Mission Secure Blog Cybersecurity for traffic and transportation systems: What can we learn from NERC CIP and IMO?

 From traffic operations centers and Advanced Traffic Management Systems (ATMS) to field signal cabinets and traffic control devices, transportation systems use digital and automated components to manage physical processes—the flow and control of traffic, vehicles, and pedestrians. These components present numerous attack vectors for cyber attack, against both the signaling systems and the networks and control systems that manage them. Developments such as intelligent transportation systems and autonomous vehicles exponentially magnify the threat landscape for the controlled, safe, and reliable operation of transportation systems. Given the expanding opportunity for adversaries to inflict significant disruption, confusion, or damage, cybersecurity attacks directed at roadways and transportation networks will only intensify in both frequency and magnitude. How do localities and governments secure transportation systems from cyber threats, and how do existing regulations and standards support or impede those efforts? Securing cyber-physical systems is a challenge not unique to the transportation industry, but one being dealt with throughout various sectors and governments at large. By analyzing multi-national, industry-specific regulations and standards, we can gain insights into the best strategy for building cybersecurity into transportation systems and ensuring their safe, controlled, and reliable operation.