IMB: Guard Against Threat of Cyber Attacks

By Joseph R. Fonseca
Thursday, August 21, 2014
IMB Guard against threat of cyber attacks

 

The International Maritime Bureau (IMB) is calling for vigilance in the maritime sector as it emerges that shipping and the supply chain is the ‘next playground for hackers’.

IMB said, “Recent events have shown that systems managing the movement of goods need to be strengthened against the threat of cyber-attacks.

“It is vital that lessons learnt from other industrial sectors are applied quickly to close down cyber vulnerabilities in shipping and the supply chain.”

The threat of cyber-attacks on the sector have intensified in the past few months, with cyber security experts and the media alike warning of the dangers posed by criminals targeting carriers, ports, terminals and other transport operators.

They argue that while IT systems have become more sophisticated and thus enabling companies to better protect themselves against fraud and theft, it has also left them more vulnerable to ‘cyber criminals’.

Speaking at the TOC Container Supply Chain Europe Conference in London recently, TT Club’s insurance claims expert Mike Yarwood said, “We see incidents which at first appear to be a petty break-in at office facilities. The damage appears minimal – nothing is physically removed.”

He added; “More thorough post incident investigations however reveal that the ‘thieves’ were actually installing spyware within the operator’s IT network.”.

Yarwood said that more commonly targets are individuals’ personal devices where cyber security is less adequate.

Hackers often make use of social networks to target truck drivers and operational personnel who travel extensively to ascertain routing and overnight parking patterns. The criminals were looking to extract information such as release codes for containers from terminal facilities or passwords to discover delivery instructions.

“In instances discovered to date, there has been an apparent focus on specific individual containers in attempts to track the units through the supply chain to the destination port. Such systematic tracking is coupled with compromising the terminal’s IT systems to gain access to, or generate release codes for specific containers. Criminals are known to have targeted containers with illegal drugs in this way; however such methods also have greater scope in facilitating high value cargo thefts and human trafficking,” Yarwood revealed.

Whilst it is difficult to get hold of exact numbers and statistics, the risks should not be underestimated, and in June the US Government Accountability Office warned about the possible threats to US ports.

In a stinging report, the organisation said that the actions taken by the Department of Homeland Security and two component agencies, the US Coast Guard and Federal Emergency Management Agency, as well as other federal agencies, to address cybersecurity in the maritime port environment have been limited.

KPMG warns that hackers are the new open sea pirates. Wil Rockall a director in the organisation’s cyber security team highlights that the cyber security of maritime control systems are controlled by engineers and not chief information security officers (CISOs) or chief information officers (CIOs). Lacking security controls, these systems are vulnerable to hackers.

“Most ports and terminals are managed by industrial control systems which have, until very recently, been left out of the CIO’s scope. Historically, this security has not been managed by company CISOs and maritime control systems are very similar.

“As a consequence, the improvements that many companies have made to their corporate cyber security to address the change in the threat landscape over the past three to five years have not been replicated in these environments. Instead engineers have often been left to implement and manage these systems – people who focus normally on optimising processes efficiency and safety, not cyber and security risks. It has meant that many companies and their clients are sailing into uncharted waters when they come to try and manage these risks,” he said.

Rockall added; “We have found that one of the main blockers in improving this is a real translation problem when corporate IT security teams attempt to impose their standards on industrial control systems or maritime control systems. KPMG’s work with the operator of one of the largest fleets of crude oil and oil products tankers and liquefied natural gas carriers in the world, found that bridging that gap and coming up with pragmatic solutions to improve industrial control systems security without compromising process efficiency or safety, are vital to the success of industrial control systems cyber risk management.”
 

Maritime Today


The Maritime Industry's original and most viewed E-News Service

Maritime Reporter January 2016 Digital Edition
FREE Maritime Reporter Subscription
Latest Maritime News    rss feeds

Maritime Security

Antietam, McCampbell Build Relationships at IFR 2016

Ticonderoga-class guided-missile cruiser USS Antietam (CG 54) and Arleigh Burke-class guided-missile destroyer USS McCampbell (DDG 85) arrived Feb. 4 in India

Hijacked Singaporean Ship Released in Nigeria

The crew of a Singapore-registered container vessel, Safmarine Kuramo, hijacked off the Nigerian Coast earlier this week, were released unharmed on Saturday (Feb

Indian Navy Shows Off Strength

India’s naval might was on full display off the coast of Visakhapatnam today (Saturday) as President Pranab Mukherjee reviewed the naval fleet.   Mukherjee,

News

First Women's Expedition to the Arctic

Company "MyArctic-expeditions" organize the first women's expedition to the Arctic Ocean. The expedition will start on March 5 in the capital of the Nenets Autonomous

Topaz Responder Saves Refugee Migrants

Topaz Energy and Marine has emerged as an unlikely player in the effort to save refugee migrants risking their lives on the sea crossing from Turkey to Greece’s islands in order to reach Europe.

Sardines Boost Murmansk Port Turnover

In January 2016 turnover of the Murmansk Marine Fishing Port reached 22 thousand tons of cargo, including 15 thousand tons of fish. This is higher than last year,

Electronics

Videotel, Safebridge JV for Onboard ECDIS Certification

Videotel, a provider of e-Learning maritime training solutions and a company of KVH Industries, has joined forces with online maritime training business Safebridge GmbH,

Drones Allow Surveys Without Scaffolds

DNV GL has completed several tests using drones to support hull surveys of vessels. Using drones to visually check the condition of remote structural components

Rotterdam Port Connector Starting to Bear Fruit

The Rotterdam, which connects supply and demand online, has officially rounded off the test phase. It has been six months since the port of Rotterdam’s innovative

Maritime Safety

Topaz Responder Saves Refugee Migrants

Topaz Energy and Marine has emerged as an unlikely player in the effort to save refugee migrants risking their lives on the sea crossing from Turkey to Greece’s islands in order to reach Europe.

Antietam, McCampbell Build Relationships at IFR 2016

Ticonderoga-class guided-missile cruiser USS Antietam (CG 54) and Arleigh Burke-class guided-missile destroyer USS McCampbell (DDG 85) arrived Feb. 4 in India

Hijacked Singaporean Ship Released in Nigeria

The crew of a Singapore-registered container vessel, Safmarine Kuramo, hijacked off the Nigerian Coast earlier this week, were released unharmed on Saturday (Feb

Communication

Shipping Traffic Noise Severely Affects Whale Populations

Underwater sound pollution disrupts the communication methods of killer whales and could harm their ability to locate salmon, researchers have found.   Increasing

AlphaEye Allows Real-time Audio Visual Support

Alphatron Marine’s robustly designed AlphaEye is a next generation service communication tool offering the capability to have an extra set of eyes “onboard.” With the AlphaEye,

Lyden-Kluss, RADM Thomas Appointed IMO Ambassadors

Mission to educate the public about the benefits and opportunities in the marine industry Carleen Lyden-Kluss, Chief Executive Officer of Morgan Marketing & Communications, along with RADM Cari B.

Software Solutions

MGI is Newest IPCSA Member

Press release- A month after celebrating its 30th anniversary, the Marseille-based Port Community System operator MGI has been welcomed as the newest member of

ABS Publishes CyberSafety Guidance

ABS has published Guidance Notes on the Application of Cybersecurity Principles to Marine and Offshore Operations.   This cybersecurity guidance note is the first

Videotel, Safebridge JV for Onboard ECDIS Certification

Videotel, a provider of e-Learning maritime training solutions and a company of KVH Industries, has joined forces with online maritime training business Safebridge GmbH,

Logistics

Sardines Boost Murmansk Port Turnover

In January 2016 turnover of the Murmansk Marine Fishing Port reached 22 thousand tons of cargo, including 15 thousand tons of fish. This is higher than last year,

COSCO Plans European Transhipment Hub

China's COSCO is forging ahead with a plan to build a European transhipment hub, reports Reuters. The state owned shipping giant is expected to make an offer for

MOL Enhances CSW Service between Asia and East Coast South America

Mitsui O.S.K. Lines (MOL, President & CEO: Junichiro Ikeda) today announced the enhancement of its Asia and East Coast South America trade by merging existing

 
 
Maritime Contracts Maritime Standards Naval Architecture Navigation Offshore Oil Pipelines Pod Propulsion Port Authority Salvage Ship Electronics
rss | archive | history | articles | privacy | contributors | top maritime news | about us | copyright | maritime magazines
maritime security news | shipbuilding news | maritime industry | shipping news | maritime reporting | workboats news | ship design | maritime business

Time taken: 0.1197 sec (8 req/sec)