Cyber Resilience of Railway Signaling Systems - Russian book

Updated Russian version of the Railway Cybersecurity hardcopy book by Sergey Gordeichik was published last week. 

Кибербезопасность микропроцессорных систем управления на железнодорожном транспорте 

Гордейчик Сергей Владимирович

Cyber Resilience of Railway Signaling Systems

Recently published information on the cybersecurity assessment of railway computer and communication-based control systems (CBCS) identified several weaknesses and vulnerabilities, which allow threat agents to not only degrade system reliability and bypass safety mechanisms, but to carry out attacks which directly affect the rail traffic safety. Despite these findings, remarkably these systems meet all relevant IT security and functional safety requirements and have the required international, national and industrial certificates.

Railway hacking at Catalonia

Famous "The Great Train Robbery: Fast and Furious" show as presented  @OverDrive Hacking Conference in Girona, Catalonia by Sergey Sidorov.

Enjoy!

Choo-Shoo pwn explained

...A detailed analysis of the security status of widely-used ICS/Scada systems, including railway and interlocking CBCS, has identified faults and vulnerabilities, which allow cyber criminals to not only degrade key reliability parameters and bypass safety mechanisms, but also to carry out attacks which directly affect rail traffic safety. Remarkably, these systems meet all of the relevant IT security and functional safety requirements and all have the required international, national and industrial certificates...

32C3 slides

Slides and video from 32C3 The Great Train Cyber Robbery talk.

The Great Train Cyber Robbery on #32C3

Christmas is coming and we are excited to visit Chaos Communication Congress in Hamburg and to speak there.

32C3 Fahrplan looks perfect and we hope you will able to visit our talk. It's difficult though because of excellent agenda full of wonderful reports...