Skip to content

DEF CON 34 talks are here: 354 talks, summarized and searchable.

Browse DEF CON 34

An Insight into Railway Security

Brian Butterly

ICS / OTTalks49 minBeginnerOpen on YouTube ↗

Where

Talks
ShmooCon 2023

Duration

49 min

Surveys security concerns across railway systems, from the operational technology that runs them to the threats their operators face.

Summary

This talk is an overview of security for railway systems, the networks and equipment that operate trains and move freight and that rail operators depend on every day. The speaker treats rail as critical infrastructure, where problems in one part of the system can carry into day-to-day operations.

Through the middle of the talk, the speaker moves between examples and general observations. The references that come through concern how rail control relies on connected systems, how threats to those systems are weighed, and where operational needs and protection pull in different directions. The automatic captions are too fragmented to recover specific technical findings, named incidents, or precise recommendations, so this summary stays with the themes that can be identified and does not supply details the recording does not clearly support.

For a practitioner, the useful takeaway is to treat railway environments as operational technology with physical and safety consequences rather than as ordinary IT. Anyone assessing transport or other critical systems should map dependencies, consider how an outage or tampering would affect physical operations, and check the full recording or slides before relying on specifics from this talk.

Related talks