About CYRAIL project Cybersecurity in the RAILway sector

Railway infrastructures are moving towards more intelligent, connected, user-centric and collaborative systems. While it brings many advantages for the industry and users, it also poses new opportunities for cyber-criminals and terrorists.

In this context, CYRail project has received funding from the Shift2Rail Joint Undertaking under the European Union’s Horizon 2020 research and innovation programme under grant agreement No 730843 addressing the topic "Threat detection and profile protection definition for cybersecurity assessment".

An analysis of threats targeting Railway infrastructures will be developed as well as innovative, attack detection and alerting techniques. Adapted mitigation plans and countermeasures will be defined, taking into account their potential impact on operations. Protection Profiles for railway control and signalling applications will be delivered to ensure security by design of new rail infrastructures.

The main technical objectives of CYRAIL are:

  • To select security analysis frameworks capable of assessing the most critical railway services, zones and communications to perform an exhaustive cyber security assessment of the Railway systems;
  • To deliver a taxonomy of threats targeting rail management and control systems capable of classifying, describing and analyse cyber-attack threats;
  • To assess and select innovative rail management systems attack detection techniques;
  • To specify Countermeasures and Mitigation strategies for improved quality levels;
  • To describe Resilience Mechanisms for Operational Safety;
  • To specify Protection Profiles with Evaluation of Assurance Levels.

Added Value

CYRail aims to have a significant impact on enhancing the operational security level of the different rail segments and the robustness of the railway information, control and signalling sub-systems.

With the challenge of boosting innovative and cost-efficient technologies and system for railway signalling, traffic control and automation with an ever increasing reliance on communications technologies, CYRail will contribute to the prevention of cyber-attacks, improving the operational security level of the different rail segments.

Facts and Figures

  • Total budget – 1.5 m€
  • Duration – 24 months
  • Project start date – 1st October 2016
  • Project end date – 30 September 2018
  • Partners – 6 partners from 5 different countries
  • Grant agreement no - 730843

Final recommendations

CYRAIL recommendations on cybersecurity of rail signalling and communication system