Abstract:The railway infrastructure constitutes a type of operational technology (OT)-based critical infrastructure, which is expected to work 24x7, 365 days a year, and where the life expectancy of operational equipment often exceeds 30 years. In this domain, an operational anomaly compromising the OT system can cause a train accident or interrupt traffic, with potentially significant impact in terms of business as well as for passenger safety. Due to their relevance, railways are strategic assets of national interest and, consequently, targets of interest for cybercriminals and cyberwarfare activities. For instance, service interruptions may trigger ripple effects resulting in product shortages and widespread supply chain disruptions, with severe impacts for both the economy and national security. In a bid to optimise and streamline operations. the railway industry has recently started taking a series of significant steps towards digitization, with infrastructures experiencing a significant paradigm shift which, for instance, makes it possible to have centralised interlockings and Radio Block Centre (RBC) for an entire country, with geographical redundancy, ensuring the utmost availability and punctuality by moving the control logic to the cloud. Nevertheless, these developments must always be carried on within the scope of established cybersecurity standards and frameworks. This paper presents an analysis of the state of the art on railway cybersecurity, focused on the existing solutions based on the application of the CENELEC “Technical specification 50701 - Railway Application – Cybersecurity”, which is currently the latest European specification addressing railways, being designed to help suppliers, integrators, and operators to implement a cybersecurity risk assessment plan, the necessary controls, and the management of the complete system life cycle. Special attention will be paid to the conduit between the rail signal interlocking system, that controls the line signalling, and the Automatic Train Supervision (ATS) that runs in the Operational Control Centre (OCC), as this has been identified by the European Union Agency for Cybersecurity (ENISA) as one of the most critical systems identified by the operators of essential services.

A Security Architecture for Railway Signalling

Railway Infrastructure Cybersecurity: An Overview

Railway Cyber-Security in the Era of Interconnected Systems: A Survey

Analysis of Security Threats and Vulnerabilities for Train Control and Monitoring Systems

Rule-based anomaly detection for railway signalling networks

Design of a Safety Protocol in Railway Signaling Systems

Railway Defender Kill Chain to Predict and Detect Cyber-Attacks

Optimizing security vis-à-vis terrorist attacks. An application for public rail transport systems

Security Architecture for Secure Train Control and Monitoring System

Towards a Layered Architectural View for Security Analysis in SCADA Systems

Security Enhanced Authentication Protocol for Space-Ground Integrated Railway Networks

Software Enabled Security Architecture for Counteracting Attacks in Control Systems

Information Security and Privacy in Railway Transportation: A Systematic Review

Securing Wireless Communication in Critical Infrastructure: Challenges and Opportunities

Next-Gen Train Control / Management (TCMS) Architectures: “Drive-By-Data” System Integration Approach

A Geometrical Approach to Enhance Security Against Cyber Attacks in Digital Substations

A safety-related digital input system based on the analysis of the architectural constraints

Architecture and security of SCADA systems: A review

Blockchain enabled zero trust based authentication scheme for railway communication networks

Security Solutions for Local Wireless Networks in Control Applications based on Physical Layer Security