Cybersecurity Challenges in Modern Railway Signaling- A Comprehensive Review

Aditya Khosla; Rishabh Dubey

doi:10.36948/ijfmr.2025.v07i05.56254

Cybersecurity Challenges in Modern Railway Signaling- A Comprehensive Review

Author(s)	Mr. Aditya Khosla, Mr. Rishabh Dubey
Country	India
Abstract	Railway signaling has undergone a rapid digital transformation over the past two decades, evolving from electromechanical relays and isolated circuits to integrated cyber-physical systems with wireless communications, cloud interfaces, and software-defined logic. While this transition has enhanced safety, efficiency, and interoperability, it has also greatly expanded the cyberattack surface. Unlike conventional IT networks, signaling is directly tied to human safety: a successful compromise of interlockings, radio protocols, or automatic train protection (ATP) can trigger not only economic disruption but also catastrophic accidents. This paper presents a systematic review of cybersecurity challenges in modern railway signaling, organized around four pillars: threat taxonomy and case evidence, standards and frameworks for safety–security integration, emerging technologies and their vulnerabilities, and future directions including post-quantum cryptography and zero-trust architectures. We analyze notable incidents from Europe, Asia, and the Middle East-including the WannaCry disruption of Deutsche Bahn, the Iranian rail cyberattack, and the Polish “radio stop” spoofing-and map them to vulnerabilities in signaling protocols and supply chains. The review synthesizes guidance from railway-specific standards such as EN 50159, CENELEC TS 50701, and EN 50126/28/29 alongside cross-sectoral frameworks like IEC 62443 and the NIST Cybersecurity Framework. Special focus is given to the transition from GSM-R to the Future Railway Mobile Communication System (FRMCS), which introduces 5G-based broadband services, new cryptographic requirements, and coexistence challenges, and to India’s Kavach ATP program as a case study of cybersecurity integration in large-scale deployments. The study concludes that effective railway cybersecurity demands joint safety–security engineering, global cooperation on threat intelligence, and proactive adoption of crypto-agility to prepare for post-quantum risks.
Keywords	railway signaling, cybersecurity, critical infrastructure protection, GSM-R, FRMCS (future railway mobile communication system), zero trust architecture (ZTA), IEC 62443, EN 50159, post-quantum cryptography (PAC), automatic train protection (ATP) / kavach
Field	Engineering
Published In	Volume 7, Issue 5, September-October 2025
Published On	2025-09-22
DOI	https://doi.org/10.36948/ijfmr.2025.v07i05.56254

View / Download PDF File

E-ISSN 2582-2160

doi

CrossRef DOI is assigned to each research paper published in our journal.

IJFMR DOI prefix is
10.36948/ijfmr

Downloads

Research Paper Format Copyright Permission Form and Undertaking Form Cover Page Vol 8 Isu 2 Cover Page Vol 8 Isu 1 Cover Page Vol 7 Isu 6

All research papers published on this website are licensed under Creative Commons Attribution-ShareAlike 4.0 International License, and all rights belong to their respective authors/researchers.

CC-BY-SA

About IJFMR Fees & Payment Current Issue Publication Archive	Submit Research Paper Track Submission Status Publication Guidelines Publication Ethics Peer Review & Plagiarism	Join as a Reviewer Editors & Reviewers Reviewer Referral Program Get Reviewer Membership Certi.	Website/Journal Policies Usage Policy Content Policies Privacy Policy

Contact Us		+91-9687-828-838	editor@ijfmr.com

International Journal For Multidisciplinary Research

A Widely Indexed Open Access Peer Reviewed Multidisciplinary Bi-monthly Scholarly International Journal

Cybersecurity Challenges in Modern Railway Signaling- A Comprehensive Review

Share this