Computational Technology Resources - CCC

M. Shapoval, V. Deniau, C. Gransart, A. Lang, "Ontology-Driven Scoping and Prioritisation for Railway Penetration Testing", in J. Pombo, (Editor), "Proceedings of the Seventh International Conference on Railway Technology: Research, Development and Maintenance ", Civil-Comp Press, Edinburgh, UK, Online volume: CCC 15, Paper 20.3, 2026, doi:10.4203/ccc.15.20.3

Keywords: railway signalling, cybersecurity, penetration testing, ontology, industrial control systems, safety integrity level.

Abstract

This paper presents an OWL/SWRL-based ontological framework for reproducible, architecture-driven scoping and prioritisation of penetration testing in railway signalling systems. The framework integrates concepts from IEC 62443, EN 50159, EN 50126 and CLC/TS 50701 into a domain-level terminological box (TBox), and operationalises them through a four-layer Semantic Web Rule Language (SWRL) rule architecture that systematically infers vulnerable communication flows, Safety Integrity Level (SIL)-critical attack patterns and test-coverage metrics from instantiated signalling architectures. A demonstration on a European Train Control System (ETCS) Level 2 architecture shows that the reasoner derives meaningful, standards-justified penetration-testing priorities that are not obtainable from existing standards-agnostic approaches. The framework is intended as a formal assessment layer supporting, rather than replacing, expert judgement in railway signalling security testing.

download the full-text of this paper (PDF, 14 pages, 444 Kb)

go to the previous paper
go to the next paper
return to the table of contents
return to the volume description

	Computational & Technology Resources an online resource for computational, engineering & technology publications
	not logged in - login
Front Page Browse CCC CCP CSETS CTR IJRT Other Authors Search Purchase Guide FAQ Contact us	Civil-Comp Conferences ISSN 2753-3239 CCC: 15 PROCEEDINGS OF THE SEVENTH INTERNATIONAL CONFERENCE ON RAILWAY TECHNOLOGY: RESEARCH, DEVELOPMENT AND MAINTENANCE Edited by: J. Pombo Paper 20.3 Ontology-Driven Scoping and Prioritisation for Railway Penetration Testing M. Shapoval^1,2, V. Deniau¹, C. Gransart¹ and A. Lang² ¹Gustave Eiffel University, COSYS-LEOST, Villeneuve-d’Ascq, France ², IKOS, Paris, France doi:10.4203/ccc.15.20.3 Full Bibliographic Reference for this paper M. Shapoval, V. Deniau, C. Gransart, A. Lang, "Ontology-Driven Scoping and Prioritisation for Railway Penetration Testing", in J. Pombo, (Editor), "Proceedings of the Seventh International Conference on Railway Technology: Research, Development and Maintenance ", Civil-Comp Press, Edinburgh, UK, Online volume: CCC 15, Paper 20.3, 2026, doi:10.4203/ccc.15.20.3 Keywords: railway signalling, cybersecurity, penetration testing, ontology, industrial control systems, safety integrity level. Abstract This paper presents an OWL/SWRL-based ontological framework for reproducible, architecture-driven scoping and prioritisation of penetration testing in railway signalling systems. The framework integrates concepts from IEC 62443, EN 50159, EN 50126 and CLC/TS 50701 into a domain-level terminological box (TBox), and operationalises them through a four-layer Semantic Web Rule Language (SWRL) rule architecture that systematically infers vulnerable communication flows, Safety Integrity Level (SIL)-critical attack patterns and test-coverage metrics from instantiated signalling architectures. A demonstration on a European Train Control System (ETCS) Level 2 architecture shows that the reasoner derives meaningful, standards-justified penetration-testing priorities that are not obtainable from existing standards-agnostic approaches. The framework is intended as a formal assessment layer supporting, rather than replacing, expert judgement in railway signalling security testing. download the full-text of this paper (PDF, 14 pages, 444 Kb) go to the previous paper go to the next paper return to the table of contents return to the volume description
Back to top	©Civil-Comp Limited 2023 - terms & conditions