Public projects DarkTerritory
Infra crítica · RF · Embedded systems
DarkTerritory
A research series on the security of railway signalling, from the legacy Spanish ASFA system to the European ERTMS/ETCS.
DarkTerritory looks at how the systems that keep trains apart and safe work on the inside, and what happens when they're analysed with radio tools anyone can get. It starts with Spain's 1970s ASFA system and moves up to the European ERTMS/ETCS standard replacing it.
The work combines public documentation, signal analysis with software-defined radio (SDR) and proof-of-concept work with accessible hardware: capturing trackside balises, studying their modulation and replaying their messages in a controlled way.
The goal is defensive: to show the railway sector how accessible these techniques are so it can strengthen its protections. The series has been presented on the leading international stages.
Where I've presented it
DarkTerritory III: Vectores de ataque al sistema de señalización ferroviaria europeo ERTMS/ETCS
Program
Breaking the Rails: Taking Control Over Legacy and ERTMS/ETCS Railroad Signaling Systems
Slides
Signaling Beyond Safety: Security Challenges in Legacy and ERTMS/ETCS Systems
Program
Dark Territory II: paralizando la red ferroviaria de alta velocidad
Program
Abusing legacy railroad signaling systemsPrimer y, hasta la fecha, único ponente español en CODE BLUE (Tokio).
Video
Slides
Abusing legacy railroad signaling systems
Program
Video
Slides
Dark territory: paralizando la red ferroviaria de un país entero
Program (archived)