Vehicle-mounted internal network intrusion detection system

The embodiment of the invention provides a vehicle-mounted internal network intrusion detection system. A flow collection module collects flow data on a vehicle-mounted CAN, and transmits the flow data to a flow preprocessing module, wherein the flow data comprises a data frame corresponding to an identification ID; the flow preprocessing module acquires a detection judgment value of the flow dataand sends the detection judgment value to a multi-dimensional intrusion detection module,wherein the detection judgment value comprises at least one selected from a flow state diagram of the flow data in a preset time window, a value of a preset position in a data frame corresponding to the ID, and a frequency value of the ID in the preset time window; and the multi-dimensional intrusion detection module detects whether the data frame corresponding to the ID is abnormal data based on the flow state diagram, the value of the preset position in the data frame corresponding to the ID and/or thefrequency value of the ID