- Last year's WannaCry cyber attack hit 200,000 victims from over 150 countries.
- The ransomware showed cyber attacks don't merely stay in the virtual world but can have real, and potentially devastating consequences in the physical world.
- Experts say attacks could easily target critical infrastructure, even take over trains in a railway system.
- It's more important than ever to protect the physical, not just virtual, parts of railway systems.
In early May of last year, the world was rocked by the WannaCry cyber attack, which affected more than 200,000 victims and spread to over 150 countries. Computers had essentially been taken hostage by ransomware, and users were asked to pay up in the form of bitcoin.
Law enforcement agencies, health services, telecommunication networks, universities, businesses, and railway systems were all affected by the attack. Estimates of the total damage ranged from hundreds of millions to billions of dollars.
While a fluke in the coding allowed the attack to be stopped in a matter of days, the ordeal was a prescient reminder that cyber attacks don't merely stay in the virtual world - they can have real, and potentially devastating consequences in the physical world.
Particularly when hackers begin targeting vital systems.
"The next kind of attacks we will see will target critical infrastructure in the form of electrical networks, water companies, and other transportation systems," Amir Levintal, former director of the Israel
But railway networks are particularly at risk because rail companies often operate with modern technological components but archaic physical components. That disconnect, Levintal said, leaves their systems vulnerable to hacking.
Modern command centers use wireless connections to control activities, like monitoring train speeds or regulating traffic signals. It's these types of wireless signals can expose a network's vulnerabilities and leave the infrastructure wide open for attack.
"Some train networks use Wi-Fi connections to control critical components of the train, like brakes and doors. Attackers can find ways to access the wireless network to send commands to those components and change the behavior of the train," Levintal said.
"Once attackers succeed in breaching a network to gather information, they can attack the physical elements of the network," he said.
Hackers, Levintal said, "might change the controls on the train or could even access commands in order to derail the train. These kinds of attacks are probable, and once a system is breached it's just a matter of deciding what commands a malicious actor wants to send."
The scenario isn't that far-fetched. In the WannaCry attacks, Germany's rail network, Deutsche Bahn, was incapacitated by its ticketing and information systems going down.
Complex systems have made it easier than ever
Yet hackers don't need to rely on obvious flaws within a major railway system.
"Attackers can find one company that is not secure, access its tools and software, and find similarities in other components in other countries and companies, allowing them to attack more 'secure' companies," Levintal said.
The key to preventing future attacks, Levintal said, is protecting the physical components.
"We must converge old and new technologies and close a complicated security gap," Levintal said.
"We can no longer think that attacks like these won't happen in the future. Rail networks are huge, complex and connected. It's easier than ever to find ways to get into the systems."