Why Railway Is Safe But Not Secure - Security of Railway Communication Protocols

Explore the complex world of railway communication security in this 42-minute conference talk from the 37C3 event. Delve into the unique challenges faced by railway systems, where safety and security often clash due to legacy infrastructure and protocols. Examine the differences between corporate IT and railway communication networks, understanding why introducing modern security measures is problematic. Learn about key railway-specific protocols like GSM-R, RaSTA, and ETCS/ERMTS, their security models, and known vulnerabilities. Discover why railways, despite being one of the safest modes of travel, struggle with cybersecurity issues. Gain insights into the standardization processes that both protect and hinder the evolution of railway systems. By the end of this talk, grasp the intricacies of railway communication security and understand why stopping a train might be simpler than starting one.