IMB: Guard Against Threat of Cyber Attacks

By Joseph R. Fonseca
Thursday, August 21, 2014
IMB Guard against threat of cyber attacks

 

The International Maritime Bureau (IMB) is calling for vigilance in the maritime sector as it emerges that shipping and the supply chain is the ‘next playground for hackers’.

IMB said, “Recent events have shown that systems managing the movement of goods need to be strengthened against the threat of cyber-attacks.

“It is vital that lessons learnt from other industrial sectors are applied quickly to close down cyber vulnerabilities in shipping and the supply chain.”

The threat of cyber-attacks on the sector have intensified in the past few months, with cyber security experts and the media alike warning of the dangers posed by criminals targeting carriers, ports, terminals and other transport operators.

They argue that while IT systems have become more sophisticated and thus enabling companies to better protect themselves against fraud and theft, it has also left them more vulnerable to ‘cyber criminals’.

Speaking at the TOC Container Supply Chain Europe Conference in London recently, TT Club’s insurance claims expert Mike Yarwood said, “We see incidents which at first appear to be a petty break-in at office facilities. The damage appears minimal – nothing is physically removed.”

He added; “More thorough post incident investigations however reveal that the ‘thieves’ were actually installing spyware within the operator’s IT network.”.

Yarwood said that more commonly targets are individuals’ personal devices where cyber security is less adequate.

Hackers often make use of social networks to target truck drivers and operational personnel who travel extensively to ascertain routing and overnight parking patterns. The criminals were looking to extract information such as release codes for containers from terminal facilities or passwords to discover delivery instructions.

“In instances discovered to date, there has been an apparent focus on specific individual containers in attempts to track the units through the supply chain to the destination port. Such systematic tracking is coupled with compromising the terminal’s IT systems to gain access to, or generate release codes for specific containers. Criminals are known to have targeted containers with illegal drugs in this way; however such methods also have greater scope in facilitating high value cargo thefts and human trafficking,” Yarwood revealed.

Whilst it is difficult to get hold of exact numbers and statistics, the risks should not be underestimated, and in June the US Government Accountability Office warned about the possible threats to US ports.

In a stinging report, the organisation said that the actions taken by the Department of Homeland Security and two component agencies, the US Coast Guard and Federal Emergency Management Agency, as well as other federal agencies, to address cybersecurity in the maritime port environment have been limited.

KPMG warns that hackers are the new open sea pirates. Wil Rockall a director in the organisation’s cyber security team highlights that the cyber security of maritime control systems are controlled by engineers and not chief information security officers (CISOs) or chief information officers (CIOs). Lacking security controls, these systems are vulnerable to hackers.

“Most ports and terminals are managed by industrial control systems which have, until very recently, been left out of the CIO’s scope. Historically, this security has not been managed by company CISOs and maritime control systems are very similar.

“As a consequence, the improvements that many companies have made to their corporate cyber security to address the change in the threat landscape over the past three to five years have not been replicated in these environments. Instead engineers have often been left to implement and manage these systems – people who focus normally on optimising processes efficiency and safety, not cyber and security risks. It has meant that many companies and their clients are sailing into uncharted waters when they come to try and manage these risks,” he said.

Rockall added; “We have found that one of the main blockers in improving this is a real translation problem when corporate IT security teams attempt to impose their standards on industrial control systems or maritime control systems. KPMG’s work with the operator of one of the largest fleets of crude oil and oil products tankers and liquefied natural gas carriers in the world, found that bridging that gap and coming up with pragmatic solutions to improve industrial control systems security without compromising process efficiency or safety, are vital to the success of industrial control systems cyber risk management.”
 

Maritime Reporter June 2015 Digital Edition
FREE Maritime Reporter Subscription
Latest Maritime News    rss feeds

Maritime Security

Fincantieri to Supply Four OPVs to the Bangladesh Coast Guard

Fincantieri has been awarded the contract with the Bangladesh Coast Guard (BCG) for the supply of four Italian Navy “Minerva” class corvettes to be upgraded and

New Binding Law of The Sea Agreement Advanced

WOC Sustainable Ocean Summit (Singapore, 9-11 November 2015) Will Enable Industry to Organize its Input to this Major New Ocean Treaty Development The U.N.

Saab Bags $1 bln Order for Swedish Submarines

The Swedish Defence Materiel Administration (FMV) has awarded contracts worth Skr8.6bn ($1.03bn) to Saab AB for the construction of two new Type A26 submarines

News

Indonesia Expects Total to Decide on Mahakam within days

French oil firm Total  will decide how much interest it will retain from 2018 in Indonesia's offshore Mahakam oil and gas block over the next two days, the

Asia-N Europe Container Freight Rates Jumps 60%

Shipping freight rates for transporting containers from ports in Asia to Northern Europe rose by 60.4 percent to $879 per 20-foot container (TEU) in the week ended on Friday,

Research Vessel Heincke: Serving Science for 25 years

7 July 2015. A quarter of a century old, with over 900,000 kilometres (488,842 nautical miles) logged and still on the cutting edge of science and technology:

Electronics

Rolls-Royce to Lead Autonomous Ship Research

Rolls-Royce announced it will take the lead on a €6.6 million project that could pave the way for autonomous ships. The Advanced Autonomous Waterborne Applications

SUNY Maritime to Host e-Navigation Conference

The e-Navigation Underway 2015 – North America conference will be hosted by The State University of New York (SUNY) Maritime College from September 28 to 30 on the college’s Throggs Neck, N.

Transas Shifts Sole Focus to Maritime Sector

Arranging new changes to its brand positioning, the Transas Group informs it will now focus its efforts solely in the maritime market.   The group’s shareholders

Maritime Safety

Research Vessel Heincke: Serving Science for 25 years

7 July 2015. A quarter of a century old, with over 900,000 kilometres (488,842 nautical miles) logged and still on the cutting edge of science and technology:

Parkinson Retires from Sunderland Marine

Geoff Parkinson, chief executive officer of North P&I Club’s subsidiary Sunderland Marine, retired on 30 June 2015 following a period of ill health. Tom Rutter,

New Binding Law of The Sea Agreement Advanced

WOC Sustainable Ocean Summit (Singapore, 9-11 November 2015) Will Enable Industry to Organize its Input to this Major New Ocean Treaty Development The U.N.

Software Solutions

AVEVA, DNV GL's Sesam Integration Cuts Cost

Integration of Aveva and DNV GL's Sesam Reduces Costs in Maritime and Offshore Engineering. Engineers designing ship hulls and offshore floaters can now save

NAPA Streamlines Compliance with Class Design Rules

NAPA Steel and NAPA Designer updated to reduce man-hours and duplication associated with new Common Structural Rules BC&OT   Global maritime software, services

IRClass Offers EEDI Validation Service

IRClass (Indian Register of Shipping) has recently included Energy Efficiency Design Index (EEDI) validation to its service offerings. This is in response to the

Logistics

Grimaldi Orders Three PCTCs

After signing an order for the construction of five new ships two weeks ago, the Italian shipowner  Grimaldi Group has signed another contract for the construction

Is It Too Late To Tangle With Spike in Shipping Market

A series of interesting and extreme price spikes is going on in the shipping market today, says Clarksons, provider of global shipping and offshore market intelligence.

NITC Claims World's Largest Supertanker Fleet

According to the head of the National Iranian Tanker Company (NITC), Iran has 42 very large crude carriers or VLCCs, each able to carry 2 million barrels of oil, reports Press TV.

 
 
Maritime Security Naval Architecture Navigation Offshore Oil Pod Propulsion Salvage Ship Repair Ship Simulators Shipbuilding / Vessel Construction Winch
rss | archive | history | articles | privacy | contributors | top maritime news | about us | copyright | maritime magazines
maritime security news | shipbuilding news | maritime industry | shipping news | maritime reporting | workboats news | ship design | maritime business

Time taken: 0.1743 sec (6 req/sec)