Transportation and Logistics Reference.

The ways vehicles, vessels, drones, trains, and freight systems get fooled, in plain language, and what DOR does about each one.

Vehicles and Fleets

Trucks, cars, buses, and the telematics that connect them.

TL-V.1

Remote takeover of steering, braking, and engine control

An attacker who reaches a vehicle's internal network can send commands to steering, braking, or the engine.

DOR's answer

DOR proves each command came from an authorized source before the vehicle acts on it, and the driver always keeps control.

RA-2.1.4RA-2.1.1RA-1.1.5

TL-V.2

Altered over-the-air updates

An altered software update can reach every vehicle in a fleet at once.

DOR's answer

DOR verifies each update before installation and confirms what is running afterward.

RA-2.2.2RA-4.1.3

TL-V.3

Faked telematics and logging data

Location, hours, and engine readings can be faked or edited before they reach dispatch and compliance systems.

DOR's answer

DOR proves each reading came from the vehicle that claims it, unaltered.

RA-1.2.4RA-1.2.2

TL-V.4

Swapped or cloned vehicle units

A telematics unit or controller can be swapped or cloned to pass as the original.

DOR's answer

DOR confirms each unit is the one you installed.

RA-3.1.2RA-1.2.3

Vessels and Ports

Ships, workboats, terminals, and the systems that steer and load them.

TL-S.1

Unauthorized steering and engine commands aboard

Autopilots, joystick systems, and engine controls act on commands they cannot verify.

DOR's answer

DOR proves each command came from the helm or an authorized system, and the person at the helm always keeps control.

RA-2.1.4RA-2.1.2

TL-S.2

Spoofed GPS and false AIS reports

A false GPS signal can move a ship's position on the chart, and AIS reports can claim a vessel is somewhere it is not.

DOR's answer

DOR checks position data where it enters and keeps verified reports apart from unverified broadcasts.

RA-1.1.1RA-1.2.1

TL-S.3

Forged instructions to terminal and cargo systems

Instructions to load, release, or reroute cargo can be forged.

DOR's answer

DOR proves each one came from an authorized source before cargo moves.

RA-2.2.1RA-2.4.1

Drones and Aviation

Drones, aircraft operations, and the navigation they rely on.

TL-D.1

Hijacked drone command links

A drone can be sent commands by someone who is not its operator.

DOR's answer

DOR verifies the source of every command before the drone acts, whatever link carried it.

RA-2.1.1RA-2.1.2

TL-D.2

Jammed or spoofed navigation

GPS can be jammed or faked, and backup navigation can be fooled in turn.

DOR's answer

DOR checks navigation data where it enters and keeps backup sources honest.

RA-1.1.1RA-1.1.2RA-D.1

TL-D.3

Altered flight and maintenance records

A flight or maintenance record can be changed after it was signed.

DOR's answer

DOR's record cannot be edited, so a change stands out.

RA-6.1.3RA-4.3.2

TL-D.4

Tampered drone firmware and updates

Drone firmware and software updates can be altered to add hidden behavior or a remote shutoff.

DOR's answer

DOR verifies each update before it installs and confirms what is running in flight.

RA-2.2.2RA-4.1.1

Rail and Transit

Signals, train control, and the systems riders see.

TL-R.1

Forged or replayed train control commands

A train control or signaling command can be forged, or a genuine one sent again at the wrong time.

DOR's answer

DOR proves each command is authentic and current before it reaches the equipment.

RA-2.1.4RA-5.2.1

TL-R.2

Altered schedules and rider information

Schedules, departure boards, and announcements can be changed to mislead riders.

DOR's answer

DOR proves each update came from the operator.

RA-1.3.2RA-2.2.1

Freight and Dispatch

Loads, bookings, documents, and the people who move them.

TL-F.1

Impostor carriers, brokers, and bookings

A booking, rate confirmation, or dispatch message can come from someone posing as a carrier or broker.

DOR's answer

DOR proves who sent it before a load is tendered or released.

RA-3.2.1RA-2.4.1

TL-F.2

Forged or altered shipping documents

Bills of lading and delivery receipts can be forged or changed.

DOR's answer

DOR keeps each document provable from the moment it is created.

RA-6.3.1RA-1.3.3

TL-F.3

Stolen dispatch and load board access

Attackers who take over a dispatcher's computer or load board account can act as the company.

DOR's answer

DOR verifies the person and system behind each action, beyond the login.

RA-3.1.2RA-2.4.2

Transportation and Logistics

Start with a briefing.

Bring your fleet list and the systems that dispatch it, or just the question your operations team keeps asking. DOR will show you exactly where it fits.