Trainwreck: Study Calls for Rethink of Rail Security

The article reports on a study of railway CBCS/SCADA security which finds that rail industry safety standards focus on physical failures and functional safety but largely ignore remote cyber threats introduced by TCP/IP-based communications, wireless networks, and remote management tools; the authors warn this gap enables attacks that could degrade reliability, bypass safety mechanisms, and endanger rail traffic, and they recommend reframing cyber security around ensuring safe operation of signalling systems under IT attack.