  We present the proposed security architecture Deutsche Bahn plans to deploy
to protect its trackside safety-critical signalling system against
cyber-attacks. We first present the existing reference interlocking system that
is built using standard components. Next, we present a taxonomy to help model
the attack vectors relevant for the railway environment. Building upon this, we
present the proposed "compartmentalized" defence concept for securing the
upcoming signalling systems.
