Threat Landscape

UIC CSSP WGG committed to deliver a yearly Threat Landscape, aiming to:

• Provide a consolidated view of the threats to railways (awareness)
• Develop a common view on the cyber security challenge
• Determine the level of maturity to be reached by railways
• Determine the points on which the sector should concentrate its efforts and its investments to protect itself from the identified threats (to be prepared)
• Check if the use cases of the Threat Landscape produced by ENISA apply to railways
• Analise threats in the light of what is specific to the railway context

This process is still in learning phase.

The report is built with full cooperation with the ER ISAC and the CISO Forum* ( *will be soon be instated).

The targeted audience for the Threat Landscape, apart CCSP WG itself, is:

• CISO Forum*
• ER ISAC
• ENISA
• ERA
• Railways that are not part of the CSSP Working Group

Note: Functional links between the Threat Landscape and the Solution Catalogues, as well as with Best Practices will be introduced in 2023.

The Threat Landscape Process

Threat Landscape Sources

• Dragos ICS cybersecurity year in review 2020 (2021)
• ENISA 2020 Threatlandscape (expected in a few days)
• Airbus Approach for Cyber Security in the Rail Sector (2020) https://airbus-cyber-security.com/wp-content/uploads/2020/06/Airbus
• CyberSecurity_White-paper_Rail-Sector_2020_final.pdf
• EATM-CERT 2021 report on cyber in aviation (2021)
• The cyber threat against the Danish railway sector (2021)
• Cybersecurity Threat Assessment Railway Netherlands 2019 – 2020
• Fortinet Threat Report 1H 2020
• Kaspersky 2H 2019 ICS Report
• ENISA WP2018 Threatlandscape
• CyberX 2020 Global IOT/ICS Risk report
• PWC report Under the lens – The Rail Sector (Q3 2019)
• The Thales whitepaper – Cybersecurity and the Rail Industry (2020)
• ISF Threat Horizon 2021 – (2019)
• Cybersecurity Threat Assessment Railway Netherlands 2019 – 2020
• Nixu Top 5 Cyber attacks 2020

ENISA 2021 Threat Landscape

2022 UIC CSSP Threat Landscape Heat Map

2022 TL Conclusion

To be added after 15 Dec workshop…

2022 UIC CSSP Threat Landscape Heat Map

2022 TL Conclusion

To be added after 15 Dec workshop…