X2Rail-1

The communication networks used in rail transport are generally heterogeneous, insufficiently protected and poorly adapted to meet today's cyber security requirements in terms of durability, protection and attack detection. The contribution to WP8 is in 3 complementary parts for the cyber security of wireless communications in the rail network. The first 2 are based on automatic approaches and are developed by our partners : 1) detection of threats by monitoring the environment followed by detection of abnormal behavior or threats by dedicated algorithms, 2) automatic decision to launch a countermeasure in order to block or at least mitigate the attack (e.g. an alarm, a reconfiguration, ...).

The 3rd approach is being developed at LAMIH as a complement to the previous 2 : if these fail, human operators (drivers, regulators) are left alone in the loop to manage the consequences of the attack. Our research aims to evaluate in a realistic simulator, the abilities of the professional driver or Operational Control Center operator to detect, understand and react to simulated attacks, or their consequences. To this end we select and simulate scenarios involving humans, and analyze their abilities to detect treat or divert threats. In this way, the method used highlights useful strategies, indicators and devices for countermeasures. More generally, the research aims to improve detection and recovery capabilities by humans and increase their Situational Awareness.