Abstract
In recent years, the risk of cyberattacks on automobiles has increased with the proliferation of connected cars. In order to properly deal with cyberattacks on automobiles, it is necessary to analyze logs obtained from automobiles accurately and promptly. In this paper, we propose a log analysis framework for automobiles that specifies logs to be analyzed to identify the cause of cyberattacks on automotives. We applied the proposed framework to a sample system and confirmed that the number of log types to be analyzed was reduced by 18%.