A Security Architecture for Railway Signalling

Schlehuber, Christian; Heinrich, Markus; Vateva-Gurova, Tsvetoslava; Katzenbeisser, Stefan; Suri, Neeraj

doi:10.1007/978-3-319-66266-4_21

Cited by 11 publications

(6 citation statements)

References 3 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Changes to the safety functionality of the railway system are required to undergo a lengthy admission process that conflicts with typical security update cycles. This "update problem", as identified in several other publications [1,2,5], is avoided by our anomaly detection. Our rules are derived once and are static such that updates are not required.…”

Section: Meritsmentioning

confidence: 82%

“…There are several publications on other cyber-physical systems (CPSs) and ICSs with comparable properties that are relevant to our investigation of defending against semantic attacks. Schlehuber et al [1,2] have described the challenges of protecting safety-critical railway signalling from cyberattacks. Railway signalling systems are designed and certified for multiple decades of lifetime assuming they do not experience significant modification.…”

Section: Related Workmentioning

confidence: 99%

“…On top of the Ethernet, IP and UDP stack, a transport protocol called Rail Safe Transport Application (RaSTA) is standardised in Germany, that provides only limited security properties to protect against cyberattacks [11]. Authentication and integrity have already been identified as security requirements of railway signalling and several solutions have been proposed to mitigate security risks [1,2,6]. However, for several reasons it is important to deploy further security measures in signalling networks.…”

Section: Attacker Modelmentioning

confidence: 99%

“…Railway signalling systems, like many other industrial control systems (ICSs), increasingly leverage commercial off-the-shelf (COTS) hardware, public networks and open protocols in order to exploit the benefits of standardized products. At the same time, this transformation exposes railway signalling to a range of new security threats [1][2][3][4][5] because standard products lower the threshold for attacks by vulnerabilities becoming public more likely and being easier to exploit. Physical protection of railway signalling infrastructure is virtually impossible due to its spatial extension along the railway tracks.…”

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

Rule-based Anomaly Detection for Railway Signalling Networks

Heinrich¹,

Gölz²,

Arul³

et al. 2020

Preprint

Self Cite

View full text Add to dashboard Cite

We propose a rule-based anomaly detection system for railway signalling that mitigates attacks by a Dolev-Yao attacker who is able to inject control commands and to perform semantic attacks. The system as well mitigates the effects of a compromised signal box that an attacker uses to issue licit but mistimed control messages. We consider an attacker that could cause train derailments and collisions, if our countermeasure is not employed. We apply safety principles of railway operation to a distributed anomaly detection system that inspects incoming commands on the signals and points. The proposed anomaly detection system detects all attacks of our model without producing false positives, while it requires only a small amount of overhead in terms of network communication and latency compared to normal train operation.

show abstract

Section: Meritsmentioning

confidence: 82%

Section: Related Workmentioning

confidence: 99%

Section: Attacker Modelmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Rule-based Anomaly Detection for Railway Signalling Networks

Heinrich¹,

Gölz²,

Arul³

et al. 2020

Preprint

Self Cite

View full text Add to dashboard Cite

show abstract

“…Researchers have proposed cybersecurity architectures and frameworks based on various models and standards, like, ‘sliding scale’ model, 98,99 CKC model, 100–102 diamond model, 103,104 IEC 62443-3-2 standard 105,106 and DIN VDE V 0831-104 standard. 107,108 To analyse cyberattacks, researchers have provided an integrated framework by applying security assessment methods, like, Failure Modes, Vulnerabilities and Effects Analysis (FMVEA), and Attack Trees. 109 Table 3 shows the summary of the observation of papers that result in cybersecurity frameworks and architectures.…”

Section: Resultsmentioning

confidence: 99%

A review on cybersecurity in railways

Kour

Patwardhan

Thaduri

et al. 2022

Proceedings of the Institution of Mechanical Engineers, Part F:

View full text Add to dashboard Cite

Digitalisation is transforming the railway globally. One of the major considerations in digital transformation of any industry including the railway is the increased exposure to cyberattacks. The railway industry is vulnerable to these attacks because since the number of digital items and also number of interfaces between digital and physical components in the railway systems keep increasing. Increased number of items and interfaces require new frameworks, concepts and architectures to ensure the railway system’s resilience with respect to cybersecurity challenges, such as lack of proactiveness, lack of holistic perspective and obsolescence of safety systems exposed to current and future cyber threats landscape. To this date, there are several works carried out in the literature that studied the cybersecurity aspects and its application on railway infrastructure. However, to develop and implement an appropriate roadmap to cybersecurity in railways, there is a need of describing emerging challenges, and approaches to deal with these challenges and the possibilities and benefits of these. Hence, the objective of this paper is to provide a systematic review and outline cybersecurity emerging trends and approaches, and also to identify possible solutions by querying literature, academic and industrial, for future directions. The authors of this paper conducted separate searches through four popular databases, that is, Google Scholar, Scopus, Web of Science and IEEE explore. For the screening process, authors have used keywords with Boolean operators and database filters and identified 90 articles most relevant to the study domain. The analysis of 90 articles shows that majority of the cybersecurity studies lies within the railways are conceptual and lags in application of Artificial Intelligence (AI) based security. Like other industries, it is very important that railways should also follow latest security technologies, trends and train their workforce for cyber hygiene since railways are already in digitalization transition mode.

show abstract

Merging Worlds – Aligning Safety and Security

Schlehuber

Renkel²

2019

Reliability, Safety, and Security of Railway Systems. Modelling, Analysis, Verification, and Certification

View full text Add to dashboard Cite

A Security Architecture for Railway Signalling

Cited by 11 publications

References 3 publications

Rule-based Anomaly Detection for Railway Signalling Networks

Rule-based Anomaly Detection for Railway Signalling Networks

A review on cybersecurity in railways

Merging Worlds – Aligning Safety and Security

Contact Info

Product

Resources

About