Cybersecurity for rail systems
Increasing digitalization brings benefits for all mobility stakeholders. But it also creates the need for holistic, best in class protection against cyberattacks. We are committed to securing complex transport systems and their data by applying our expertise to products, solutions, and services.
Increasing digitalization brings benefits for all mobility stakeholders. But it also creates the need for holistic, best in class protection against cyberattacks. We are committed to securing complex transport systems and their data by applying our expertise to products, solutions, and services.
Protecting your rail system from cyberattacks
Products and solutions
With CoreShield Connect, we offer a secure connectivity toolbox for real-time management of your rail assets. In this toolbox, the CoreShield DCU (Data Capture Unit) is a small hardware component that offers comprehensive connectivity and controlled monitoring for security-relevant networks. The CoreShield OSA (OT Security Appliance) is the security monitoring solution for the operational technology networks of railway signaling systems. The CoreShield SPX (encryption unit), CoreShield S2L2 (secure long life Linux OS) and CoreShield RSU (secure remote software updates) are also part of the toolbox. For secure communications in harsh environments, you can rely on our RUGGEDCOM hardware equipment.
Services
Our holistic cybersecurity services range from assessing existing systems to supporting continuous risk management, and implementing additional mitigation and protection measures. As employee education is a vital part of every cybersecurity strategy, we offer specialized rail security training to qualify your staff in cybersecurity technologies and practices according to their specific roles and along the entire lifecycle of their rail system. Furthermore, we conduct additional awareness programs to highlight typical cybersecurity threats, such as phishing.
Supply chain and integration
Combining complex multi-vendor solutions into one complete and interoperable security approach is as complicated as it sounds – unless you have the right experts on hand: our specialists in solution engineering and system integration work closely with cybersecurity experts. Furthermore, our suppliers are required to comply with specific security standards and deliver the same quality standards our customers have come to expect from us.
Our solutions for secure rail traffic
Secure train operations in the digital age
When it comes to cybersecurity, we are a strong partner for transportation companies worldwide. We bring expertise, efficient workflows, and practical experience based on over 100 customer projects to the table. As your single source for cybersecurity solutions, we cover the entire product lifecycle from procurement and manufacturing to the operating phase.
Secure network connectivity without compromise
With our CoreShield Connect secure connectivity toolbox, we are bridging the gap between the physical and the digital world of the railway, and above all ensuring data security and integrity.
Part of the toolbox, the CoreShield DCU (Data Capture Unit) is a certified, proprietary Siemens data diode developed to the most stringent security requirements. It works as a passive network gateway that allows data transmission – but only in one direction, for example, from our signaling network to the cloud. That’s why the DCU is perfectly suited to protect critical networks from unauthorized external access.
And it’s not only the products - but also how to implement them optimally: with years of experience working with international standards and a solid understanding of how your business is run, we will walk you through every step of your journey towards continuous process improvement and certification.
Secure rail operations
When it comes to secure rail operations, nothing should be left to chance. Use our rail cybersecurity services for analyzing and assessing your rail systems’ security along the entire operational process and lifecycle. Where are potential vulnerabilities? What are the best measures to protect your rail vehicles and systems? We cover every angle proactively, knowledge-based, customized, and in a closed process, enabling you to respond on the spot.
Overarching solutions
We plan, construct and optimize the cybersecurity solution for your turnkey project, coordinating the interfaces and implementing the system, covering the full scope of rolling stock, infrastructure and services. Thanks to our experience and expertise, we orchestrate the largest and the most complex projects in different environments reliably and integrate them for the customer. We also help improve cybersecurity in existing environments based on a customized risk-based approach for each customer.
Why Siemens Mobility as a partner for cybersecurity?
Managed security
Our products, projects, and assets are security-managed. Our trains are equipped with built-in security measures, covering the complete product lifecycle and the entire supply chain. This holistic approach to cybersecurity is implemented in the product development phase with constant and rigorous vulnerability monitoring, continuing until the train is delivered and throughout its lifecycle. We also ensure secure train connectivity for the safe transmission of data within the trains.
Proven expertise
Whether it’s rail infrastructure security or protecting rolling stock from cyberattacks, with our team of hundreds of cybersecurity experts, we can ensure the highest level of security – as we have done in many successful projects so far. We also train all our Siemens Mobility employees with awareness training, and our cybersecurity specialists with dedicated advanced training.
Integrated approach
Unlike almost any other provider, we have a closed range of products, solutions, and services. This makes our cybersecurity approach seamless. We are able to solve projects completely in-house without having to pass on tasks to third parties. Of course, we can also partner with external assessors when certification is needed.
Certified security
We are leading the market in security compliance. Siemens Mobility is the most certified railway vendor worldwide. The certification scheme encompasses processes and selected products and is steadily extended to meet upcoming regulatory needs. Products and processes are certified by leading institutes such as TÜV Süd and DNV.
Report a potential security issue
Do you have a cybersecurity-related question, or would you like to report a potential security issue? Contact Siemens ProductCERT for all product, solution, and service inquiries, or Siemens CERT for all Siemens IT assets-related matters.
Networking for a secure digital infrastructure
We take our responsibility for cybersecurity well beyond the boundaries of our own organization, because approaches to cyber threats do not end there. To make the digital world more secure, we have joined forces with leading companies from around the globe to form the Charter of Trust.
What our experts have to say about rail cybersecurity
Siemens Xcelerator: Creating an interoperable rail ecosystem with cybersecurity in mind
For public transport to be as sustainable and cost-effective as possible, trains and tracks must be used to their full potential. Our digital business platform, Siemens Xcelerator, connects previously isolated mobility elements and stakeholders.
- Discover Siemens Xcelerator