{"id":"https://openalex.org/W2603626180","doi":"https://doi.org/10.1145/3052973.3053027","title":"An Attack Against Message Authentication in the ERTMS Train to Trackside Communication Protocols","display_name":"An Attack Against Message Authentication in the ERTMS Train to Trackside Communication Protocols","publication_year":2017,"publication_date":"2017-03-31","ids":{"openalex":"https://openalex.org/W2603626180","doi":"https://doi.org/10.1145/3052973.3053027","mag":"2603626180"},"language":"en","primary_location":{"id":"doi:10.1145/3052973.3053027","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3052973.3053027","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://pure-oai.bham.ac.uk/ws/files/40140352/asiaccs_paper.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5020004082","display_name":"Tom Chothia","orcid":"https://orcid.org/0000-0002-9381-1368"},"institutions":[{"id":"https://openalex.org/I79619799","display_name":"University of Birmingham","ror":"https://ror.org/03angcq70","country_code":"GB","type":"education","lineage":["https://openalex.org/I79619799"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Tom Chothia","raw_affiliation_strings":["University of Birmingham, Birmingham, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Birmingham, Birmingham, United Kingdom","institution_ids":["https://openalex.org/I79619799"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057447722","display_name":"Mihai Ordean","orcid":"https://orcid.org/0000-0002-8951-9196"},"institutions":[{"id":"https://openalex.org/I79619799","display_name":"University of Birmingham","ror":"https://ror.org/03angcq70","country_code":"GB","type":"education","lineage":["https://openalex.org/I79619799"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Mihai Ordean","raw_affiliation_strings":["University of Birmingham, Birmingham, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Birmingham, Birmingham, United Kingdom","institution_ids":["https://openalex.org/I79619799"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028584606","display_name":"Joeri de Ruiter","orcid":"https://orcid.org/0000-0003-1535-2335"},"institutions":[{"id":"https://openalex.org/I145872427","display_name":"Radboud University Nijmegen","ror":"https://ror.org/016xsfp80","country_code":"NL","type":"education","lineage":["https://openalex.org/I145872427"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Joeri de Ruiter","raw_affiliation_strings":["Radboud University, Nijmegen, Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Radboud University, Nijmegen, Netherlands","institution_ids":["https://openalex.org/I145872427"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5088453297","display_name":"Richard J. Thomas","orcid":"https://orcid.org/0000-0002-7199-1265"},"institutions":[{"id":"https://openalex.org/I79619799","display_name":"University of Birmingham","ror":"https://ror.org/03angcq70","country_code":"GB","type":"education","lineage":["https://openalex.org/I79619799"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Richard J. Thomas","raw_affiliation_strings":["University of Birmingham, Birmingham, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Birmingham, Birmingham, United Kingdom","institution_ids":["https://openalex.org/I79619799"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.3498,"has_fulltext":true,"cited_by_count":15,"citation_normalized_percentile":{"value":0.79299759,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":88,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"743","last_page":"756"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11130","display_name":"Coding theory and cryptography","score":0.9921000003814697,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7166475653648376},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.6624743342399597},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6268706321716309},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.6060071587562561},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.602021336555481},{"id":"https://openalex.org/keywords/cryptographic-protocol","display_name":"Cryptographic protocol","score":0.5830129981040955},{"id":"https://openalex.org/keywords/gsm","display_name":"GSM","score":0.5641828775405884},{"id":"https://openalex.org/keywords/message-authentication-code","display_name":"Message authentication code","score":0.5505825877189636},{"id":"https://openalex.org/keywords/protocol-stack","display_name":"Protocol stack","score":0.5295541882514954},{"id":"https://openalex.org/keywords/authentication-protocol","display_name":"Authentication protocol","score":0.5187373757362366},{"id":"https://openalex.org/keywords/communications-protocol","display_name":"Communications protocol","score":0.4691036641597748},{"id":"https://openalex.org/keywords/otway\u2013rees-protocol","display_name":"Otway\u2013Rees protocol","score":0.46288084983825684},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.45813941955566406},{"id":"https://openalex.org/keywords/train","display_name":"Train","score":0.44185715913772583},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.41433385014533997},{"id":"https://openalex.org/keywords/challenge-handshake-authentication-protocol","display_name":"Challenge-Handshake Authentication Protocol","score":0.15378820896148682}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7166475653648376},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.6624743342399597},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6268706321716309},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.6060071587562561},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.602021336555481},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.5830129981040955},{"id":"https://openalex.org/C59201141","wikidata":"https://www.wikidata.org/wiki/Q46904","display_name":"GSM","level":2,"score":0.5641828775405884},{"id":"https://openalex.org/C141492731","wikidata":"https://www.wikidata.org/wiki/Q1052621","display_name":"Message authentication code","level":3,"score":0.5505825877189636},{"id":"https://openalex.org/C38601921","wikidata":"https://www.wikidata.org/wiki/Q1757693","display_name":"Protocol stack","level":3,"score":0.5295541882514954},{"id":"https://openalex.org/C21564112","wikidata":"https://www.wikidata.org/wiki/Q4825885","display_name":"Authentication protocol","level":3,"score":0.5187373757362366},{"id":"https://openalex.org/C12269588","wikidata":"https://www.wikidata.org/wiki/Q132364","display_name":"Communications protocol","level":2,"score":0.4691036641597748},{"id":"https://openalex.org/C35788789","wikidata":"https://www.wikidata.org/wiki/Q1320237","display_name":"Otway\u2013Rees protocol","level":5,"score":0.46288084983825684},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.45813941955566406},{"id":"https://openalex.org/C190839683","wikidata":"https://www.wikidata.org/wiki/Q2448197","display_name":"Train","level":2,"score":0.44185715913772583},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.41433385014533997},{"id":"https://openalex.org/C207828512","wikidata":"https://www.wikidata.org/wiki/Q1060131","display_name":"Challenge-Handshake Authentication Protocol","level":4,"score":0.15378820896148682},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C24590314","wikidata":"https://www.wikidata.org/wiki/Q336038","display_name":"Wireless sensor network","level":2,"score":0.0},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.0},{"id":"https://openalex.org/C58640448","wikidata":"https://www.wikidata.org/wiki/Q42515","display_name":"Cartography","level":1,"score":0.0},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0}],"mesh":[],"locations_count":5,"locations":[{"id":"doi:10.1145/3052973.3053027","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3052973.3053027","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},{"id":"pmh:oai:pure.atira.dk:publications/e2a45ee1-b46e-4503-9bbc-5b6a3e390f1a","is_oa":true,"landing_page_url":"https://research.birmingham.ac.uk/portal/en/publications/an-attack-against-message-authentication-in-the-ertms-train-to-trackside-communication-protocols(e2a45ee1-b46e-4503-9bbc-5b6a3e390f1a).html","pdf_url":"http://pure-oai.bham.ac.uk/ws/files/40140352/asiaccs_paper.pdf","source":{"id":"https://openalex.org/S4306402634","display_name":"University of Birmingham Research Portal (University of Birmingham)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I79619799","host_organization_name":"University of Birmingham","host_organization_lineage":["https://openalex.org/I79619799"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":""},{"id":"pmh:oai:pure.atira.dk:Publications/e2a45ee1-b46e-4503-9bbc-5b6a3e390f1a","is_oa":false,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4306402634","display_name":"University of Birmingham Research Portal (University of Birmingham)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I79619799","host_organization_name":"University of Birmingham","host_organization_lineage":["https://openalex.org/I79619799"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":""},{"id":"pmh:oai:pure.atira.dk:openaire/e2a45ee1-b46e-4503-9bbc-5b6a3e390f1a","is_oa":true,"landing_page_url":"https://research.birmingham.ac.uk/en/publications/e2a45ee1-b46e-4503-9bbc-5b6a3e390f1a","pdf_url":null,"source":{"id":"https://openalex.org/S4306402634","display_name":"University of Birmingham Research Portal (University of Birmingham)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I79619799","host_organization_name":"University of Birmingham","host_organization_lineage":["https://openalex.org/I79619799"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Chothia, T, Ordean, M, De Ruiter, J & Thomas, R J 2017, An attack against message authentication in the ERTMS train to trackside communication protocols. in ASIA CCS '17 : Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security. Association for Computing Machinery , New York, NY, USA, pp. 743-756, ASIA CCS '17, Abu Dhabi, United Arab Emirates, 2/04/17. https://doi.org/10.1145/3052973.3053027","raw_type":"contributionToPeriodical"},{"id":"pmh:oai:repository.ubn.ru.nl:2066/173193","is_oa":false,"landing_page_url":"http://hdl.handle.net/2066/173193","pdf_url":null,"source":{"id":"https://openalex.org/S4306401067","display_name":"Radboud Repository (Radboud University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I145872427","host_organization_name":"Radboud University Nijmegen","host_organization_lineage":["https://openalex.org/I145872427"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Karri, R. (ed.), ASIA CCS '17: Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security, Abu Dhabi, United Arab Emirates \u2014 April 02 - 06, 2017, pp. 743-756","raw_type":"Article in monograph or in proceedings"}],"best_oa_location":{"id":"pmh:oai:pure.atira.dk:publications/e2a45ee1-b46e-4503-9bbc-5b6a3e390f1a","is_oa":true,"landing_page_url":"https://research.birmingham.ac.uk/portal/en/publications/an-attack-against-message-authentication-in-the-ertms-train-to-trackside-communication-protocols(e2a45ee1-b46e-4503-9bbc-5b6a3e390f1a).html","pdf_url":"http://pure-oai.bham.ac.uk/ws/files/40140352/asiaccs_paper.pdf","source":{"id":"https://openalex.org/S4306402634","display_name":"University of Birmingham Research Portal (University of Birmingham)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I79619799","host_organization_name":"University of Birmingham","host_organization_lineage":["https://openalex.org/I79619799"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":""},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1208334278","display_name":null,"funder_award_id":"EP/L001802/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G2203431522","display_name":null,"funder_award_id":"EP/M002845/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G717956812","display_name":"SCEPTICS: A SystematiC Evaluation Process for Threats to Industrial Control Systems","funder_award_id":"EP/M002845/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G8682795926","display_name":null,"funder_award_id":"EP/R007128/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"}],"funders":[{"id":"https://openalex.org/F4320309480","display_name":"Nvidia","ror":"https://ror.org/03jdj4y14"},{"id":"https://openalex.org/F4320334627","display_name":"Engineering and Physical Sciences Research Council","ror":"https://ror.org/0439y7842"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2603626180.pdf","grobid_xml":"https://content.openalex.org/works/W2603626180.grobid-xml"},"referenced_works_count":14,"referenced_works":["https://openalex.org/W1571721593","https://openalex.org/W1918535139","https://openalex.org/W1927332842","https://openalex.org/W1978033790","https://openalex.org/W2055634358","https://openalex.org/W2093972407","https://openalex.org/W2095202986","https://openalex.org/W2112006428","https://openalex.org/W2140218284","https://openalex.org/W2344376994","https://openalex.org/W2481364346","https://openalex.org/W2493553945","https://openalex.org/W2561675875","https://openalex.org/W6678459151"],"related_works":["https://openalex.org/W2388247877","https://openalex.org/W2362963703","https://openalex.org/W2379241680","https://openalex.org/W1629593159","https://openalex.org/W1581605569","https://openalex.org/W2354152081","https://openalex.org/W2127299350","https://openalex.org/W2133761101","https://openalex.org/W2158602785","https://openalex.org/W2060085213"],"abstract_inverted_index":{"This":[0],"paper":[1],"presents":[2],"the":[3,10,14,27,40,47,71,77,88,96,193,196],"results":[4],"of":[5,9,23,45,121,140,165,195,206,212],"a":[6,53,83,106,119,191,203,213],"cryptographic":[7],"analysis":[8],"protocols":[11,25],"used":[12,135,160],"by":[13,39],"European":[15],"Rail":[16],"Traffic":[17],"Management":[18],"System":[19],"(ERTMS).":[20],"A":[21],"stack":[22],"three":[24,67],"secures":[26],"communication":[28,36],"between":[29],"trains":[30,167],"and":[31,80],"trackside":[32],"equipment;":[33],"encrypted":[34],"radio":[35],"is":[37,133],"provided":[38],"GSM-R":[41,69],"protocol,":[42,79,98],"on":[43],"top":[44],"this":[46,116,146,172],"EuroRadio":[48,89,156],"protocol":[49],"provides":[50],"authentication":[51],"for":[52,142,198],"train":[54,111,124],"control":[55,112,125,188,211],"application-level":[56,97],"protocol.":[57,90],"We":[58,114],"present":[59,82,150],"an":[60,102,151,181],"attack":[61,86,117,147],"which":[62],"exploits":[63],"weaknesses":[64,75,94],"in":[65,95,190],"all":[66,186],"protocols:":[68],"has":[70],"same":[72],"well":[73],"known":[74],"as":[76],"GSM":[78],"we":[81,127,175],"new":[84],"collision":[85],"against":[87],"Combined":[91],"with":[92,118],"design":[93],"these":[99],"vulnerabilities":[100],"allow":[101],"attacker,":[103],"who":[104,183],"observes":[105],"MAC":[107],"collision,":[108],"to":[109,136,158,161,171,209],"forge":[110],"messages.":[113],"demonstrate":[115],"proof":[120],"concept":[122],"using":[123],"messages":[126],"have":[128,202],"generated":[129],"ourselves.":[130],"Currently,":[131],"ERTMS":[132],"only":[134],"send":[137],"small":[138],"amounts":[139,164],"data":[141,166],"short":[143],"sessions,":[144],"therefore":[145],"does":[148],"not":[149],"immediate":[152],"danger.":[153],"However,":[154],"if":[155],"was":[157],"be":[159],"transfer":[162],"larger":[163],"would":[168,201],"become":[169],"vulnerable":[170],"attack.":[173],"Additionally,":[174],"calculate":[176],"that,":[177],"under":[178],"reasonable":[179],"assumptions,":[180],"attacker":[182],"could":[184],"monitor":[185],"backend":[187],"centres":[189],"country":[192],"size":[194],"UK":[197],"45":[199],"days":[200],"1%":[204],"chance":[205],"being":[207],"able":[208],"take":[210],"train.":[214]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":2},{"year":2017,"cited_by_count":1}],"updated_date":"2026-08-26T07:47:46.906454","created_date":"2017-04-07T00:00:00"}