Security Analysis of Urban Railway Systems: The Need for a Cyber-Physical Perspective

Chen, Binbin; Schmittner, Christoph; Ma, Zhenliang; Temple, William G.; Dong, Xinshu; Jones, Douglas L.; Sanders, William H.

doi:10.1007/978-3-319-24249-1_24

Cited by 33 publications

(15 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The train continuously sends traveling data, such as location and traveling speed, to the wayside equipment over a Wi-Fi connection. With this information, the limit of movement authority (LMA), which consists of the limit of speed and distance the train is permitted to travel, is calculated on the wayside's traffic control center and sent back to the train [23]. Based on this information, the train onboard ATC equipment continuously keeps the safety distance to any preceding trains adjusting the train speed.…”

Section: Communications-based Train Controlmentioning

confidence: 99%

“…Urban railway systems are progressively more dependent on unified communications, integrated wireless signals, and computers. This transformation raises crucial cyber-security concerns [23]. In the next section, a risk prevention analysis of the CBTC system is performed, with the main focus on this system's cyber-security concerns.…”

Section: Communications-based Train Controlmentioning

confidence: 99%

See 1 more Smart Citation

Failure Mode and Effect Analysis for Cyber-Physical Systems

et al. 2020

View full text Add to dashboard Cite

Cyber-Physical Systems (CPS) are a prominent component of the modern digital transformation, which combines the dynamics of the physical processes with those of software and networks. Critical infrastructures have built-in CPS, and assessing its risk is crucial to avoid significant losses, both economic and social. As CPS are increasingly attached to the world’s main industries, these systems’ criticality depends not only on software efficiency and availability but also on cyber-security awareness. Given this, and because Failure Mode and Effect Analysis (FMEA) is one of the most effective methods to assess critical infrastructures’ risk, in this paper, we show how this method performs in the analysis of CPS threats, also exposing the main drawbacks concerning CPS risk assessment. We first propose a risk prevention analysis to the Communications-Based Train Control (CBTC) system, which involves exploiting cyber vulnerabilities, and we introduce a novel approach to the failure modes’ Risk Priority Number (RPN) estimation. We also propose how to adapt the FMEA method to the requirement of CPS risk evaluation. We applied the proposed procedure to the CBTC system use case since it is a CPS with a substantial cyber component and network data transfer.

show abstract

Section: Communications-based Train Controlmentioning

confidence: 99%

Section: Communications-based Train Controlmentioning

confidence: 99%

Failure Mode and Effect Analysis for Cyber-Physical Systems

et al. 2020

View full text Add to dashboard Cite

show abstract

“…Over-pressurization of a vessel example [6] Power and Utilities FMVEA OTA system [5], Telematics control unit [7], Engine test-stand [24], Communications-based train control system [25].…”

Section: Fact Graphmentioning

confidence: 99%

Integrated Safety and Security Risk Assessment Methods: A Survey of Key Characteristics and Applications

Chockalingam

Hadžiosmanović²,

Pieters

et al. 2017

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Over the last years, we have seen several security incidents that compromised system safety, of which some caused physical harm to people. Meanwhile, various risk assessment methods have been developed that integrate safety and security, and these could help to address the corresponding threats by implementing suitable risk treatment plans. However, an overarching overview of these methods, systematizing the characteristics of such methods, is missing. In this paper, we conduct a systematic literature review, and identify 7 integrated safety and security risk assessment methods. We analyze these methods based on 5 different criteria, and identify key characteristics and applications. A key outcome is the distinction between sequential and non-sequential integration of safety and security, related to the order in which safety and security risks are assessed. This study provides a basis for developing more effective integrated safety and security risk assessment methods in the future.

show abstract

“…any fail in systems controlling drive-less metros will lead to huge loss. Security breaches in the cyber domain, such as falsified information or malicious control logic, can have a complicated impact on the physical domain [3]. "The cyber breach will lead to complicated physical consequences".…”

mentioning

confidence: 99%

A Comprehensive Framework for the Security Risk Management of Cyber-Physical Systems

Mokalled

Pragliola

Debertol

et al. 2019

Resilience of Cyber-Physical Systems

View full text Add to dashboard Cite

Cyber Physical Systems are facing huge and diverse set of security risks, especially cyber-attacks that can cause disruption to physical services or create a national disaster. Information and communication technology (ICT) has made a remarkable impact on the society. A Cyber Physical System (CPS) relies basically on information and communication technology, which puts the system's assets under certain risks especially cyber ones, and hence they must be kept under control by means of security countermeasures that generate confidence in the use of these assets. And so there is a critical need to give a great attention on the cybersecurity of these systems, which consequently leads to the safety of the physical world. This goal is achieved by adopting a solution that applies processes, plans and actions to prevent or reduce the effects of threats. Traditional IT risk assessment methods can do the job, however, and because of the characteristics of a CPS, it is more efficient to adopt a solution that is wider than a method, and addresses the type, functionalities and complexity of a CPS. This chapter proposes a framework that breaks the restriction to a traditional risk assessment method and encompasses wider set of procedures to achieve a high level strategy that could be adopted in the risk management process, in particular the cybersecurity of cyber-physical systems.

show abstract

Security Analysis of Urban Railway Systems: The Need for a Cyber-Physical Perspective

Cited by 33 publications

References 10 publications

Failure Mode and Effect Analysis for Cyber-Physical Systems

Failure Mode and Effect Analysis for Cyber-Physical Systems

Integrated Safety and Security Risk Assessment Methods: A Survey of Key Characteristics and Applications

A Comprehensive Framework for the Security Risk Management of Cyber-Physical Systems

Contact Info

Product

Resources

About