kevin salzer msp, aicp · kevin salzer msp, aicp jacksonville transportation authority,...
TRANSCRIPT
![Page 1: Kevin Salzer MSP, AICP · Kevin Salzer MSP, AICP Jacksonville Transportation Authority, Transportation Innovation Officer Jacksonville, Florida •Understand why transit agencies](https://reader030.vdocuments.net/reader030/viewer/2022040119/5e71f4315bd1f02cab1d9be1/html5/thumbnails/1.jpg)
JTA Approach to Autonomous Vehicle Cyber-readiness Testing
Kevin Salzer MSP, AICP
Jacksonville Transportation Authority,
Transportation Innovation Officer
Jacksonville, Florida
![Page 2: Kevin Salzer MSP, AICP · Kevin Salzer MSP, AICP Jacksonville Transportation Authority, Transportation Innovation Officer Jacksonville, Florida •Understand why transit agencies](https://reader030.vdocuments.net/reader030/viewer/2022040119/5e71f4315bd1f02cab1d9be1/html5/thumbnails/2.jpg)
• Understand why transit agencies must prepare for cyber threats.
• Learn JTA’s testing approach for AV cyber-readiness in a transit environment.
• Identify how transit agencies can use information sharing and analysis organizations (ISAOs/ISACs) to achieve industry resilience.
Key Presentation Takeaways
![Page 3: Kevin Salzer MSP, AICP · Kevin Salzer MSP, AICP Jacksonville Transportation Authority, Transportation Innovation Officer Jacksonville, Florida •Understand why transit agencies](https://reader030.vdocuments.net/reader030/viewer/2022040119/5e71f4315bd1f02cab1d9be1/html5/thumbnails/3.jpg)
• Public feedback
• Operational “fit” with public transit
• Safety, risk, & liability issues
Why perform AV testing?
![Page 4: Kevin Salzer MSP, AICP · Kevin Salzer MSP, AICP Jacksonville Transportation Authority, Transportation Innovation Officer Jacksonville, Florida •Understand why transit agencies](https://reader030.vdocuments.net/reader030/viewer/2022040119/5e71f4315bd1f02cab1d9be1/html5/thumbnails/4.jpg)
JTA AV Testing:Eight Testing Categories
![Page 5: Kevin Salzer MSP, AICP · Kevin Salzer MSP, AICP Jacksonville Transportation Authority, Transportation Innovation Officer Jacksonville, Florida •Understand why transit agencies](https://reader030.vdocuments.net/reader030/viewer/2022040119/5e71f4315bd1f02cab1d9be1/html5/thumbnails/5.jpg)
With the Community Transportation ISAO, JTA has set up a process for its AV partner vendors to share real-time attacks on AV ecosystems:
• Traffic lights
• Command centers
• Monitoring systems
Cybersecurity Testing & Monitoring: What is the attack & who is the attacker?
![Page 6: Kevin Salzer MSP, AICP · Kevin Salzer MSP, AICP Jacksonville Transportation Authority, Transportation Innovation Officer Jacksonville, Florida •Understand why transit agencies](https://reader030.vdocuments.net/reader030/viewer/2022040119/5e71f4315bd1f02cab1d9be1/html5/thumbnails/6.jpg)
More transportation information ecosystems (e.g., operational, enterprise information, and subscribed systems) are now being used for technology-driven service delivery models, connected vehicles, & AVs
Why should transit agencies care about cyber-readiness?
![Page 7: Kevin Salzer MSP, AICP · Kevin Salzer MSP, AICP Jacksonville Transportation Authority, Transportation Innovation Officer Jacksonville, Florida •Understand why transit agencies](https://reader030.vdocuments.net/reader030/viewer/2022040119/5e71f4315bd1f02cab1d9be1/html5/thumbnails/7.jpg)
• Confidentiality & compliance
• Reputation & integrity
• Availability of needed information & communication systems
• AV safety
Why should transit agencies care about cyber-readiness?
Risks
![Page 8: Kevin Salzer MSP, AICP · Kevin Salzer MSP, AICP Jacksonville Transportation Authority, Transportation Innovation Officer Jacksonville, Florida •Understand why transit agencies](https://reader030.vdocuments.net/reader030/viewer/2022040119/5e71f4315bd1f02cab1d9be1/html5/thumbnails/8.jpg)
Transit agencies must:
• Be proactive with cybersecurity risks
• Address three key areas of IT infrastructure: operations, people, and facilities
• Rely on collaborative forums that enable knowledge sharing to promote awareness of new attacks
~APTA Standards Development Program Recommended Practice
Why should transit agencies care about cyber-readiness?
![Page 9: Kevin Salzer MSP, AICP · Kevin Salzer MSP, AICP Jacksonville Transportation Authority, Transportation Innovation Officer Jacksonville, Florida •Understand why transit agencies](https://reader030.vdocuments.net/reader030/viewer/2022040119/5e71f4315bd1f02cab1d9be1/html5/thumbnails/9.jpg)
What is the Community Transportation ISAO?
A cyber intelligence community for transit agencies and vendors working together to meet: • Regulatory requirements• Reduce cyber risk• Identify cyber threats
![Page 10: Kevin Salzer MSP, AICP · Kevin Salzer MSP, AICP Jacksonville Transportation Authority, Transportation Innovation Officer Jacksonville, Florida •Understand why transit agencies](https://reader030.vdocuments.net/reader030/viewer/2022040119/5e71f4315bd1f02cab1d9be1/html5/thumbnails/10.jpg)
ISAO Executive Order
Through Executive Order 13691, the Community Transportation ISAO is to:
• Protect privacy & civil liberties
• Preserve business confidentiality
• Safeguard shared information
![Page 11: Kevin Salzer MSP, AICP · Kevin Salzer MSP, AICP Jacksonville Transportation Authority, Transportation Innovation Officer Jacksonville, Florida •Understand why transit agencies](https://reader030.vdocuments.net/reader030/viewer/2022040119/5e71f4315bd1f02cab1d9be1/html5/thumbnails/11.jpg)
Community Transportation ISAO technological platform:
• Automatically identifies and manages cyber exploits
• Provides REAL threat intelligence data that can be used to understand where agencies (or their vendor partners) stack up against peers
Why is JTA using the Community Transportation ISAO to help with AV cybersecurity testing?
![Page 12: Kevin Salzer MSP, AICP · Kevin Salzer MSP, AICP Jacksonville Transportation Authority, Transportation Innovation Officer Jacksonville, Florida •Understand why transit agencies](https://reader030.vdocuments.net/reader030/viewer/2022040119/5e71f4315bd1f02cab1d9be1/html5/thumbnails/12.jpg)
Secure Together Dashboard
ATTACKS LEVEL
YOURS
HIVE
HIGH
AVERAGE
SMART HIVE INTEL
YOURS
PEERS
34
54
SMART HIVE INTEL
4ATTACKS PREVENTED
HIVE
712
1922
YOURS
0% 20% 40% 60% 80% 100%
TOP ATTACKS
0 20 40 60 80 100
Campaigns
Spam Sources Phishing Windows Exploits BotNets Campaign #2 Campaign #1 Campaign #3 Campaign #4
Hive
Peers
Yours
Hive
Peers
Yours
10 30 50 70 90
![Page 13: Kevin Salzer MSP, AICP · Kevin Salzer MSP, AICP Jacksonville Transportation Authority, Transportation Innovation Officer Jacksonville, Florida •Understand why transit agencies](https://reader030.vdocuments.net/reader030/viewer/2022040119/5e71f4315bd1f02cab1d9be1/html5/thumbnails/13.jpg)
What information is collected and analyzed for testing?
![Page 14: Kevin Salzer MSP, AICP · Kevin Salzer MSP, AICP Jacksonville Transportation Authority, Transportation Innovation Officer Jacksonville, Florida •Understand why transit agencies](https://reader030.vdocuments.net/reader030/viewer/2022040119/5e71f4315bd1f02cab1d9be1/html5/thumbnails/14.jpg)
Thank you!
For more information,
contact:
Kevin Salzer MSP, AICP
904.630.8535