One of the key research issues in further strengthening the role of railways in the transportation system is to achieve the highest possible level of cyber security against significant threats to the signaling and telecom systems. The European Rail Traffic Management System (ERTMS) was designed in the 1990s with the security measures and strategies available at the time. However, ERTMS' underlying communication technology, GSM-R, needs replacing, and replacement strategies are already underway. Due to their direct effects on safety, ERTMS security mechanisms also need updating to face current security threats. This article provides a security analysis of ERTMS' safety layer, Euroradio, in terms of current security threats. After identifying its vulnerabilities, we present four main recommendations: a more robust cryptographic mechanism, a new key distribution scheme, a new key storage and system integrity module, and a set of countermeasures for avoiding radio jamming attacks.

Reliability is a key research issue to promote the role of rail in the transportation system. An important set of critical and vital railway services, such as Traction Power Supply and Supervision Systems, relay currently on modern Supervisory Control and Data Acquisition (SCADA) systems. At the same time, these large scale and networked SCADA systems are deployed over heterogeneous wide area networks. Current strategies to warrant reliability on these systems focus on costly equipment redundancy or retransmission techniques with associated delay penalization. In this paper, we propose a MultiPath strategy with redundant policy to increase reliability in railway SCADA over TCP/IP systems. We built a hybrid simulation tool with real Modbus over TCP/IP equipment and validate our approach comparing the obtained results with three alternative strategies (default TCP/IP, backup and default delivery policy).