CAN-Trace Attack: Exploit CAN Messages to Uncover Driving Trajectories