IMB: Guard Against Threat of Cyber Attacks

By Joseph R. Fonseca
Thursday, August 21, 2014
IMB Guard against threat of cyber attacks

 

The International Maritime Bureau (IMB) is calling for vigilance in the maritime sector as it emerges that shipping and the supply chain is the ‘next playground for hackers’.

IMB said, “Recent events have shown that systems managing the movement of goods need to be strengthened against the threat of cyber-attacks.

“It is vital that lessons learnt from other industrial sectors are applied quickly to close down cyber vulnerabilities in shipping and the supply chain.”

The threat of cyber-attacks on the sector have intensified in the past few months, with cyber security experts and the media alike warning of the dangers posed by criminals targeting carriers, ports, terminals and other transport operators.

They argue that while IT systems have become more sophisticated and thus enabling companies to better protect themselves against fraud and theft, it has also left them more vulnerable to ‘cyber criminals’.

Speaking at the TOC Container Supply Chain Europe Conference in London recently, TT Club’s insurance claims expert Mike Yarwood said, “We see incidents which at first appear to be a petty break-in at office facilities. The damage appears minimal – nothing is physically removed.”

He added; “More thorough post incident investigations however reveal that the ‘thieves’ were actually installing spyware within the operator’s IT network.”.

Yarwood said that more commonly targets are individuals’ personal devices where cyber security is less adequate.

Hackers often make use of social networks to target truck drivers and operational personnel who travel extensively to ascertain routing and overnight parking patterns. The criminals were looking to extract information such as release codes for containers from terminal facilities or passwords to discover delivery instructions.

“In instances discovered to date, there has been an apparent focus on specific individual containers in attempts to track the units through the supply chain to the destination port. Such systematic tracking is coupled with compromising the terminal’s IT systems to gain access to, or generate release codes for specific containers. Criminals are known to have targeted containers with illegal drugs in this way; however such methods also have greater scope in facilitating high value cargo thefts and human trafficking,” Yarwood revealed.

Whilst it is difficult to get hold of exact numbers and statistics, the risks should not be underestimated, and in June the US Government Accountability Office warned about the possible threats to US ports.

In a stinging report, the organisation said that the actions taken by the Department of Homeland Security and two component agencies, the US Coast Guard and Federal Emergency Management Agency, as well as other federal agencies, to address cybersecurity in the maritime port environment have been limited.

KPMG warns that hackers are the new open sea pirates. Wil Rockall a director in the organisation’s cyber security team highlights that the cyber security of maritime control systems are controlled by engineers and not chief information security officers (CISOs) or chief information officers (CIOs). Lacking security controls, these systems are vulnerable to hackers.

“Most ports and terminals are managed by industrial control systems which have, until very recently, been left out of the CIO’s scope. Historically, this security has not been managed by company CISOs and maritime control systems are very similar.

“As a consequence, the improvements that many companies have made to their corporate cyber security to address the change in the threat landscape over the past three to five years have not been replicated in these environments. Instead engineers have often been left to implement and manage these systems – people who focus normally on optimising processes efficiency and safety, not cyber and security risks. It has meant that many companies and their clients are sailing into uncharted waters when they come to try and manage these risks,” he said.

Rockall added; “We have found that one of the main blockers in improving this is a real translation problem when corporate IT security teams attempt to impose their standards on industrial control systems or maritime control systems. KPMG’s work with the operator of one of the largest fleets of crude oil and oil products tankers and liquefied natural gas carriers in the world, found that bridging that gap and coming up with pragmatic solutions to improve industrial control systems security without compromising process efficiency or safety, are vital to the success of industrial control systems cyber risk management.”
 

Maritime Reporter October 2014 Digital Edition
FREE Maritime Reporter Subscription
Latest Maritime News    rss feeds

Maritime Security

Newport News Lays Keel for Virginia-Class Sub

Newport News Shipbuilding, a division of Huntington Ingalls Industries (HII), hosted a keel-laying ceremony Saturday for the future USS Washington (SSN 787), a

Will Congress Pass Any Maritime Legislation in 2014?

Following its usual summer break over August 2014, Congress came back from its five-week summer recess and spent a whopping eight days or so back in session before recessing once again,

Vietnam Warship Visits Underscore Regional Tension

Vietnam on Tuesday showed off its two most powerful warships in the first-ever port call to the Philippines but an official said it was not trying to challenge

News

Newport News Lays Keel for Virginia-Class Sub

Newport News Shipbuilding, a division of Huntington Ingalls Industries (HII), hosted a keel-laying ceremony Saturday for the future USS Washington (SSN 787), a

Vacant Pier to Help Ease Long Beach Congestion

Pier S temporary depot to relocate empty containers for next five months    The Port of Long Beach expects a “Temporary Empty Container Depot” planned for a vacant

What’s All the Noise at IMO?

Shipping may think they hear the sound of new regulations as they are slammed onto their desks.  What is all the noise concerning noise at IMO?  This may very well be the question from ship owners,

Electronics

New Hamburg Süd Ships to Feature Nacos Platinum Systems

L-3 SAM Electronics has announced  that, via its L-3 Marine Systems Korea subsidiary, it has been awarded a contract to provide its NACOS Platinum navigation, automation and control system,

MSC Cruises Advance Onboard Wi-Fi System

MSC Cruises has started a fleet-wide optimization installed by Marlink to improve shipboard VSAT (Very Small Aperture Terminal) connectivity. MSC Cruises said it

ST Engineering Rejigs Top Deck

Singapore Technologies Engineering Ltd (ST Engineering) today announced the appointment of senior management personnel to new key management positions in the

Maritime Safety

Avoiding the Edges of the Sea

Mariners do best when they avoid the edges of the sea – the shoals, rocks, and other hard spots.  Coming into contact with the edges of the sea at other than a

The Legal Consequences of 46 CFR Subchapter “M”

As the holiday season and the end of another year quickly approaches, the towing industry patiently waits for the Coast Guard to finalize the long-awaited towing vessel inspection rule.

Fire Departments Choose Sea-Fire Systems

Metalcraft Marine's Firestorm high-speed, aluminum fireboat represents a new generation in vessel technology, especially when fitted with Sea-Fire H Series engineered fire suppression systems.

Software Solutions

New Hamburg Süd Ships to Feature Nacos Platinum Systems

L-3 SAM Electronics has announced  that, via its L-3 Marine Systems Korea subsidiary, it has been awarded a contract to provide its NACOS Platinum navigation, automation and control system,

Transas Launches Web Map Service

Transas Marine has launched Transas Web Map Service (WMS)to provide transparent and easy access to navigation charts through common interface. Access to comprehensive

ClassNK-NAPA GREEN Wins IBJ Awards

Vessel performance monitoring and optimization solution ClassNK-NAPA GREEN was named the maritime industry’s top IT system by earning the IT Solutions Award

Logistics

Vacant Pier to Help Ease Long Beach Congestion

Pier S temporary depot to relocate empty containers for next five months    The Port of Long Beach expects a “Temporary Empty Container Depot” planned for a vacant

Russian Liftings for Western Options at 12-Year Low

By Gleb Gorodyankin MOSCOW, Nov 25 (Reuters) - Exports of Russian crude oil to Western markets are set to fall by almost a third in December and reach a 12-year

Frontline Disappoints with Deeper 3Q Loss

Frontline, once the world's biggest crude oil tanker company, reported a bigger than expected third-quarter loss on Tuesday and said it is still considering options

 
 
Maritime Contracts Maritime Standards Naval Architecture Offshore Oil Pipelines Pod Propulsion Port Authority Ship Electronics Shipbuilding / Vessel Construction Sonar
rss | archive | history | articles | privacy | terms and conditions | contributors | top maritime news | about us | copyright | maritime magazines
maritime security news | shipbuilding news | maritime industry | shipping news | maritime reporting | workboats news | ship design | maritime business

Time taken: 0.2492 sec (4 req/sec)