An Introduction to Cybersecurity Issues in Modern Transportation Systems

Cybersecurity is important in accomplishing the goals of a transportation system in operations safety, efficiency, and public communication. It is crucial for a transportation system to be able to communicate reliably with the public through an advanced traveler information system (ATIS) to inform travelers about schedules and delays. The system must be robust and secure, so that it is always up and available, but also cannot be used to mislead the public by a malicious actor. In addition to web servers, the transportation system must maintain a variety of field devices that can be attacked and can be difficult to secure. These include parking meters and dynamic message signs, which are both known to be targets of attacks. Some devices have connectivity to a central management system, which can be both wired and wireless. For wired connections, they can be vulnerable to copper theft, while for newer wireless systems, there are other network vulnerabilities that can be exploited. Lastly, transportation management centers (TMC) can be affected by malware, often known to be brought in my cell phones and other portable connected devices. Transportation systems should actively work to assess their network and use available tools and resources before the issues are exploited. There are documents available to agencies that recommend practices that will keep them secure. With security addressed the system can be relied on by travelers and safety and efficiency can be the next focus.