A method for operating a bus system in which a message of the bus system is received and its validity is ascertained, characterized in that, when it has been ascertained that the message is “not valid”, a defend message is transmitted to a designated recipient of the message, the defend message being configured so that the designated recipient is instructed by way of the defend message to initiate defensive measures against the message.