1. A method for detecting threats or attacks on an automobile network, the automobile network connected to a plurality of electronic components and an attack monitoring unit including a processor, the method comprising: monitoring, by the processor of the attack monitoring unit, data messages transmitted on the automobile network and establishing a baseline of data message activity based on the monitoring of the data messages transmitted on the automobile network, wherein the data messages are transmitted on the automobile network via a Controller Area Network (“CAN”) bus; determining, by the processor of the attack monitoring unit, whether at least one data message among the data messages transmitted on the automobile network is a threat to one or more of the plurality of electronic components on the automobile network by comparing the at least one data message transmitted on the automobile network to the established baseline of data message activity; wherein following the determining step, an operation state of the automobile containing the automobile network is also reviewed to evaluate whether the at least one data message among the data messages transmitted on the automobile network is a threat to one or more of the plurality of electronic components on the automobile network, wherein said operation state includes status of braking of the automobile, status of an engine of the automobile, position of a steering wheel of the automobile, and speedometer readout; and when it is determined, by the processor and the review of the operation state, that relative to the at least one data message the automobile is in an operation state that it should not be in, performing at least one action based on the threat.