Who should attend the course

• All CIOs of zonal and divisional railways


• Head of IT of zonal and divisional railways CSTEs


• Computer professionals working in Railway Industry.


• Operation and Maintenance of a railway and Metro


• Design of railway networks and railway systems


• Safety and risk assessments of railway systems and networks

Expected Outcome of the Training

• Awareness of cyber threats about Network Technologies and operational technologies with special reference to Railways


• Awareness of Preventive techniques


• Prevention from the cyber damage.

Curriculum Course

Part 1: Cybersecurity awareness and Network Threats of Railway

Duration: 7 Hours

Cyber Threat Landscape for Railways

• Types of Cyber Threats


• Malware Attacks


• Ransomware


• Phishing


• DDoS Attacks


• Insider Threats


• Case Studies


• Notable Cyber Attacks on Railways

Vulnerabilities in Railway Cyber System

• Network Vulnerabilities
  
  
  • Communication Networks
  
  
  • Control Systems


• Software Vulnerabilities
  
  
  • Operating Systems
  
  
  • Railway-specific Software


• Hardware Vulnerabilities
  
  
  • Infrastructure Components
  
  
  • IoT Devices

Preventive Measures and Best Practices

• Cybersecurity Policies and Frameworks
  
  
  • Employee Training and Awareness


• Network Security
  
  
  • Firewalls and Intrusion Detection Systems
  
  
  • Secure Communication Protocols


• Software Security
  
  
  • Patch Management
  
  
  • Code Review


• Hardware Security
  
  
  • Physical Security Measures
  
  
  • Device Authentication

International Collaboration and Standards

• Sharing Threat Intelligence


• International Cybersecurity Standards for Railways

Future Trends and Emerging Technologies

• Evolving Cyber Threats


• Technological Advancements and Their Implications

Part 2: ➢Operational Threats of Railways

Duration: 8 Hours

Introduction to CS

• Cybersecurity Fundamentals


• CIA Model


• Small Glossary of CS


• Common Cybersecurity Products


• 3A - Authentication, Authorization, Accounting


• Network Security

Anatomy of an Attack

• Cyber Kill Chain


• Reconnaissance Techniques


• Known Attacks Walkthrough

Physical Security and Cyber Security

• SE techniques


• Hackers’ Tools

“Cyber Threats to Railways”
Threats on the railway Industry

• Timeline of ICS attacks history


• Why is defending Rail Networks different?

Attacks on Railway networks

• Rail architecture       


• Attack vectors

Railway Cybersecurity Standards

• Worldwide Regulation


• TS 50701


• Explaining Fundamental Requirements


• Explaining Fundamental Requirements

Personal Security
“How to defend Railway Networks”
Rail CSOC cyber security operation centre

• Cyber Threat detection & mitigation


• Introduction to CSOC operations


• CSOC tools and systems


• Rail CSOC structure

Railway Cybersecurity Standards

• Defense in depth (Railways)


• Zone and conduits


• Threat Intelligence


• CylusOne Introduction


• CylusOne for SOC/OCC