For the security defense in the current Intelligent Transportation System (ITS). malware is often used as the security analysis data source. but only the known attack type can be detected. A general anomaly detection framework is proposed. https://www.jalyttlers.shop/product-category/leaf-dish/