Thrillers like books and movies highlight the importance of safety on trains. While the sharp instincts of heroes save the day in fiction, real-world safety and security require nuanced engineering and expertise.
Cyber secure trains
That complexity is why a confidential state Department of Transportation enlisted our cybersecurity team as part of their rail expansion program. Our mission: deliver a comprehensive assessment of train coaches, control systems and operational procedures to enhance cybersecurity resilience. Our team’s job was to identify vulnerabilities that adversaries could exploit to cause a catastrophic infrastructure failure — the kind of chaos depicted in movies and books.
From reviewing car-to-car connectivity and analyzing the cyber maturity of supply chain and service partners to scrutinizing critical control systems, we developed a comprehensive risk management framework to guide future decisions. This effort will continue through design, construction and fabrication.
Sweating the small stuff
In delivering on this task, our team completed detailed assessments of all product submittals and design documentation for train and critical control systems. For example, we conducted an extensive review of the Vehicle Monitoring System design, which includes door functionality; heating, ventilation and cooling, braking systems, public address/communication systems, CCTV, event recorders, train controls and train-to-ground communication systems. Additionally, we advised on policies and procedures to run a complex network with cybersecurity at the forefront, including training and awareness recommendations for staff.
