Security Research Of Embedded Web On Railway Signal Control System

With the rapid development of embedded system and network information technology, the combination of embedded application and network is more and more closely, embedded web system with its unique advantages is widely applied to various fields. Among these fields, the railway sector is one of the most popular application plan. The requirement of real-time control will increased since the demand of the running speed is never satisfied in the railway system. At present, running status of railway signal equipment greatly depends on monitoring and control system, the availability of the monitoring system, real-time, reliability, and its cost are burning questions in the railway signal system. The embedded Web server is applied to the monitoring system of railway, which not only reduces the cost, improves the real-time performance and reliability of monitoring and control system. However, the safety should be considered at the same time, once the embedded Web system suffered from virus or malicious attacks, intrusion of hackers and malicious tampering. Those problems will be serious threats to the safety of railway signal system, and even cause immeasurable loss. Thus, when combined embedded web system with railway signal equipment, its’safety is particularly important.This paper designs two platforms based on the embedded Web server environment: CBI monitoring platform and test platform. Then, railway line control simulation platform is designed and implemented based on Siemens PLC. The designed monitoring platform and the railway line control simulation platform working principles are as follows:the client remote control railway line control simulation platform by embedded Web server, and real-time monitoring railway line simulation board. In the platform, the embedded Web server build in the ARM hardware platform with an embedded Linux operating system and communication with Siemens S7-200PLC by using PPI communication protocol based on a serial port.The embedded Web server test platform is set up later on. The test platform for Web system security problem, that is based on the analysis of the current attack technical principle and means of attack, using hypertext preprocessor (PHP) language, CSS, database and related technology to carry on the design. The test platform including a variety of attack techniques, such as brute force, SQL injection attacks, cross-site attack and file upload attack. According to attack test,results which can clearly shows that all kinds of attacks on embedded Web server have different effects, and causes the system disordersThe paper firstly studies the feasibility of embedded Web server applied in railway signal system. Meanwhile, designs and implements CBI monitoring platform and the railway line control simulation platform based on embedded Web server. Then, the paper studies the safety of embedded Web technology applied into the railway signal system and sets up an embedded web server test platform. The results show that the embedded Web technologies applied into the railway signal control system has the advantages of real-time and reliable. Furthermore, the security should be considered as much as possible in order to improve the whole control system reliability when the embedded web applied into railway signal control system.