RESEARCH

My research involves the assessment and formalisation of the security of the UK and European Rail networks. As part of the SCEPTICS Project, I am working with colleagues to identity issues and provide recommendations where required to make our Rail network safer and more secure into the future.

Learn more

PUBLICATIONS

A list of my publications, with pages detailing research and accompanying code, models and traces.

Learn more

Personal Website

I also have a personal website, where I blog about current personal projects.

visit rjthomas.eu

RESEARCH INTERESTS

I have a number of research interests, some which come from my field and others are personal interests which I like to maintain an active role in.

SECURITY of RAIL

Today, passenger rail journeys are increasing at a vast rate. To cope with the demands put onto an already straining network, signalling and onboard systems are being revolutionised. Do these changes allow an attacker to perform some action undetected, or affect the operation of the rail network?

INDUSTRIAL CONTROL SYSTEM SECURITY

Industrial control systems contribute towards our daily lives, assisting in the generation of power and managing safety-critical systems. Recently, vulnerabilities in these platforms have allowed their operation to be impeded. Is there a way to allow operators to apply a framework to identify potential weaknesses before they are exploited?

SECURITY OF 'INTERNET OF THINGS' devices

The 'Internet of Things' is becoming ubiquitous, allowing devices to be connected to the internet, whether it be a kettle, drone or product ordering button. Do these devices hold any security posterity against the most basic of threats, and is there a way for an attacker to exploit them?

SECURITY OF GSM and wireless systems

GSM, as a standard is over 20 years old, with weak, broken cryptography. This standard remains in widespread use. Can these weaknesses be exploited to induce an unsafe state on systems which rely on them?