Skip to main content

Rail signalling system ‘could be liable to hacking’

A new rail signalling system to be installed across the UK could be liable to hacking, a government adviser has warned. Professor David Stupples told the BBC that the European Rail Traffic Management system (ERTMS) could be exposed to malicious software, or malware, and used to cause an accident perhaps telling the system the train is slowing when down when it is speeding up. "However, he said governments aren't complacent."Certain ministers know this is absolutely possible and they are worried about
April 27, 2015 Read time: 2 mins
A new rail signalling system to be installed across the UK could be liable to hacking, a government adviser has warned.

Professor David Stupples told the BBC that the European Rail Traffic Management system (ERTMS) could be exposed to malicious software, or malware, and used to cause an accident perhaps telling the system the train is slowing when down when it is speeding up.

"However, he said governments aren't complacent."Certain ministers know this is absolutely possible and they are worried about it. Safeguards are going in, in secret, but it's always possible to get around them," he said.

ERTMS uses a computer in the driver's cab to control the speed and movement of the train, whilst taking account of other trains on the railway. Although still operating under the umbrella term of ERTMS, 5021 Network Rail says it is creating its own traffic management system to optimise performance.

Network Rail said it acknowledges the threat. A spokesman said "We know that the risk [of a cyber-attack] will increase as we continue to roll out digital technology across the network. We work closely with government, the security services, our partners and suppliers in the rail industry and external cyber security specialists to understand the threat to our systems and make sure we have the right controls in place."

Related Content

  • September 15, 2023
    Software is at heart of safe vehicle connectivity, says Qt Group
    Connected vehicle safety isn’t just under threat from malicious actors exploiting code – it’s also about avoiding software faults that could result in harm to people, says Patrick Shelly of Qt Group
  • October 31, 2018
    Less than 1% of UK drivers aware of hacking threats – new research
    Nearly all UK drivers with keyless technology are unaware of the major digital threats posed by hackers, according to research conducted by MoneySuperMarket. The study reveals that 99% of drivers are unaware of security flaws such as phone phishing, where hackers send emails to drivers which contain malicious links that connect to a car’s Wi-Fi features and take control. MoneySuperMarket says 16% of drivers - or someone they know - have experienced car hacking. Also, eight out of 10 drivers do not k
  • October 13, 2015
    Upgrading rail signalling systems in an urban environment: lessons from Europe
    WSP/Parsons Brinckerhoff has launched a series of technical forums with European rail specialists in Melbourne, Sydney, Brisbane and Auckland. Its Swedish director Mats Önner and senior consultant Michael Fransson will share their knowledge and experience of upgrading signalling infrastructure on railways throughout Sweden, Norway and Denmark.
  • February 1, 2012
    Cooperative systems and privacy not mutually exclusive
    Are co-operative systems and personal privacy mutually exclusive? Not necessarily, says Neil Hoose. But the more advanced the application, the greater the concession of privacy may have to become. ITS Stockholm in 2009 and the Cooperative Mobility Showcase event which took place alongside Intertraffic in Amsterdam in March this year both featured live, on-street demonstrations of safety and driver information applications that used Vehicle-to-Infrastructure (V2I) and Vehicle-to-Vehicle (V2V) communications,