Modus Operandi, Factors, Implications and Governance of Ransomware Attacks on Transportation Systems

Abstract

An efficient transportation system provides numerous benefits to people, businesses, and the larger community, including effective transportation of people and goods, enhanced economic growth, less congestion and travel time, improved access to education and healthcare and other benefits. The digital revolution has transformed the transportation sector, making it more efficient, sustainable, and customer centric. As public transit networks grow increasingly digital, so does the possibility of cyberattacks, one of the common attacks being ransomware, which could cause severe repercussions, leading to service disruptions and putting people at risk. Engaging in document review and paper analysis of past literature and government documents, this paper investigates the modus operandi, factors, implications, and governance of ransomware attacks on the transportation system. The study found various factors that motivate ransomware in transportation systems such as financial gain, service disruption, espionage, and political motivations. This further leads to various implications such as disruption of the normal operation of public transportation networks, financial losses, loss of vital data, harm to health and safety of users, degradation of the reputation of public transportation networks, as well as legal and regulatory repercussions. In Malaysia, ransomware is governed by Section 5 of Computer Crimes Act 1997 for unauthorised modification, Penal Code's Sections 378 for theft, 420 for deception, and 506 for criminal intimidation, as well as relevant provisions of the Personal Data Protection Act of 2010. The study is expected to contribute to the body of literature on ransomware and cybersecurity in the context of transportation systems.