Abusing legacy railroad signaling systems

David Meléndez, Gabriela Gabs Garcia

DEF CON 32 Main Stage · Day 1 · Main Stage

In "Abusing legacy railroad signaling systems," David Meléndez and Gabriela Gabs Garcia shed light on critical vulnerabilities within the foundational infrastructure of railway networks. Their DEF CON 32 talk delves into the often-overlooked security posture of older, yet still widely deployed, train control mechanisms. The speakers introduce the concept of "dark territory" – not just a railway term for sections without remote control or automatic blocking, but also a metaphor for areas of railway security that lack adequate supervision and scrutiny from a cybersecurity perspective.

AI review

Meléndez and Garcia's research into legacy railroad signaling systems at DEF CON 32 is a crucial deep dive into an overlooked, yet incredibly high-impact, attack surface. By exposing the fundamental vulnerabilities in passive trackside beacons that rely on simple LC circuits, they highlight a critical national security and safety issue. While a full live demo was still in development, the technical explanation of how these systems can be spoofed or manipulated provides actionable intelligence for defenders, making this a significant contribution to critical infrastructure security.

Watch on YouTube