I am looking for well analyzed case studies of cyber security incidents within the transportation sector. It can include rail, aeronautical or even motor vehicles.
1) Török, Á., Szalay, Z., Uti, G. et al. Modelling the effects of certain cyber-attack methods on urban autonomous transport systems, case study of Budapest. J Ambient Intell Human Comput 11, 1629–1643 (2020). https://doi.org/10.1007/s12652-019-01264-8 Open access: Article Modelling the effects of certain cyber-attack methods on urb...
2) Ben Farah, M.A.; Ukwandu, E.; Hindy, H.; Brosset, D.; Bures, M.; Andonovic, I.; Bellekens, X. Cyber Security in the Maritime Industry: A Systematic Survey of Recent Advances and Future Trends. Information 2022, 13, 22. https://doi.org/10.3390/info13010022, Open access: Article Cyber Security in the Maritime Industry: A Systematic Survey...
Exploring case studies of cybersecurity incidents within the transportation sector is an insightful approach to understanding the vulnerabilities and threats in this critical industry. Here are some notable cyber security incidents and sources where you can find detailed analyses of these cases:
1. **2015 Jeep Cherokee Hack:**
- **Incident:** Security researchers remotely hacked a Jeep Cherokee through its Uconnect system, demonstrating the ability to control the vehicle’s engine, transmission, brakes, and other critical functions.
- **Reference:** "Road vehicles — Cybersecurity engineering" by ISO/SAE 21434 provides a framework for automotive cybersecurity and discusses vulnerabilities like those exploited in the Jeep hack.
2. **2016 San Francisco Municipal Transportation Agency Ransomware Attack:**
- **Incident:** The San Francisco light rail system was hit by a ransomware attack, leading to free rides for passengers and financial losses for the agency.
- **Reference:** The Department of Homeland Security’s Transportation Security Administration report on "Cybersecurity Best Practices for the Transportation Sector" includes analysis and recommendations that can be applied to incidents like this.
3. **2017 A.P. Moller-Maersk Cyberattack:**
- **Incident:** Global shipping giant Maersk was affected by the NotPetya malware, causing significant disruption to its operations and a financial hit of hundreds of millions.
- **Reference:** "The NotPetya Cyber Attack: A Case Study" published by Harvard Kennedy School's Belfer Center discusses the wider impact of this incident.
4. **2018 Atlanta Hartsfield-Jackson Airport Cyber Incident:**
- **Incident:** A ransomware attack on the City of Atlanta affected systems at the Atlanta Hartsfield-Jackson Airport, including flight information displays and Wi-Fi systems.
- **Reference:** "The State of Ransomware in the US: Report and Statistics 2020" by Emsisoft discusses various ransomware attacks, including those impacting public sector entities.
5. **Polish Airlines Grounded Due to IT Systems Hack in 2015:**
- **Incident:** LOT Polish Airlines had to cancel flights due to an attack on their ground computer systems, affecting around 1,400 passengers.
- **Reference:** "Cyber Risk in Aviation" by the International Air Transport Association (IATA) offers insights into cyber risks in the aviation sector.
6. **2013 Korean Rail Cyberattack:**
- **Incident:** South Korea’s railway operator Korail experienced a cyberattack, allegedly by North Korean hackers, leading to disruptions in train services.
- **Reference:** "Cybersecurity and Cyberwar: What Everyone Needs to Know" by P.W. Singer and Allan Friedman includes discussions relevant to national infrastructure cyberattacks.
These case studies offer a glimpse into the diverse cybersecurity challenges faced by the transportation sector. For in-depth analysis, you might want to look at industry reports, academic journals in cybersecurity, or specific transport industry publications. These can typically be accessed through academic databases, professional cybersecurity organizations, or industry groups specializing in transportation security.