Rail signaling configurations

Detects rail signalling configuration data: interlocking or control-table wording with populated signal, route, points, track-circuit and balise identifiers plus overlap, release-timing, speed and chainage values. Topic wording alone is discovery-only.

Type
regex
Engine
boost_regex
Confidence
medium
Confidence justification
Medium confidence: the topic phrase alone is discovery-only; enforcement needs populated structure (a populated signalling asset field (signal, route, points, track circuit, axle counter, balise group, block section, berth, interlocking, station/control area) or a distance or timing value (overlap, release/approach-locking time, speed, sighting distance, chainage)), and 85 needs two distinct structures plus independent interlocking-logic (route locking, flank protection, points detection, conflicting routes) evidence, so policies, blank forms and training text stay below 75.
Detection quality
Topic false positive
Jurisdictions
global
Regulations
Security of Critical Infrastructure Act 2018 (Cth)
Frameworks
IEC 62443, ISO 27001, NIST CSF
Data categories
security
Scope
wide
Risk rating
10
Platform compatibility
Purview: Compatible, GCP DLP: Compatible, Macie: Compatible, Zscaler: Compatible, Palo Alto: Degraded, Netskope: Unsupported

Pattern

(?i)\b(?:rail\s+signal(?:l)?ing\s+(?:configuration|design|data|plan)|interlocking\s+(?:configuration|data|design|tables?)|control\s+tables?|route\s+(?:setting|locking)\s+tables?|signal(?:l)?ing\s+(?:scheme\s+plan|design\s+data|control\s+tables?)|track\s+circuit\s+configuration|aspect\s+sequence\s+table|(?:ETCS|CBTC)\s+(?:configuration|data|parameters)|positive\s+train\s+control\s+configuration)\b

Corroborative evidence keywords

route locking, flank protection, points detection, aspect sequence, train detection, signal box, control centre, conflicting routes, sectional release, normal and reverse

Proximity: 300 characters

Should match

Should not match

Known false positives

References