Rail signaling configurations
Detects rail signalling configuration data: interlocking or control-table wording with populated signal, route, points, track-circuit and balise identifiers plus overlap, release-timing, speed and chainage values. Topic wording alone is discovery-only.
- Type
- regex
- Engine
- boost_regex
- Confidence
- medium
- Confidence justification
- Medium confidence: the topic phrase alone is discovery-only; enforcement needs populated structure (a populated signalling asset field (signal, route, points, track circuit, axle counter, balise group, block section, berth, interlocking, station/control area) or a distance or timing value (overlap, release/approach-locking time, speed, sighting distance, chainage)), and 85 needs two distinct structures plus independent interlocking-logic (route locking, flank protection, points detection, conflicting routes) evidence, so policies, blank forms and training text stay below 75.
- Detection quality
- Topic false positive
- Jurisdictions
- global
- Regulations
- Security of Critical Infrastructure Act 2018 (Cth)
- Frameworks
- IEC 62443, ISO 27001, NIST CSF
- Data categories
- security
- Scope
- wide
- Risk rating
- 10
- Platform compatibility
- Purview: Compatible, GCP DLP: Compatible, Macie: Compatible, Zscaler: Compatible, Palo Alto: Degraded, Netskope: Unsupported
Pattern
(?i)\b(?:rail\s+signal(?:l)?ing\s+(?:configuration|design|data|plan)|interlocking\s+(?:configuration|data|design|tables?)|control\s+tables?|route\s+(?:setting|locking)\s+tables?|signal(?:l)?ing\s+(?:scheme\s+plan|design\s+data|control\s+tables?)|track\s+circuit\s+configuration|aspect\s+sequence\s+table|(?:ETCS|CBTC)\s+(?:configuration|data|parameters)|positive\s+train\s+control\s+configuration)\b
Corroborative evidence keywords
route locking, flank protection, points detection, aspect sequence, train detection, signal box, control centre, conflicting routes, sectional release, normal and reverse
Proximity: 300 characters
Should match
The interlocking data for the new platform will be issued for testing in March.— Discovery probe (65)Control table - Central interlocking Route: R17 Signal: CE204— Medium-tier probe (75) - populated asset fieldsInterlocking control table - Central control area Route: R17 (CE204 to CE212) Points: P451 normal, P453 reverse Track circuit: CE-TC112 Overlap distance: 180 m; approach locking time: 120 s Flank protection from P455; conflicting routes R18 and R21 locked; sectional release by train detection.— High-tier probe (85) - several signalling identifiers, distance/timing values and interlocking logic
Should not match
unrelated generic text— No relevant phrase contextplaceholder value 12345— Random text should not matchPolicy statement: interlocking data changes require independent verification before commissioning.— Policy textControl table template Route: ________ Signal: [insert]— Blank templateCourse module 4: a control table lists the route, signal and overlap distance: 180 m for each route.— Training framingThe public signalling standard explains interlocking principles.— Public standard discussion
Known false positives
- Signalling principles standards and training describe control tables. Mitigation: Guidance/training framing is excluded; 85 needs two asset identifiers, a distance/timing value and interlocking-logic context.