Abusing Legacy Railroad Signaling Systems
Practical exploitation of legacy railroad track signaling protocols and physical infrastructure using low-cost hardware.
Summary
Railway Signaling Architecture
In this study, we delve into the darker aspects of railway technology, revealing how easily accessible domestic hardware tools can compromise the seemingly infallible robustness of signaling systems. We demonstrate how these accessible technologies can be utilized to devise strategies that potentially threaten train circulation in Spain. Our research presents a critical analysis of the vulnerabilities present in the railway signaling systems, highlighting the ease with which these systems can be tampered with, using tools that are readily available to the general public. Through a combination of theoretical insights and practical demonstrations, we offer a comprehensive overview of the risks associated with such vulnerabilities.
Interfacing with Legacy Systems Using Low Cost Tools
Our findings aim to raise awareness among stakeholders in the railway industry, prompting a reevaluation of current security measures and encouraging the adoption of more stringent protections against such threats. This paper contributes to the ongoing discussion in the cybersecurity community, offering valuable insights into the potential risks facing modern transportation infrastructures and suggesting avenues for future research and development in railway system security.
Safety and Critical Infrastructure Implications
We consider this work to be innovative on a type of system that has been present for over half a century in railway infrastructures. Therefore, the references provided are primarily about the operation of the systems and relevant news concerning them.
Related talks
Main Stage·18 min
Moritz Abrell
Hardware and software reverse engineering of an industrial VPN gateway revealing critical flaws in its remote maintenance pipeline.
XR Village·32 min
Kolton Heaps
Details how Idaho National Laboratory uses XR digital twins to model, simulate, and stress-test critical infrastructure control systems.
Main Stage·33 min
Anthony Rose · Jake Krasnov
Uncovers widespread firmware backdoors and hardware vulnerabilities in commercial solar inverters and energy management gateways across global supply chains.


