Cybersecurity in Transportation Networks Flashcards

Which type of attack involves overwhelming a transportation agency's network with traffic to make online services unavailable?

Answer: Distributed Denial-of-Service (DDoS)

A DDoS attack floods a network or server with traffic from multiple sources, rendering services unavailable and potentially disrupting transportation operations that rely on internet connectivity.

What is 'air gapping' in the context of transportation critical infrastructure protection?

Answer: Physically isolating a computer or network from unsecured external networks, including the internet

Air gapping physically isolates critical transportation control systems from external networks, preventing remote cyberattacks by ensuring no electronic connection exists to less-trusted networks.

A transportation security officer notices an unfamiliar USB drive left near a workstation. The correct action is to:

Answer: Report it to IT security and do not plug it in

Unknown USB drives may contain malware designed to auto-execute when plugged in (a 'baiting' attack); they must be reported to IT security and never inserted into any device.

Which cybersecurity concept refers to continuously verifying every user and device attempting to access transportation network resources, regardless of location?

Answer: Zero Trust Architecture

Zero Trust Architecture operates on the principle of 'never trust, always verify,' requiring continuous authentication and authorization for all users and devices, even those inside the network perimeter.

Patch management in transportation cybersecurity primarily involves:

Answer: Regularly applying software updates and security fixes to close known vulnerabilities

Patch management ensures that operating systems, applications, and firmware receive timely security updates to close vulnerabilities that attackers could exploit in transportation control systems.

What is a penetration test (pen test) in the context of transportation network security?

Answer: An authorized simulated cyberattack conducted to identify vulnerabilities before real attackers do

A penetration test involves authorized security professionals attempting to breach systems using attacker techniques to identify and remediate vulnerabilities before malicious actors can exploit them.

Why is securing the GPS infrastructure used by transportation systems a critical cybersecurity concern?

Answer: Because GPS spoofing or jamming can misdirect vehicles, disrupt logistics, and create safety hazards

GPS signals are unencrypted and can be spoofed or jammed, potentially causing aircraft, ships, or autonomous vehicles to navigate incorrectly, with serious safety and security consequences.