Rail Propulsion and Control Systems Supplier
Modern trains rely on CAN networks for signaling, control, braking and propulsion. These networks are distributed over a large and growing set of ECUs, many of which are integrated by external engineering partners. The supplier needed a standardized, repeatable way to deploy intrusion detection across this expanding ECU landscape, maintain consistent protection as volumes ramped year over year, and keep costs predictable across distributed teams and integrators.
The supplier implemented PlaxidityX IDPX CAN as an embedded library across multiple ECU platforms including propulsion, power-control, and multiple-unit families. PlaxidityX generated behavioral models specific to each system (e.g., braking), allowing the IDS to detect deviations from expected message behavior against a βknown-goodβ baseline. A flexible site-license model let the supplier and its qualified group entities draw licenses as projects came online, with phased RFI-to-RFM integration, PlaxidityX-managed ruleset creation, and a capped maintenance structure supporting a multi-year rollout.
The supplier established a scalable, standardized approach to rail cybersecurity, extending intrusion detection consistently across a growing ECU portfolio. Predictable licensing and centralized support help the supplier keep pace with a multi-year production roadmap.