For the security defense in the current Intelligent Transportation System (ITS). malware is often used as the security analysis data source. but only the known attack type can be detected. A general anomaly detection framework is proposed. https://www.roneverhart.com/Trinity-Bay-Artisanal-Siberian-Vodka/