Abstract:With the rapid development of railway transportation, higher requirements for capacity are increasing and amount of communication, computer and control technologies are applied in train control systems which is the popular method for train control. The application of 3 C brings the enhancement of railway transportation performance. However, the number of internal and external cyber security threats is rising, which could lead to some railway accidents. On the other hand, safety is the core of the design process for railway but security is rarely considered due to the closure of traditional railway systems. As cyber security is threatening the normal operation of industrial control systems and the critical infrastructure, security issues of train control systems should be paid more attention as railway transportation play an important role for society and economy. However, due to the safety-critical characteristics, safety assessment and analysis works have been performed for a long time, but cyber security related works are rarely considered. In the paper, we demonstrate the security situation of train control systems based on the inherent features and the experience of other industrial control systems, where the technical defects and potential threats are summarized. According to the practical engineering experience, the current security protection strategies are illustrated, which shows the popular security protection methods are limited and cannot realize the defense-in-depth. Finally, some research challenges of security issues of train control systems are identified.

A Safety-Security Assessment Approach for Communication-Based Train Control (CBTC) Systems Based on the Extended Fault Tree

A Resilience-Based Security Assessment Approach for CBTC Systems

An Attack Tree-Based Approach for Vulnerability Assessment of Communication-Based Train Control Systems

A 2D Structure Entropy-based Approach to Security Assessment of Communication-based Train Control System

A Resilience-Based Security Assessment Approach for Railway Signalling Systems

Developing CBTC system safety requirement hierarchy through STPA methodology

Safety monitor for train-centric CBTC system

Automatic Safety Analysis of of Computer-Based Railway Signalling System

Analysis of Configuration Data Errors in Communication-based Train Control Systems.

A Cyber Security Risk Assessment Methodology for CBTC Systems Based on Complex Network Theory and Attack Graph

Hybrid Intrusion Detection with Decision Tree and Critical State Analysis for CBTC

Security of Railway Control Systems: A Survey, Research Issues and Challenges

A Safety Management and Signaling System Integration Method for Communication-Based Train Control System

Research on Fault Tracing Method of Communication-Based Train Control System

A Model-Based Framework for the Safety Analysis of Computer-Based Railway Signalling Systems

Attacks and Counter Defense Mechanisms for CBTC Systems: System Modeling and Availability Analysis.

Study of Fault Diagnosis Method for Train Control System

A Comprehensive Resilient Control Strategy for CBTC Systems Through Train-to-Train Communications under Malicious Attacks

Security Analysis for CBTC Systems under Attack–Defense Confrontation

A Functional Safety Analysis Approach for Analyzing CBTC System

Challenge to introduce MBSA approaches into CBTC safety analysis