A method (500) for protection of a vehicle (100), the method comprising: receiving information from a sensor (502); comparing the information with known signatures indicative of a likely attack (504); determining whether a known signature indicative of a likely attack is present (506); and if a known signature indicative of a likely attack is present, placing at least one system of the vehicle into a heightened state of alert (508).