Title
Transformation of Cyber Security/Safety Assurance
Author
Bearfield, G.
van Gulijk, C.
Parkinson, S.
Thomas, R.J.
Publication year
2022
Abstract
In the past decade rapid digitalisation of railway assets - including signalling and rolling stock - has occurred in parallel with a rising cyber security threat to critical national infrastructure. Rail safety requirements remain stringent and legacy standards for delivering safe, high integrity, complex digital systems exist. Security standards are emerging which implement some of the same principles of design and assurance as these safety standards, but do not do so in an integrated way with the safety discipline. There are two fundamental challenges emerging. The first is that safety design requirements and security design requirements have parallel principles and constraints related to segregation and partitioning of systems and networks in the design, but no proven good practice exists for how to meet both sets of requirements in an integrated way for any given asset. The second is that the verification and validation lifecycle used in functional safety standards and emerging cyber security design standards is idealised. It assumes a top-down cascade of requirements for each delivery project. It is increasingly difficult to meet these requirements in practice. This paper explains the many challenges in order to inform subsequent research, standardisation and industry activity needed to address them.
Subject
Cyber Security
System Safety
Railway
Functional Safety
To reference this document use:
http://resolver.tudelft.nl/uuid:42f7afd2-ffc5-4acd-a3a9-953d771da87d
TNO identifier
970727
Source
Reshaping our railways post-pandemic: Research with an impact, 6-10 June, Birmingham, United Kingdom
Document type
conference paper