Skip to main content

Rail signalling system ‘could be liable to hacking’

A new rail signalling system to be installed across the UK could be liable to hacking, a government adviser has warned. Professor David Stupples told the BBC that the European Rail Traffic Management system (ERTMS) could be exposed to malicious software, or malware, and used to cause an accident perhaps telling the system the train is slowing when down when it is speeding up. "However, he said governments aren't complacent."Certain ministers know this is absolutely possible and they are worried about
April 27, 2015 Read time: 2 mins
A new rail signalling system to be installed across the UK could be liable to hacking, a government adviser has warned.

Professor David Stupples told the BBC that the European Rail Traffic Management system (ERTMS) could be exposed to malicious software, or malware, and used to cause an accident perhaps telling the system the train is slowing when down when it is speeding up.

"However, he said governments aren't complacent."Certain ministers know this is absolutely possible and they are worried about it. Safeguards are going in, in secret, but it's always possible to get around them," he said.

ERTMS uses a computer in the driver's cab to control the speed and movement of the train, whilst taking account of other trains on the railway. Although still operating under the umbrella term of ERTMS, 5021 Network Rail says it is creating its own traffic management system to optimise performance.

Network Rail said it acknowledges the threat. A spokesman said "We know that the risk [of a cyber-attack] will increase as we continue to roll out digital technology across the network. We work closely with government, the security services, our partners and suppliers in the rail industry and external cyber security specialists to understand the threat to our systems and make sure we have the right controls in place."

For more information on companies in this article

Related Content

  • Assessing the potential of in-vehicle enforcement systems
    December 4, 2012
    Jason Barnes considers the social and ethical ramifications of using in-vehicle safety technologies to fulfil enforcement functions. Although policy documents often imply close correlation between enforcement, compliance and safety – in part, as a counter to accusations that enforcement is rather more concerned with revenue generation – there is a noticeable reluctance among policy makers and auto manufacturers to exploit in-vehicle safety systems for enforcement applications. From a technical perspective t
  • Autopilot highlights shape of Things
    March 30, 2020
    Driverless vehicles require rich data to operate safely, and a European consortium is harnessing the Internet of Things to help.
  • Debating road user charging systems
    January 26, 2012
    Are pre-launch trials of charging systems the way to improve public acceptance? Or is the real key a more robust political attitude? Here, leading system suppliers discuss the issue. The use of distance-based Road User Charging (RUC) is now well established, at least for heavy goods vehicles on strategic roads. However demand management for all vehicles, whether a distance-based charge or some form of cordon scheme, has yet to make significant progress. This is in spite of the logic and equity of RUC being
  • Tolling Matters: Getting the balance right
    January 18, 2023
    The concept of road usage charging (RUC) is slowly coming to the fore. But it isn’t just a question of good fiscal sense – it’s about promoting equity and ensuring sustainability too, says Scott Jacobs of Emovis