Human factors in cybersecurity for transportation systems

Abstract

Railway systems follow the same trend than the other transportation modes, namely the integration of IT into all functional areas of operations that created both opportunities and vulnerabilities. In the same time, Cyber-crimes are on the rise and several companies have already experienced successful or attempted attack against their industrial control systems for reasons as diverse as sabotage or blackmail and extortion, while several state actors are developing offensive cyber operations programs that could one day target critical infrastructures. To address these challenges, RATP has developed a structured approach for security assessment, encompassing physical, cyber and human realms that highlighted the specific threat posed by Insiders.