The nation’s railway communications and signaling infrastructure (like other critical infrastructures) depends on computer-based control systems, and thus is increasingly vulnerable to cyber disruption. Highly distributed and designed long before information security was a concern, most railroad signaling protocols today rely on outdated technologies. I3P researchers are leading a major effort to address railway cyber security, one that includes creation of a research roadmap for railway security, the development and deployment of security tools, and an assessment of public policy implications.