The European rail community gathered on board the European Train heading to InnoTrans 2026 The European rail...
Press Release – European Train: Europe on the way to InnoTrans 2026
read more
On-Board Cybersecurity Monitoring and Threat Detection for Rolling Stock
As European railways become more connected and digitalised, cybersecurity is increasingly being embedded into the design and operation of railway systems. Recent Europe’s Rail (EU-Rail) cybersecurity specifications promote a common approach based on interoperability, compliance with relevant standards and regulations, and the principle of Security by Design across railway components and systems.
The solution
The solution provides a trusted embedded cybersecurity monitoring capability for onboard railway networks, enabling continuous inspection of communications, telemetry and operational behaviour of onboard systems.
It deploys a secure edge device integrated into onboard train networks, capable of collecting telemetry, analysing events and generating alerts in response to anomalous or suspicious cyber activities.
The solution also applies detection mechanisms aligned with recognised threat models, such as the ENISA Threat Landscape, to identify, contain and mitigate cyber risks affecting onboard systems and train-to-ground communications.
Readiness for Industrialisation and Deployment
The solution is currently at prototype (MVP) stage, with validation activities planned through Proof of Concept (PoC) in a representative railway environment.
- During FP3, the solution has been demonstrated in operational conditions, including the simulation of relevant cybersecurity scenarios.
- Following successful validation, the solution is expected to evolve towards pre-industrial deployment, subject to further integration, standardisation and certification activities.
- Indicative timeline for industrial readiness is post-FP3 (beyond 2027), depending on validation outcomes and market uptake conditions.
Maturity level
- Initial TRL: TRL 2 (technology concept formulated).
- Current TRL: TRL 6 (technology demonstrated in a relevant operational environment).
Expected benefits
- Enhanced cybersecurity resilience: enables early detection and response to cyber threats, contributing to the protection of critical onboard systems.
- Support to regulatory compliance: facilitates alignment with emerging railway cybersecurity standards and frameworks (e.g. ISA/IEC 62443, TS50701).
- Improved operational reliability: reduces the likelihood and impact of cyber incidents affecting service continuity and system availability.
- Protection of sensitive data: strengthens safeguards for operational and passenger-related information (e.g. CCTV, onboard data systems).
- Contribution to EU-Rail objectives: supports the transition towards secure, connected and intelligent railway systems, reinforcing trust in digitalised rail operations.
Who benefits
Infrastructure Managers
Railway operators
Suppliers
Final users
Conclusion
Resulting from Europe’s Rail research and innovation activities, the solution supports a more resilient and trustworthy digital railway. It helps protect critical systems and data while contributing to improved safety, security and service reliability as railway operations become increasingly connected and digitalised.
Learn more about the project
FP3-IAM4Rail
This solution has been developed within the EU-Rail Flagship Project FP3-IAM4RAIL, which focuses on seven different integrated demonstrators for rail assets which are key for research and innovation in the rail sector.