@article{c6b9232a7b9c4cca8b0c44027bedcc66,
title = "Data integrity threats and countermeasures in railway spot transmission systems",
abstract = "Modern trains rely on balises (communication beacons) located on the track to provide location information as they traverse a rail network. Balises, such as those conforming to the Eurobalise standard, were not designed with security in mind and are thus vulnerable to cyber attacks targeting data availability, integrity, or authenticity. In this work, we discuss data integrity threats to balise transmission modules and use highfidelity simulation to study the risks posed by data integrity attacks. To mitigate such risk, we propose a practical two-layer solution: At the device level, we design a lightweight and low-cost cryptographic solution to protect the integrity of the location information; at the system layer, we devise a secure hybrid train speed controller to mitigate the impact under various attacks. Our simulation results demonstrate the effectiveness of our proposed solutions.",
keywords = "Adversary model, Physical movement, Railway transportation system",
author = "Lim, {Hoon Wei} and Temple, {William G.} and Tran, {Bao Anh N.} and Binbin Chen and Zbigniew Kalbarczyk and Jianying Zhou",
note = "Funding Information: This work was supported in part by the National Research Foundation (NRF), Prime Minister{\textquoteright}s Office, Singapore, under its National Cybersecurity R&D Programme (Award No. NRF2014NCR-NCR001-31) and administered by the National Cyber-security R&D Directorate, and supported in part by Singapore{\textquoteright}s Agency for Science, Technology, and Research (A*STAR) under a research grant for the Human-centered Cyber-physical Systems Programme at the Advanced Digital Sciences Center. Authors{\textquoteright} addresses: H. W. Lim; email: hoonwei@singtel.com; W. Temple; email: William.T@adsc-create.edu.sg; B. Chen; email: Binbin.chen@adsc-create.edu.sg; Z. Kalbarczyk; email: kalbarcz@illinois.edu; Z. Jianying; email: jianying_zhou@ sutd.edu.sg. Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than ACM must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from permissions@acm.org. {\textcopyright} 2019 Association for Computing Machinery. 2378-962X/2019/10-ART7 $15.00 https://doi.org/10.1145/3300179",
year = "2019",
month = oct,
doi = "10.1145/3300179",
language = "English (US)",
volume = "4",
journal = "ACM Transactions on Cyber-Physical Systems",
issn = "2378-962X",
publisher = "Association for Computing Machinery (ACM)",
number = "1",
}