The Cyber Security Challenges and Countermeasures session was presented by Edward Fok, FHWA Resource Center; Bob Arnold, Director, FHWA Office of Transportation Management; Dennis Motiani, Executive Director , NOCOE; and Drew Van Duren, Leidos, Principle Crypto Systems Engineer

Ed Folk’s presentation, “How We Got Here and the Challenges Ahead” focused on the various types of efforts that have been in place the past few years that focus on the issue of Cybersecurity such as the T3 webinar on Cyber Security, the formation of the 2012 TRB Cyber Security subcommittee; an ITE Journal ariticle on Transportation Cyber Security; the 2014 creation of the FHWA Cyber Security Working Group and an additional ITE Journal article on Traffic Management Center Cyber Security. Folk also presented on continuing challenges within the realm of transportation cybersecurity including the need to develop a security mindset, understanding what a security mindset is, monitoring for operations but not security and dealing with information overload.

Bob Arnold presented on “Cyber Security, Challenges and Countermeasures.” Arnold discussed a transportation  cyber-security framework that involves a process of monitoring, alerting and advising owners and operators of ITS deployments. From his experiences in dealing with cybersecurity issues,  Arnold stated that some of the lessons learned included finding a better way to communicate and spread the word about incidents and that IT Cyber Security experts do not have the domain knowledge of transportation systems for proper threat assessment.

Dennis Motiani, NOCoE Executive Director presented on his knowledge of dealing with transportation cyber security issues while assistant commissioner with the New Jersey Department of Transportation; and that the NOCoE site has resources on Cybersecurity, an archived webcast on the issue as well as a discussion forum topic on the matter; all of which can serve to help those dealing with the issue.

Drew Van Duren’s presentation, “Connected Vehicles: Vehicles, Traffic Infrastructure and Secure Communications,” focused on security and safety, privacy security and trust and how these elements relate to connected vehicles, the role of cryptography, the cryprographic credentials as well as traffic infrastructure and device management. Van Duren explained that the role of cryptography works to enable security in the generation and distribution of Digital certificates  that are distributed to all connected vehicles and roadside devices. Ultimately, Van Duren says that what this means for traffic system operators is the provisioning of security devices, networking and management of roadside devices and responding to device-tampering security issues and the potential need to ‘revoke’ device credentials to obtain new ones.