Skip to main content

Rail signalling system ‘could be liable to hacking’

A new rail signalling system to be installed across the UK could be liable to hacking, a government adviser has warned. Professor David Stupples told the BBC that the European Rail Traffic Management system (ERTMS) could be exposed to malicious software, or malware, and used to cause an accident perhaps telling the system the train is slowing when down when it is speeding up. "However, he said governments aren't complacent."Certain ministers know this is absolutely possible and they are worried about
April 27, 2015 Read time: 2 mins
A new rail signalling system to be installed across the UK could be liable to hacking, a government adviser has warned.

Professor David Stupples told the BBC that the European Rail Traffic Management system (ERTMS) could be exposed to malicious software, or malware, and used to cause an accident perhaps telling the system the train is slowing when down when it is speeding up.

"However, he said governments aren't complacent."Certain ministers know this is absolutely possible and they are worried about it. Safeguards are going in, in secret, but it's always possible to get around them," he said.

ERTMS uses a computer in the driver's cab to control the speed and movement of the train, whilst taking account of other trains on the railway. Although still operating under the umbrella term of ERTMS, 5021 Network Rail says it is creating its own traffic management system to optimise performance.

Network Rail said it acknowledges the threat. A spokesman said "We know that the risk [of a cyber-attack] will increase as we continue to roll out digital technology across the network. We work closely with government, the security services, our partners and suppliers in the rail industry and external cyber security specialists to understand the threat to our systems and make sure we have the right controls in place."

For more information on companies in this article

Related Content

  • Simplifying enforcement systems type approval
    August 1, 2012
    Martyn Harriss looks at what we can do to simplify the type approval of enforcement equipment in Europe. I doubt that there are many who can remember the days when policemen hid in the bushes with stopwatches and flags to catch speeding motorists - and I'd suggest that back then there were few who were caught who would have dared question the accuracy of those watches or those who operated them. Probably, fewer still here in Europe could have dreamt that a supranational body such as the European Union (EU)
  • American drivers concerned about hacking of autonomous cars, says survey
    February 8, 2017
    An online survey by the University of Michigan Sustainable Worldwide Transportation Department asked American adults about their level of concern with cyber-security of personally owned autonomous vehicles (with and without driver controls) and current conventional vehicles looked at both vehicle security and data privacy. Within vehicle security, the issues examined were hacking vehicles to cause crashes, hacking by terrorists to use the vehicle as a weapon, disabling many vehicles simultaneously and di
  • Maine to trial rail-trespasser detector
    September 19, 2013
    Brunswick, Maine, will be the site of an unusual three-year research project involving testing an automated trespasser detection and deterrent systems in high-risk areas along the Pan Am railways and Amtrak Downeaster rail lines, the Maine Department of Transportation has said. Researchers will install and operate systems that automatically detect trespassers, capture video with wireless cameras and issue recorded warnings to tell them to get away from the tracks. The systems also can be used to alert lo
  • Autonomous car accidents revealed in California
    May 13, 2015
    Associated Press (AP) recently reported that three of Google's self-driving cars have been involved in accidents since September, when California allowed them to begin using public roads. The parts supplier Delphi Automotive had one accident, which an accident report the company provided to AP showed was not its fault. Delphi said at the time the car was being driven by the person the DMV requires behind the wheel during testing. US consumer rights advocate Consumer Watchdog has now called on Google