Change search
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf
eMaintenance in railways: Issues and challenges in cybersecurity
Luleå University of Technology, Department of Civil, Environmental and Natural Resources Engineering, Operation, Maintenance and Acoustics.ORCID iD: 0000-0003-0734-0959
Luleå University of Technology, Department of Civil, Environmental and Natural Resources Engineering, Operation, Maintenance and Acoustics.ORCID iD: 0000-0002-6135-3008
Luleå University of Technology, Department of Civil, Environmental and Natural Resources Engineering, Operation, Maintenance and Acoustics.ORCID iD: 0000-0002-0055-2740
Luleå University of Technology, Department of Civil, Environmental and Natural Resources Engineering, Operation, Maintenance and Acoustics.ORCID iD: 0000-0003-3827-0295
2019 (English)In: Proceedings of the Institution of mechanical engineers. Part F, journal of rail and rapid transit, ISSN 0954-4097, E-ISSN 2041-3017, Vol. 233, no 10, p. 1012-1022Article in journal (Refereed) Published
Abstract [en]

The convergence of information technology and operation technology and the associated paradigm shift toward Industry 4.0 in complex systems, such as railways has brought significant benefits in reliability, maintainability, operational efficiency, capacity, as well as improvements in passenger experience. However, with the adoption of information and communications technologies in railway maintenance, vulnerability to cyber threats has increased. It is essential that organizations move toward security analytics and automation to improve and prevent security breaches and to quickly identify and respond to security events. This paper provides a statistical review of cybersecurity incidents in the transportation sector with a focus on railways. It uses a web-based search for data collection in popular databases. The overall objective is to identify cybersecurity challenges in the railway sector.

Place, publisher, year, edition, pages
Sage Publications, 2019. Vol. 233, no 10, p. 1012-1022
Keywords [en]
Cybersecurity, railway, eMaintenance, challenges
National Category
Reliability and Maintenance Infrastructure Engineering Security, Privacy and Cryptography
Research subject
Operation and Maintenance Engineering
Identifiers
URN: urn:nbn:se:ltu:diva-72536DOI: 10.1177/0954409718822915ISI: 000483645500002Scopus ID: 2-s2.0-85060700293OAI: oai:DiVA.org:ltu-72536DiVA, id: diva2:1278349
Note

Validerad;2019;Nivå 2;2019-09-11 (johcin)

Available from: 2019-01-14 Created: 2019-01-14 Last updated: 2025-04-11Bibliographically approved
In thesis
1. Cybersecurity in Railway: A Framework for Improvement of Digital Asset Security
Open this publication in new window or tab >>Cybersecurity in Railway: A Framework for Improvement of Digital Asset Security
2020 (English)Doctoral thesis, comprehensive summary (Other academic)
Abstract [en]

Digitalisation changes operation and maintenance in railways. Emerging digital technologies facilitate implementation of enhanced eMaintenance solutions through utilisation of distributed computing and artificial intelligence. In railway, the digital technology deployment is expected to improve the railway system’s sustainability, availability, reliability, maintainability, capacity, safety, and security including cybersecurity. In digitalised railway, aspects of cybersecurity are essential in order to achieve overall system dependability. Lack of cybersecurity imposes negative impacts on the railways like reputational damage, heavy costs, service unavailability and risk to the safety of employees and passengers.

It has been observed, through open access data, that many railway organizations focus on detective measures of security threats with less emphasis on forecasting of cyber-attacks. In order to prepare in advance for cyberattacks, it is essential that Information and Communication Technology (ICT) and Operational Technology (OT) in railways need to undergo continuous updating towards security analytics approach. This approach will help the railways to produce proactive security measures to cyberattacks.

 In this work, it has been observed that there exists some standards and guidelines related to cybersecurity in railways (e.g. AS 7770- Rail Cyber Security, APTA SS-CCS-004-16, BS EN 50159:2010+A1:2020). These standards and guidelines are proprietary (i.e. either organization-specific or country-specific) and are followed by most of the railway organizations. These proprietary standards and guidelines lack in providing a holistic approach to enable interoperability, scalability, orchestration, adaptability, and agility for railway’s stakeholders. Therefore, there is a need for a generic cybersecurity framework for digitalized railways to facilitate proactive cybersecurity and threat intelligence sharing within the railways. 

The proposed framework, i.e., Cybersecurity Information Delivery Framework has been developed by integrating existing models, technologies, and standards to minimize the risks of cyber-attacks in the railways. The framework maps different layers of Open System Architecture for Condition-Based Maintenance (OSA-CBM) in the context of cybersecurity to deliver threat intelligence. The framework implements extended Cyber Kill Chain (CKC) and Industrial Control System (ICS) Kill Chain for detecting cyberattacks. The framework also incorporates proposed Railway Defender Kill Chain (RDKC) that enables proactive cybersecurity. Therefore, the proposed framework enables proactive cybersecurity and shares threat intelligence for improving cybersecurity in railways. 

Place, publisher, year, edition, pages
Luleå: Luleå University of Technology, 2020
Series
Doctoral thesis / Luleå University of Technology 1 jan 1997 → …, ISSN 1402-1544
Keywords
Cybersecurity, Framework, Railway, Operation and Maintenance, Railway Defender Kill Chain
National Category
Other Civil Engineering
Research subject
Operation and Maintenance
Identifiers
urn:nbn:se:ltu:diva-78488 (URN)978-91-7790-579-0 (ISBN)978-91-7790-580-6 (ISBN)
Public defence
2020-06-05, F1031, Luleå, 10:00 (English)
Opponent
Supervisors
Available from: 2020-04-15 Created: 2020-04-15 Last updated: 2021-10-15Bibliographically approved

Open Access in DiVA

No full text in DiVA

Other links

Publisher's full textScopus

Authority records

Kour, RavdeepAl-Jumaili, MustafaKarim, RaminTretten, Phillip

Search in DiVA

By author/editor
Kour, RavdeepAl-Jumaili, MustafaKarim, RaminTretten, Phillip
By organisation
Operation, Maintenance and Acoustics
In the same journal
Proceedings of the Institution of mechanical engineers. Part F, journal of rail and rapid transit
Reliability and MaintenanceInfrastructure EngineeringSecurity, Privacy and Cryptography

Search outside of DiVA

GoogleGoogle Scholar

doi
urn-nbn

Altmetric score

doi
urn-nbn
Total: 922 hits
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf