IMB: Guard Against Threat of Cyber Attacks

By Joseph R. Fonseca
Thursday, August 21, 2014
IMB Guard against threat of cyber attacks

 

The International Maritime Bureau (IMB) is calling for vigilance in the maritime sector as it emerges that shipping and the supply chain is the ‘next playground for hackers’.

IMB said, “Recent events have shown that systems managing the movement of goods need to be strengthened against the threat of cyber-attacks.

“It is vital that lessons learnt from other industrial sectors are applied quickly to close down cyber vulnerabilities in shipping and the supply chain.”

The threat of cyber-attacks on the sector have intensified in the past few months, with cyber security experts and the media alike warning of the dangers posed by criminals targeting carriers, ports, terminals and other transport operators.

They argue that while IT systems have become more sophisticated and thus enabling companies to better protect themselves against fraud and theft, it has also left them more vulnerable to ‘cyber criminals’.

Speaking at the TOC Container Supply Chain Europe Conference in London recently, TT Club’s insurance claims expert Mike Yarwood said, “We see incidents which at first appear to be a petty break-in at office facilities. The damage appears minimal – nothing is physically removed.”

He added; “More thorough post incident investigations however reveal that the ‘thieves’ were actually installing spyware within the operator’s IT network.”.

Yarwood said that more commonly targets are individuals’ personal devices where cyber security is less adequate.

Hackers often make use of social networks to target truck drivers and operational personnel who travel extensively to ascertain routing and overnight parking patterns. The criminals were looking to extract information such as release codes for containers from terminal facilities or passwords to discover delivery instructions.

“In instances discovered to date, there has been an apparent focus on specific individual containers in attempts to track the units through the supply chain to the destination port. Such systematic tracking is coupled with compromising the terminal’s IT systems to gain access to, or generate release codes for specific containers. Criminals are known to have targeted containers with illegal drugs in this way; however such methods also have greater scope in facilitating high value cargo thefts and human trafficking,” Yarwood revealed.

Whilst it is difficult to get hold of exact numbers and statistics, the risks should not be underestimated, and in June the US Government Accountability Office warned about the possible threats to US ports.

In a stinging report, the organisation said that the actions taken by the Department of Homeland Security and two component agencies, the US Coast Guard and Federal Emergency Management Agency, as well as other federal agencies, to address cybersecurity in the maritime port environment have been limited.

KPMG warns that hackers are the new open sea pirates. Wil Rockall a director in the organisation’s cyber security team highlights that the cyber security of maritime control systems are controlled by engineers and not chief information security officers (CISOs) or chief information officers (CIOs). Lacking security controls, these systems are vulnerable to hackers.

“Most ports and terminals are managed by industrial control systems which have, until very recently, been left out of the CIO’s scope. Historically, this security has not been managed by company CISOs and maritime control systems are very similar.

“As a consequence, the improvements that many companies have made to their corporate cyber security to address the change in the threat landscape over the past three to five years have not been replicated in these environments. Instead engineers have often been left to implement and manage these systems – people who focus normally on optimising processes efficiency and safety, not cyber and security risks. It has meant that many companies and their clients are sailing into uncharted waters when they come to try and manage these risks,” he said.

Rockall added; “We have found that one of the main blockers in improving this is a real translation problem when corporate IT security teams attempt to impose their standards on industrial control systems or maritime control systems. KPMG’s work with the operator of one of the largest fleets of crude oil and oil products tankers and liquefied natural gas carriers in the world, found that bridging that gap and coming up with pragmatic solutions to improve industrial control systems security without compromising process efficiency or safety, are vital to the success of industrial control systems cyber risk management.”
 

Maritime Reporter August 2015 Digital Edition
FREE Maritime Reporter Subscription
Latest Maritime News    rss feeds

News

Man Earns Jail Time for Hoax Coast Guard Calls

A man found guilty of making numerous hoax calls to the U.K. Coastguard has been jailed for four months, the U.K. Maritime and Coastguard Agency (MCA) reported.

Panama Canal Suspends Draft Restriction

The Panama Canal Authority (ACP) has lifted scheduled vessel draft restrictions brought on by lingering draught conditions in the region.   The ACP had previously set restrictions of 11.

Med Crude-Russian Urals Edges Lower in Med, Baltic

Russian Urals crude weakened in the Mediterranean and in the Baltic on Friday, while trading activity was limited ahead of a long holiday weekend in Britain, traders said.

Electronics

Powering the First Electric Commercial Fishing Boat

The world’s first electric commercial fishing vessel will be powered by a Corvus lithium polymer Energy Storage System (ESS) integrated with a Siemens propulsion

MN 100: Baker, Lyman & Co., Inc.

The Company: A wheelhouse favorite for generations, Baker, Lyman & Co. is the oldest NOAA & Admiralty Chart Agent in the United States. New Orleans-based Baker

SUNY Maritime to Host e-Navigation Conference

SUNY Maritime College will host the 2015 e-Navigation Underway North America Conference September 28-30 in New York   It is likely that regions like the Baltic,

Maritime Safety

Man Earns Jail Time for Hoax Coast Guard Calls

A man found guilty of making numerous hoax calls to the U.K. Coastguard has been jailed for four months, the U.K. Maritime and Coastguard Agency (MCA) reported.

Tropical Storm Erika Heads for Florida

Tropical Storm Erika lashed Puerto Rico and the Virgin Islands with heavy rain and fierce winds on Friday, moving across the Caribbean and apparently heading for the Dominican Republic,

ClassNK to Issue Guidance on Composite Propellers

Classification society ClassNK announced it will release the world’s first Guidelines on Composite Propellers (Part on Manufacturing/Product Inspection) on August 31.

Communication

Western Cape Ports Now 'smartPORTS'

The Ports of Cape Town and Saldanha became the latest to go live with Transnet National Ports Authority’s new R79 million web-based Integrated Port Management System (IPMS),

Mariners Dread Port Calls

Seafarer social media site Crewtoo, part of KVH Industries, Inc., has published the results of its second Crewtoo Seafarers Happiness Index report detailing job satisfaction at sea.

Cyber Security & the Challenge to Maritime Networks

“Look at me: I am the Captain now.” In the film “Captain Phillips,” a boarding Somali pirate’s statement represents a maritime operator’s worst fear: losing control of his vessel, cargo and crew.

Software Solutions

IMEI Certification - Unique Achievement

For Institute of Marine Engineers of India having achieved standardisation and maintainenace of quality processes simultaneously not just at their Head Office

Western Cape Ports Now 'smartPORTS'

The Ports of Cape Town and Saldanha became the latest to go live with Transnet National Ports Authority’s new R79 million web-based Integrated Port Management System (IPMS),

Interschalt Expands Network in China

Interschalt  maritime systems AG, a provider of maritime software and services for navigation and communication equipment (NavCom), as well as the manufacturer

Logistics

Migrant Boat Sinks off Libya; 200 Feared Dead

A boat packed with mainly African migrants bound for Italy sank off the Libyan coast on Thursday and officials said up to 200 might have died. A security official in the western town of Zuwara,

Oil Steadies as Equities Rally

Recovering stock markets boost oil prices; U.S. crude on track for first weekly gain in nine weeks. Oil prices steadied on Friday after bouncing back from six-and-a-half-year

Dutch Green Ports to be Model for Turkey

Netherlands will be a model for Turkey’s ports within an environmentally-friendly Green Port implementation, says Daily News.   Port of Amsterdam and Dutch officials

 
 
Maritime Security Maritime Standards Navigation Pipelines Pod Propulsion Port Authority Salvage Shipbuilding / Vessel Construction Sonar Winch
rss | archive | history | articles | privacy | contributors | top maritime news | about us | copyright | maritime magazines
maritime security news | shipbuilding news | maritime industry | shipping news | maritime reporting | workboats news | ship design | maritime business

Time taken: 0.1772 sec (6 req/sec)