IMB: Guard Against Threat of Cyber Attacks

By Joseph R. Fonseca
Thursday, August 21, 2014
IMB Guard against threat of cyber attacks

 

The International Maritime Bureau (IMB) is calling for vigilance in the maritime sector as it emerges that shipping and the supply chain is the ‘next playground for hackers’.

IMB said, “Recent events have shown that systems managing the movement of goods need to be strengthened against the threat of cyber-attacks.

“It is vital that lessons learnt from other industrial sectors are applied quickly to close down cyber vulnerabilities in shipping and the supply chain.”

The threat of cyber-attacks on the sector have intensified in the past few months, with cyber security experts and the media alike warning of the dangers posed by criminals targeting carriers, ports, terminals and other transport operators.

They argue that while IT systems have become more sophisticated and thus enabling companies to better protect themselves against fraud and theft, it has also left them more vulnerable to ‘cyber criminals’.

Speaking at the TOC Container Supply Chain Europe Conference in London recently, TT Club’s insurance claims expert Mike Yarwood said, “We see incidents which at first appear to be a petty break-in at office facilities. The damage appears minimal – nothing is physically removed.”

He added; “More thorough post incident investigations however reveal that the ‘thieves’ were actually installing spyware within the operator’s IT network.”.

Yarwood said that more commonly targets are individuals’ personal devices where cyber security is less adequate.

Hackers often make use of social networks to target truck drivers and operational personnel who travel extensively to ascertain routing and overnight parking patterns. The criminals were looking to extract information such as release codes for containers from terminal facilities or passwords to discover delivery instructions.

“In instances discovered to date, there has been an apparent focus on specific individual containers in attempts to track the units through the supply chain to the destination port. Such systematic tracking is coupled with compromising the terminal’s IT systems to gain access to, or generate release codes for specific containers. Criminals are known to have targeted containers with illegal drugs in this way; however such methods also have greater scope in facilitating high value cargo thefts and human trafficking,” Yarwood revealed.

Whilst it is difficult to get hold of exact numbers and statistics, the risks should not be underestimated, and in June the US Government Accountability Office warned about the possible threats to US ports.

In a stinging report, the organisation said that the actions taken by the Department of Homeland Security and two component agencies, the US Coast Guard and Federal Emergency Management Agency, as well as other federal agencies, to address cybersecurity in the maritime port environment have been limited.

KPMG warns that hackers are the new open sea pirates. Wil Rockall a director in the organisation’s cyber security team highlights that the cyber security of maritime control systems are controlled by engineers and not chief information security officers (CISOs) or chief information officers (CIOs). Lacking security controls, these systems are vulnerable to hackers.

“Most ports and terminals are managed by industrial control systems which have, until very recently, been left out of the CIO’s scope. Historically, this security has not been managed by company CISOs and maritime control systems are very similar.

“As a consequence, the improvements that many companies have made to their corporate cyber security to address the change in the threat landscape over the past three to five years have not been replicated in these environments. Instead engineers have often been left to implement and manage these systems – people who focus normally on optimising processes efficiency and safety, not cyber and security risks. It has meant that many companies and their clients are sailing into uncharted waters when they come to try and manage these risks,” he said.

Rockall added; “We have found that one of the main blockers in improving this is a real translation problem when corporate IT security teams attempt to impose their standards on industrial control systems or maritime control systems. KPMG’s work with the operator of one of the largest fleets of crude oil and oil products tankers and liquefied natural gas carriers in the world, found that bridging that gap and coming up with pragmatic solutions to improve industrial control systems security without compromising process efficiency or safety, are vital to the success of industrial control systems cyber risk management.”
 

Maritime Today


The Maritime Industry's original and most viewed E-News Service

Maritime Reporter April 2016 Digital Edition
FREE Maritime Reporter Subscription
Latest Maritime News    rss feeds

Maritime Security

Islamic Militants Free Indonesian Sailors

Ten Indonesian tugboat crewmen held by the Abu Sayyaf terror gang in the southern Philippines were freed unharmed Sunday.   The sailors arrived in Jakarta late on Sunday night,

India to Take Part in Maritime Drill in South China Sea

India will join US and Japan conduct joint naval exercises in the northern waters of the Philippine Sea, an area close to the East and South China Seas where Beijing

Indian Sub Kalvari Undergoes Sea Trials

‘Kalvari’ (Tiger Shark), the first of the Scorpene-class submarines, went to sea for the first time on Sunday marking the commencement of sea trials.    The

News

Cruise Ship Makes Historic Trip from US to Cuba

Cruise ship MV Adonia sailed into Havana this morning, completing the first leg of its historic inaugural voyage to Cuba that began on May 1, 2016, from Miami,

Allcargo Groups Subsidiaries as ECU Worldwide

ECU Line, Econocaribe and China Consolidators undergoes rebranding to build a Global Brand Connect   India’s integrated logistics solution provider Allcargo Logistics

Northwest Seaport Alliance Joins Green Marine

The Northwest Seaport Alliance has signed on to participate in Green Marine, North America’s largest voluntary environmental certification program for the maritime industry.

Electronics

VDRs Refit on UK Royal Fleet Auxiliary Ships

Danelec Marine informs it has supplied new-generation Voyage Data Recorders (VDRs) for three U.K. Royal Fleet Auxiliary (RFA) Bay-Class Landing Ship Dock (LSD) vessels.

ACR to Debut Pathfinder PRO SART at OTC

An important addition to any commercial vessel’s survival gear kit, the Pathfinder PRO SART is introduced by ACR Electronics, Inc. at this year’s OTC. The new search

Voice-data Communications and HDTV in One System

PDQ’s OneSource System provides long range cell, wi-fi and high definition TV in one system for mobile users.   San Diego wireless company PDQ Connect has developed

Maritime Safety

Islamic Militants Free Indonesian Sailors

Ten Indonesian tugboat crewmen held by the Abu Sayyaf terror gang in the southern Philippines were freed unharmed Sunday.   The sailors arrived in Jakarta late on Sunday night,

India to Take Part in Maritime Drill in South China Sea

India will join US and Japan conduct joint naval exercises in the northern waters of the Philippine Sea, an area close to the East and South China Seas where Beijing

Italian Ship Rescues 26 Migrants off Libya

An Italian merchant ship rescued 26 migrants off the coast of Libya in rough seas and others were feared missing, the Coast Guard said on Saturday. The Coast

Communication

Voice-data Communications and HDTV in One System

PDQ’s OneSource System provides long range cell, wi-fi and high definition TV in one system for mobile users.   San Diego wireless company PDQ Connect has developed

Satlink Signs on with Fleet Xpress, FleetBroadband

Satlink Satellite Communications Ltd, a satellite communication and technical services provider, announced that it has become an Inmarsat Partner for Fleet Xpress and FleetBroadband.

KVH Dominates Global Maritime VSAT Market

KVH Industries, Inc., (Nasdaq: KVHI), announced that as of the end of 2015, it had shipped more than 6,000 TracPhone® satellite communications antenna systems for the mini-VSAT Broadbandsm network.

Software Solutions

TGS, PGS Team Up on Eastern Canada Seismic

TGS announces the expansion of its multi-client library offshore Eastern Canada with plans to acquire more than 36,000 km of 2D seismic data, in partnership with PGS,

UltraShip Benefits from Eye-share, Logimatic Partnership

Ship management company UltraShip is the first user of the paperless invoice processing system, SmartSCAN, in Sertica.   Eye-share has partnered with Denmark based Logimatic.

Orion Marine Concepts Launches Q-Strata Software

Aiming to provide niche control over managed/owned vessels, Indian maritime based software provider Orion Marine Concepts has released a strategic intelligence software suite approved by DNV GL.

Logistics

Allcargo Groups Subsidiaries as ECU Worldwide

ECU Line, Econocaribe and China Consolidators undergoes rebranding to build a Global Brand Connect   India’s integrated logistics solution provider Allcargo Logistics

Abu Dhabi Ports Reports Q1 Volume Surge

Abu Dhabi’s RoRo volumes up 31 percent; general and bulk cargo increases 13 percent; container cargo edges up 5 percent   Abu Dhabi Ports, the master developer,

French PM: Aussie Subs to be built in Australia

French Prime Minister Manuel Valls said on Monday he was committed to building all of a new Australian submarine fleet in Australia, apparently contradicting the

 
 
Maritime Security Naval Architecture Navigation Pipelines Port Authority Salvage Ship Repair Shipbuilding / Vessel Construction Sonar Winch
rss | archive | history | articles | privacy | contributors | top maritime news | about us | copyright | maritime magazines
maritime security news | shipbuilding news | maritime industry | shipping news | maritime reporting | workboats news | ship design | maritime business

Time taken: 0.1154 sec (9 req/sec)