Security Requirements Engineering in Safety-Critical Railway Signalling Networks

Figure 2

System model showing Z.ILS, Z.MDM, and two instances of Z.OC. Dashed frames indicate housing. Dotted frames indicate existing safety-critical functionality.