Security for Safety

摘要

The planned replacement of conventional interlocking systems with digital interlocking technology (DSTW), as planned by DB Netz as part of its NeuPro implementation, increases the potential danger of unauthorised access. The replacement of proprietary systems using closed communication circuits with commercial systems with open networks creates new IT security requirements. A basic prerequisite for the use of security and safety components now involves their separation with regard to their proof of safety (encapsulation) in order to meet the different requirements for update cycles. Security components often have to be adapted to changing threat scenarios, whereby there is the danger of a loss of security approval during a security upgrade. The existing safety architecture can be adopted in this case. The overall security requirements are achieved by embedding the security technology in an organisational security shell. The experience gained in the NeuPro interlocking pilot projects will provide important insights into the interaction between safety and security. In addition to the technical experience, important insights will also be gained into the hitherto unseen costs of technical security and organisational development and operations. However, a more far-reaching solution needs to be explored in the long term. According to the current state of knowledge, this will consist of a completely new interlocking architecture with integrated security measures, which must be taken into account from the very outset of development.