Timing-based + learned-model intrusion detection for the automotive CAN bus — detects flooding, injection, replay, and Bus-Off attacks. Zero-dependency Python, tested.