Passive Defense considerations of Traffic Control Center of Islamic Republic of Iran Railways against Cyber-attacks (Case Study: Yazd Traffic Control Center)

This study aims to determine the passive defense considerations of traffic control center of Islamic Republic of Iran Railways (IRIR) against cyber-attacks which include determining the effective cyber-attacks, determining effective vulnerability and determining the defensive solutions for resisting against cyber-attacks of traffic control center of IRIR using analytic descriptive stud. This study is of practical type. Methods and tools of information collection of this study include questionnaire, interview, observation and use of cyberspace (internet and intranet). Statistical population of this study is made up of experts, managers and specialists of the field of passive defense, IT and IRIR. Findings of the study suggest that the most important considerations of passive defense of traffic control center of Railways against cyber-attacks in following three parts are: the most important attacks, Denial of service, message content change and other cases. The most important vulnerabilities: existence of dissatisfied employees, lack of accurate control of entry and exist of people to server room and traffic control center, lack of specialist human force for repairing and maintenance of equipment and other cases. The most important solutions: continuous backup of vital and sensitive data, documentation and reporting the previous identified attacks to security team, and reviewing the daily reports related to equipment and other cases.