Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
This study conducts a systematic risk analysis of the European Rail Traffic Management System (ERTMS), highlighting significant cybersecurity vulnerabilities stemming from legacy technologies such as EuroBalises and GSM-R. By modeling ERTMS components and assessing their security against identified threats, the research reveals that the current state of ERTMS poses serious risks to railway safety. The findings emphasize the urgent need for a transition to the European Train Control System (ETCS) level 2 to enhance cybersecurity measures within ERTMS implementations.
ERTMS is critically vulnerable due to outdated technologies, and transitioning to ETCS level 2 is essential for improving its cybersecurity posture.
European Rail Traffic Management System (ERTMS) is a widely adopted standard unifying train management in the EU. While the standard allows for use cases like fully autonomous driving, cybersecurity has been an afterthought. Risk analysis enables the systematic assessment and prioritization of threats and mitigations. To date, it remains unclear which threats are most significant in ERTMS. This study systematically models components of ERTMS and analyzes their security in light of threats identified in the underlying technologies. The results suggest a concerning state of ERTMS, despite its critical role in railway safety. The use of legacy standards like EuroBalises and GSM-Railway (GSM-R) introduces vulnerabilities that persist across minimal ERTMS implementations, deployments incorporating various optional safety measures, and prospective future evolutions of the system, e.g., adopting Future Railway Mobile Communication System (FRMCS). Fully transitioning to European Train Control System (ETCS) level 2 was identified as the most significant measure for advancing ERTMS cybersecurity. The results indicate that a shift of ERTMS toward security is required to ensure availability and safe operation. While the chosen methodology proved its feasibility and shows remaining weaknesses of ERTMS, future work is needed to develop railway-centric adaptations to improve the quantification and evaluation of the computed risks.