Cyber-Physical Vulnerability Analysis of Communication-Based Train Control

Kim, Sangjun; Won, Yuchang; Park, In-Hee; Eun, Yongsoon; Park, Kyung‐Joon

doi:10.1109/jiot.2019.2919066

Cited by 48 publications

(24 citation statements)

References 24 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In the worst-case scenario, this may cause a communication failure. If the wireless signal continues to be jammed and consequently the communication disconnected, the train stops for safety [28].…”

Section: Cbtc Risk Prevention Analysismentioning

confidence: 99%

See 1 more Smart Citation

Failure Mode and Effect Analysis for Cyber-Physical Systems

et al. 2020

View full text Add to dashboard Cite

Cyber-Physical Systems (CPS) are a prominent component of the modern digital transformation, which combines the dynamics of the physical processes with those of software and networks. Critical infrastructures have built-in CPS, and assessing its risk is crucial to avoid significant losses, both economic and social. As CPS are increasingly attached to the world’s main industries, these systems’ criticality depends not only on software efficiency and availability but also on cyber-security awareness. Given this, and because Failure Mode and Effect Analysis (FMEA) is one of the most effective methods to assess critical infrastructures’ risk, in this paper, we show how this method performs in the analysis of CPS threats, also exposing the main drawbacks concerning CPS risk assessment. We first propose a risk prevention analysis to the Communications-Based Train Control (CBTC) system, which involves exploiting cyber vulnerabilities, and we introduce a novel approach to the failure modes’ Risk Priority Number (RPN) estimation. We also propose how to adapt the FMEA method to the requirement of CPS risk evaluation. We applied the proposed procedure to the CBTC system use case since it is a CPS with a substantial cyber component and network data transfer.

show abstract

Section: Cbtc Risk Prevention Analysismentioning

confidence: 99%

“…As Wi-Fi networks are susceptible to MitM attacks, these can be carried at the data-link layer of the Open System Interconnection (OSI) model, which is the base for the Wi-Fi communication protocol. The Address Resolution Protocol (ARP) spoofing is one of many methods for performing a MitM attack [28].…”

Section: Cbtc Risk Prevention Analysismentioning

confidence: 99%

Failure Mode and Effect Analysis for Cyber-Physical Systems

et al. 2020

View full text Add to dashboard Cite

show abstract

“…Abdi et al [17] concerned about the risk of security caused by information security attacks and proposed a new protection framework to ensure the safety of smart factories. Kim et al [18] discussed the safety issues regarding train collisions caused by train safety signals and studied the vulnerability of CPS safety and security. Wang et al [19] realized the optimization of safety systems and enhancement of security strategies by means of optimizing defensive resource allocation, their measurement increased the robustness of CPS.…”

Section: Related Workmentioning

confidence: 99%

Integrated Functional Safety and Security Diagnosis Mechanism of CPS Based on Blockchain

Yin

Cui

et al. 2020

IEEE Access

View full text Add to dashboard Cite

This paper proposes a functional safety and information security protection mechanism based on blockchain technology. The design of the basic level and integration level blockchain structure of CPS distributed architecture and related functional safety and information security measures are introduced. An effective communication judgment mechanism based on functional safety error threshold is proposed, which is stored and judged by smart contract. And a refund transaction with a clock is proposed to ensure the effective execution of the functional safety error threshold mechanism. The article takes cyber physical machine tool system as an example to describe the SIL judgment method of CPS physical equipment and functional safety loop and combines SIL with fault diagnosis and risk protection. Finally, the rationality of our proposed mechanism is proved by information security, functional security, real-time and maintainability.

show abstract

“…In recent years, due to the computer's computing processing capabilities and the longdistance communication capabilities of communication networks, cyber-physical systems that combine computing sources, communication networks, and physical objects have received increasing attention [5,14,26,27,33]. Numerous practical applications, such as smart grids, water distribution systems and unmanned ground vehicles, have testified the prospects of cyber-physical systems in modern critical infrastructure.…”

Section: Introductionmentioning

confidence: 99%