Comment: Re:Terrorist Attack? (Score 2) 121
> How will we know the difference between an attack and normal operations?
We would know because each accident on the railroads is meticiously investigated.
See e.g. the web page of the Accident Investigation Office of the German Federal Railroad Agency [German knowledge required]:
http://www.eisenbahn-unfalluntersuchung.de/cln_031/nn_316888/EUB/DE/Publikationen/Untersuchungsberichte/__Function/untersuchungsberichte__tabelle.html
Includes a report on an air condition failure (admittedly that specific failure lead to 9 people having to be brought to a hospital).
At least in Germany we _would_ most probably know if a train had derailed due to a cyber attack.