Scenario 5: ERTMS attack Sample Clauses

Scenario 5: ERTMS attack. The European Railway Traffic Management System (ERTMS) is a major industrial project that aims to replace the many different national train control and command systems in Europe with a standardised system. Nevertheless, although this upgrade introduces many advantages such as the interoperability between networks and reduces maintenance costs, it also increases the risk of cyber-attack on the rail infrastructure, since it brings more systems under centralised control, increasing the attack surface. In “The risk assessment of ERTMS-based railway systems from a cyber security perspective: methodology and lessons learned”, [Bloomfield et al., 2016] perform a high-level risk assessment on attacks to the railway signalling and control system that could have a high impact such as: • Cyber-attacks that result in unsafe train movements. (e.g. a collision involving multiple trains, a derailment of a train) • Cyber-attacks that result in loss of service that could lead to serious transport disruptions. (e.g. widespread disruption of train service over a large area) These kinds of attacks could have a serious impact in rail operators, causing loss of service (economic and/or reputation damage) for several days, or even a large number of deaths in a worst-case scenario (e.g. a cyber-terrorist group attacking a train). Figure 28: ERMTS attack scenario below represents a cyber-attack by eavesdropping GSM-R data for bypassing the authenticating system (e.g. EuroRadio) and being able to send malicious orders to the train.