CYSIS - Resilient architectures for availability and integrity

Reliability in the form of availability and integrity are the key requirements in railway systems. The Cybersecurity for Critical Infrastructures (CYSIS) working group, together with DB Netz AG, TU Darmstadt, and Uni Passau, are researching and deriving requirements for resilient systems on the infrastructure and vehicle side. On the one hand, the focus is on "network transitions in 5G" to ensure highly available and resilient radio connections for the coming automation. On the other hand, the realization of a fully integrated endpoint security for field element controllers (object controller) is taking place to enable efficient as well as adaptable security at the communication endpoints in the field. INCYDE supports the working group and the projects with technical know-how in railway and security for an application-oriented realization of the projects.

 

Challenges:

  • Researching & Deriving Requirements for Resilient Systems on the infrastructure and vehicle side
  • Cybersecurity for Critical Infrastructures (CYSIS) working group together with DB Netz AG, TU Darmstadt, Uni Passau
  • Ensure Highly Available and Resilient Radio Network
  • Realization of a Fully Integrated Endpoint Security for Field Element Controllers

 

Results:

  • Definition of Requirements for Network detection and automated switching
  • Use Case Definition for Efficient Network Management: Distinguish between different needs, band with and QoS
  • Endpoint Security Field Testing (Haselnuss): Integrate TPM module (COTS) as Object Controller with tamper proof security
  • Developing Prototype