An Insight into Railway Security
Where
Talks
ShmooCon 2023
Duration
49 min
Surveys security concerns across railway systems, from the operational technology that runs them to the threats their operators face.
Summary
This talk is an overview of security for railway systems, the networks and equipment that operate trains and move freight and that rail operators depend on every day. The speaker treats rail as critical infrastructure, where problems in one part of the system can carry into day-to-day operations.
Through the middle of the talk, the speaker moves between examples and general observations. The references that come through concern how rail control relies on connected systems, how threats to those systems are weighed, and where operational needs and protection pull in different directions. The automatic captions are too fragmented to recover specific technical findings, named incidents, or precise recommendations, so this summary stays with the themes that can be identified and does not supply details the recording does not clearly support.
For a practitioner, the useful takeaway is to treat railway environments as operational technology with physical and safety consequences rather than as ordinary IT. Anyone assessing transport or other critical systems should map dependencies, consider how an outage or tampering would affect physical operations, and check the full recording or slides before relying on specifics from this talk.
Related talks
I Am The Cavalry·2 hr 22 min
Sarah Miller
Covers how cyber disruption to water and hospitals could strain communities, and how local volunteers can prepare.
I Am The Cavalry·9 hr 15 min
Josh Corman
Sets the stakes for a track on protecting water, hospitals and other lifelines from state-backed disruption.
I Am The Cavalry·27 min
Josh Corman
Recaps the prior day and frames the critical-infrastructure risks, Volt Typhoon concerns and planned 2027 preparedness work.


