only the known attack type can be detected. A general anomaly detection framework is proposed. https://www.jandroutboard.com/product-category/bag/