ROSTAM: Railway-Oriented Security and Threat Abstraction Model
- Cybersecurity is an increasing issue in the transportation sector and has led to the publication of various standards that give a guideline for risk and threat management. Modern vehicles require a robust and comprehensive protection against malicious attacks as they contain complex and connected computer systems. This also applies to the railway sector, which must be prepared for cyber-attacks as digitisation increases. In comparison to the automotive sector, the railway sector requires higher levels of security standards due to the unique characteristics of railway systems. Railway vehicles and infrastructure are typically designed for a long service life, and the complexity of the communication protocols, such as those used in radio communications, is more extensive. Adherence to security standards is also critical for certification and regulatory compliance, making it a fundamental requirement for the validation of railway systems. Model-based engineering is a promising approach to consider security in early development stages andCybersecurity is an increasing issue in the transportation sector and has led to the publication of various standards that give a guideline for risk and threat management. Modern vehicles require a robust and comprehensive protection against malicious attacks as they contain complex and connected computer systems. This also applies to the railway sector, which must be prepared for cyber-attacks as digitisation increases. In comparison to the automotive sector, the railway sector requires higher levels of security standards due to the unique characteristics of railway systems. Railway vehicles and infrastructure are typically designed for a long service life, and the complexity of the communication protocols, such as those used in radio communications, is more extensive. Adherence to security standards is also critical for certification and regulatory compliance, making it a fundamental requirement for the validation of railway systems. Model-based engineering is a promising approach to consider security in early development stages and avoid the cost-intensive implementation of security mechanisms afterwards. However, this is complicated by the complexity of the security landscape and security frameworks, which are primarily oriented towards implementation and cryptographic functions. This paper presents a specification to create railway specific security models that are intended to be embedded into existing system models and thereby enforce the consideration of cybersecurity from the beginning. Therefore, the criteria of a railway security standard are condensed in a comprehensive metamodel. This metamodel is designed to address security concerns across all stages of embedded railway software development. In order to illustrate its applicability, an integrated demonstration is developed, showing the use of security modelling to create a systematic approach for securing complex railway software architectures.…
