Run-Time Monitoring of ERTMS/ETCS Control Flow by Process Mining

Fuente: arXiv
Guardado en:
Detalles Bibliográficos
Autores principales: Vitale, Francesco, Zoppi, Tommaso, Flammini, Francesco, Mazzocca, Nicola
Formato: Preprint
Publicado: 2025
Materias:
Acceso en línea:
Etiquetas: Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
_version_ 1866912745315631104
author Vitale, Francesco
Zoppi, Tommaso
Flammini, Francesco
Mazzocca, Nicola
author_facet Vitale, Francesco
Zoppi, Tommaso
Flammini, Francesco
Mazzocca, Nicola
contents Ensuring the resilience of computer-based railways is increasingly crucial to account for uncertainties and changes due to the growing complexity and criticality of those systems. Although their software relies on strict verification and validation processes following well-established best-practices and certification standards, anomalies can still occur at run-time due to residual faults, system and environmental modifications that were unknown at design-time, or other emergent cyber-threat scenarios. This paper explores run-time control-flow anomaly detection using process mining to enhance the resilience of ERTMS/ETCS L2 (European Rail Traffic Management System / European Train Control System Level 2). Process mining allows learning the actual control flow of the system from its execution traces, thus enabling run-time monitoring through online conformance checking. In addition, anomaly localization is performed through unsupervised machine learning to link relevant deviations to critical system components. We test our approach on a reference ERTMS/ETCS L2 scenario, namely the RBC/RBC Handover, to show its capability to detect and localize anomalies with high accuracy, efficiency, and explainability.
format Preprint
id arxiv_https___arxiv_org_abs_2509_10419
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Run-Time Monitoring of ERTMS/ETCS Control Flow by Process Mining
Vitale, Francesco
Zoppi, Tommaso
Flammini, Francesco
Mazzocca, Nicola
Machine Learning
Ensuring the resilience of computer-based railways is increasingly crucial to account for uncertainties and changes due to the growing complexity and criticality of those systems. Although their software relies on strict verification and validation processes following well-established best-practices and certification standards, anomalies can still occur at run-time due to residual faults, system and environmental modifications that were unknown at design-time, or other emergent cyber-threat scenarios. This paper explores run-time control-flow anomaly detection using process mining to enhance the resilience of ERTMS/ETCS L2 (European Rail Traffic Management System / European Train Control System Level 2). Process mining allows learning the actual control flow of the system from its execution traces, thus enabling run-time monitoring through online conformance checking. In addition, anomaly localization is performed through unsupervised machine learning to link relevant deviations to critical system components. We test our approach on a reference ERTMS/ETCS L2 scenario, namely the RBC/RBC Handover, to show its capability to detect and localize anomalies with high accuracy, efficiency, and explainability.
title Run-Time Monitoring of ERTMS/ETCS Control Flow by Process Mining
topic Machine Learning
url https://arxiv.org/abs/2509.10419