Skip to main content

FORMAL METHODS AND CSIRT FOR THE RAILWAY SECTOR

Periodic Reporting for period 1 - 4SECURAIL (FORMAL METHODS AND CSIRT FOR THE RAILWAY SECTOR)

Reporting period: 2019-12-01 to 2020-11-30

"The 4SECURail project addresses the Open Call S2R-OC-IP2-2019 ""Demonstrator development for the use of Formal Methods in railway environment-Support to implementation of CSIRT to the railway sector.""

The project addresses the use of formal methods and standard interfaces as two key concepts to enable reducing the time it takes to develop and deliver railway signalling systems and to reduce high costs for procurement, development and maintenance. Formal methods are needed to ensure correct behaviour, interoperability and safety, and standard interfaces are needed to increase market competition and standardization, reducing long-term life cycle costs.

It also addresses the dramatic rise in the cybercrime targeting Industrials Control Systems (ICS) over the past years and the development of Intelligent Public Transport requiring a high level of integration of transport systems highlighted the need of cyber-security coordination between railway operators. Such coordination will require system integrator and railway manufacturer involvement.

4SECURail project is divided in two workstreams.

Workstream 1 ""Demonstrator development for the use of Formal Methods in Railway Environment"" will provide a demonstrator of Formal Methods and tools to evaluate the learning curve and to perform a cost/benefit analysis of the adoption of formal methods, with the following objectives:
1) Development of the demonstrator;
2) Identification of a railway signalling subsystem, described by means of standard interfaces and
3) Specification and evaluation of the cost/benefit ratio and learning curves of adopting the demonstrator in the railway environment.

Workstream 2 ""Support to implementation of CSIRT to the railway sector"" will address TD2.11 establishing a CSIRT collaborative environment. The objectives are:
1) Define stakeholder requirements for a European Rail CSIRT collaborative activity,
2) Test and validate the draft CSIRT model;
3) Identify relevant platforms to support CSIRT collaboration and, based on requirements and CSIRT model, specify and adapt to meet CSIRT needs and 4) To test and updated the CSIRT collaborative environment so as to ensure meeting user needs."
"4SECURail project is divided into two work streams (WS), whose objectives and results are introduced in the following paragraphs.

WS1 ""Demonstrator development for the use of Forma Methods in Railway Environment"". In Reporting Period 1 the following objectives were identified in the DoA: to define the specification of the formal development demonstrator prototype by identifying, selecting, and describing the composition of appropriate formal methods and tools; using standard interfaces, to identify and describe the railway signalling subsystems to be used as test cases, and exercise them the formal methods demonstrator and finally, specify and calculate the cost/benefit ratio (CBA) and learning curves for the adopted formal method demonstrator in the railway environment. The objectives related to the specification of the formal development demonstrator prototype and definition of a case study of a signalling subsystem using standard interfaces have been effectively met. In particular, the work is contributing to the definition of Formal development demonstrator prototype and a second part, focused on the preliminary application of the defined demonstrator process to a selected fragment of the case study. The results of the activity in the first part of the task have been described in D2.1 while the results of the activity in the second part have been described in D2.2. The case study was defined and the results are provided in D2.3. Regarding the objective of specifying a Cost/benefit analysis (CBA), the progress achieved in the present Reporting Period concerns the definition of cost and benefit categories on which the Cost-Benefit analysis (CBA) will be performed by assessing their magnitude and value throughout a specific time horizon. A particular attention was given in the CBA scoping, related to the identified use-case (adoption of FM in RBC/RBC handover interface).

WS2 ""Support to implementation of CSIRT to the railway sector"". In Reporting Period 1 the following objectives were identified in the DoA: to define stakeholder requirements for a European Rail CSIRT collaborative activity; to test and validate the draft CSIRT model, to identify relevant platforms to support CSIRT collaboration and; based on requirements and CSIRT model, specify and adapt to meet CSIRT needs and, to test and updated the CSIRT collaborative environment so as to ensure meeting user needs. All objectives have been effectively met as expected for the period RP1. It progressed in regards to defining stakeholder requirements for a European Rail CSIRT collaborative activity, and to co-design with them a rail CSIRT model for open consultation. The work done in RP1 has focused on developing the early concept, both functional and technical designs, for the platform, based on the CSIRT model for rail (presented in D3.1 and D3.2). Regarding the following objectives, it progressed in regards of outlining an early plan for the collaborative CSIRT platform for railway environment. The key goal of the CSIRT platform is to support the sharing of intelligence among the different national entities (Rail security teams). Also, a few scenarios have been proposed as exemplifying workflows use cases for the purpose of showcasing how the CHIPR4Rail model and platform could be operated as well as for testing and evaluating the good practises implemented during the project for sharing Cyber-Threat Intelligence in the railway sector. The remaining objectives and further work will fully be achieved in the next RP2."
As it has been said before, the project addresses two main specific challenges, that can have a direct impact in society:
1) The use of formal methods in railway signalling systems
2) Creation of CSIRT collaborative platform

It is still soon to determine that these challenges have been achieved, but it is foreseen that they are achieved by the end of the project. The socio-economic impact of achieving them can be summarised as follows:
1) Regarding challenge 1:
1.a) Safety: Less cost of railway singalling systems will enhance the upgrade of old signalling systems to a higher level of safety for the railway transport, reducing the incident rates.
1.b) Mobility: The results of the project will contribute to ease the development of new railway lines, improving the railway network and providing new ways of transport to citizens
1.c) Public resources: The cheaper the new railway equipment is, the more public resources are available for other expenses.
2) Regarding challenge 2:
2.a) Availability: Thanks to the development of a CSIRT collaborative platform, there will be less interruption in the railway operation due to computer security incidents
2.b) Security: Private data and other sensitive information will be more secure if a collaborative CSIRT platform works
Project brochure
Project brochure