Intelligent Traffic Management Systems Security in the IoT ...
Transcript of Intelligent Traffic Management Systems Security in the IoT ...
![Page 1: Intelligent Traffic Management Systems Security in the IoT ...](https://reader030.fdocuments.net/reader030/viewer/2022012514/618dc2e2050081058246f77e/html5/thumbnails/1.jpg)
Intelligent Traffic Management Systems
Security in the IoT Age
September 14, 2018
Darryl Dawson, P. E. I T S Engineering Ltd.
1
![Page 2: Intelligent Traffic Management Systems Security in the IoT ...](https://reader030.fdocuments.net/reader030/viewer/2022012514/618dc2e2050081058246f77e/html5/thumbnails/2.jpg)
Traffic Management System Functions
•Performance Monitoring
• Incident Management
•System Control
•Traffic Signal Management
• ITS Equipment Health Monitoring
•Active Traffic Management
•Managed Lanes
• Integrated Corridor Management 2
![Page 3: Intelligent Traffic Management Systems Security in the IoT ...](https://reader030.fdocuments.net/reader030/viewer/2022012514/618dc2e2050081058246f77e/html5/thumbnails/3.jpg)
TMS – Basic Complexity
•Single host computer and operator displays with integrated sensors and/or 3rd party data services
3
![Page 4: Intelligent Traffic Management Systems Security in the IoT ...](https://reader030.fdocuments.net/reader030/viewer/2022012514/618dc2e2050081058246f77e/html5/thumbnails/4.jpg)
TMS - Moderate Complexity
•Single Center with multiple operator stations, video wall, client/server hardware and OS with most TMS functions and integrated field sensors and communications
4
![Page 5: Intelligent Traffic Management Systems Security in the IoT ...](https://reader030.fdocuments.net/reader030/viewer/2022012514/618dc2e2050081058246f77e/html5/thumbnails/5.jpg)
TMS – High Complexity
•Multiple TMCs networked Center to Center within state or region, integrated with agency IT network, monitoring large numbers of sensors, field VMS and providing real-time mobility information to many customers.
5
![Page 6: Intelligent Traffic Management Systems Security in the IoT ...](https://reader030.fdocuments.net/reader030/viewer/2022012514/618dc2e2050081058246f77e/html5/thumbnails/6.jpg)
Threat Environment 2002 2013
Incident Frequency vs. Severity:
Planned Events
•Public Safety
Minor Incident
•DOTs, Sate & Local Agencies
Major Incident
•More Locals
HAZMAT Event
• Emergency Managers
Natural Disaster
•State Emergency Managers/Feds
Terrorist Incident
• Many Feds
Severity
![Page 7: Intelligent Traffic Management Systems Security in the IoT ...](https://reader030.fdocuments.net/reader030/viewer/2022012514/618dc2e2050081058246f77e/html5/thumbnails/7.jpg)
Threat Sophistication 1990 - 2018
7
![Page 8: Intelligent Traffic Management Systems Security in the IoT ...](https://reader030.fdocuments.net/reader030/viewer/2022012514/618dc2e2050081058246f77e/html5/thumbnails/8.jpg)
Impact of CAVs on the Threat
8
![Page 9: Intelligent Traffic Management Systems Security in the IoT ...](https://reader030.fdocuments.net/reader030/viewer/2022012514/618dc2e2050081058246f77e/html5/thumbnails/9.jpg)
San Francisco Transit Attack
• Started Friday, November 25, 2016
• Most computers restored from backups on Monday, some took 2 days longer. Some data after most recent backup cannot be recovered.
• Damage done • 900 office computers infected
• Revenue Lost – Turned off subway ticket machines and fare gates
• Overtime cost to restore computers.
• Email system disrupted.
• Payroll system offline for weekend.
• Demanded 100 bitcoins. No ransom was paid.
9
![Page 10: Intelligent Traffic Management Systems Security in the IoT ...](https://reader030.fdocuments.net/reader030/viewer/2022012514/618dc2e2050081058246f77e/html5/thumbnails/10.jpg)
Colorado DOT Attack
• Started on February 21, 2018
• Re-infected in March, 2018
• Governor declared disaster and FBI and National
Guard sent in to assist mitigation and restoration
• Damage done • 2,000 computers infected with ransomware
• 80% back by March 23
• Data stored after the February 17 backup was not recovered
• Cost was not disclosed, but average is $3.62 Million per breach.
10
![Page 11: Intelligent Traffic Management Systems Security in the IoT ...](https://reader030.fdocuments.net/reader030/viewer/2022012514/618dc2e2050081058246f77e/html5/thumbnails/11.jpg)
City of Atlanta Attack
• Started March 22, 2018
• Crisis still ongoing 2 months later
• Damage done • All City computers turned off for at least 5 days
• 1/3 of 424 apps still disabled in May
• Mission critical city functions affected
• Cost of recovery estimated at $11.5 Million
11
![Page 12: Intelligent Traffic Management Systems Security in the IoT ...](https://reader030.fdocuments.net/reader030/viewer/2022012514/618dc2e2050081058246f77e/html5/thumbnails/12.jpg)
T3 Webinar 2011 – Volpe TSC
• Increasing dependence on Info systems and networks
• Cyber Risks Growing
• Need a Comprehensive Approach
• Need a culture of cybersecurity
• Necessary for Transportation Mobility and Safety
12
![Page 13: Intelligent Traffic Management Systems Security in the IoT ...](https://reader030.fdocuments.net/reader030/viewer/2022012514/618dc2e2050081058246f77e/html5/thumbnails/13.jpg)
Best Practices
13
![Page 14: Intelligent Traffic Management Systems Security in the IoT ...](https://reader030.fdocuments.net/reader030/viewer/2022012514/618dc2e2050081058246f77e/html5/thumbnails/14.jpg)
Thank You
Darryl Dawson, P. E.
312-731-9030
14