IMB: Guard Against Threat of Cyber Attacks

By Joseph R. Fonseca
Thursday, August 21, 2014
IMB Guard against threat of cyber attacks

 

The International Maritime Bureau (IMB) is calling for vigilance in the maritime sector as it emerges that shipping and the supply chain is the ‘next playground for hackers’.

IMB said, “Recent events have shown that systems managing the movement of goods need to be strengthened against the threat of cyber-attacks.

“It is vital that lessons learnt from other industrial sectors are applied quickly to close down cyber vulnerabilities in shipping and the supply chain.”

The threat of cyber-attacks on the sector have intensified in the past few months, with cyber security experts and the media alike warning of the dangers posed by criminals targeting carriers, ports, terminals and other transport operators.

They argue that while IT systems have become more sophisticated and thus enabling companies to better protect themselves against fraud and theft, it has also left them more vulnerable to ‘cyber criminals’.

Speaking at the TOC Container Supply Chain Europe Conference in London recently, TT Club’s insurance claims expert Mike Yarwood said, “We see incidents which at first appear to be a petty break-in at office facilities. The damage appears minimal – nothing is physically removed.”

He added; “More thorough post incident investigations however reveal that the ‘thieves’ were actually installing spyware within the operator’s IT network.”.

Yarwood said that more commonly targets are individuals’ personal devices where cyber security is less adequate.

Hackers often make use of social networks to target truck drivers and operational personnel who travel extensively to ascertain routing and overnight parking patterns. The criminals were looking to extract information such as release codes for containers from terminal facilities or passwords to discover delivery instructions.

“In instances discovered to date, there has been an apparent focus on specific individual containers in attempts to track the units through the supply chain to the destination port. Such systematic tracking is coupled with compromising the terminal’s IT systems to gain access to, or generate release codes for specific containers. Criminals are known to have targeted containers with illegal drugs in this way; however such methods also have greater scope in facilitating high value cargo thefts and human trafficking,” Yarwood revealed.

Whilst it is difficult to get hold of exact numbers and statistics, the risks should not be underestimated, and in June the US Government Accountability Office warned about the possible threats to US ports.

In a stinging report, the organisation said that the actions taken by the Department of Homeland Security and two component agencies, the US Coast Guard and Federal Emergency Management Agency, as well as other federal agencies, to address cybersecurity in the maritime port environment have been limited.

KPMG warns that hackers are the new open sea pirates. Wil Rockall a director in the organisation’s cyber security team highlights that the cyber security of maritime control systems are controlled by engineers and not chief information security officers (CISOs) or chief information officers (CIOs). Lacking security controls, these systems are vulnerable to hackers.

“Most ports and terminals are managed by industrial control systems which have, until very recently, been left out of the CIO’s scope. Historically, this security has not been managed by company CISOs and maritime control systems are very similar.

“As a consequence, the improvements that many companies have made to their corporate cyber security to address the change in the threat landscape over the past three to five years have not been replicated in these environments. Instead engineers have often been left to implement and manage these systems – people who focus normally on optimising processes efficiency and safety, not cyber and security risks. It has meant that many companies and their clients are sailing into uncharted waters when they come to try and manage these risks,” he said.

Rockall added; “We have found that one of the main blockers in improving this is a real translation problem when corporate IT security teams attempt to impose their standards on industrial control systems or maritime control systems. KPMG’s work with the operator of one of the largest fleets of crude oil and oil products tankers and liquefied natural gas carriers in the world, found that bridging that gap and coming up with pragmatic solutions to improve industrial control systems security without compromising process efficiency or safety, are vital to the success of industrial control systems cyber risk management.”
 

Maritime Reporter March 2015 Digital Edition
FREE Maritime Reporter Subscription
Latest Maritime News    rss feeds

Maritime Security

US Will Work to Ensure Bab-el-Mandeb Strait Remains Open

The U.S. military will work with Gulf and European partners to ensure the strategic Bab el-Mandeb Strait at the tip of the Red Sea remains open to commerce despite fighting and instability in Yemen,

17 Countries for Maritime Security Training in Indonesia

Representatives from 17 countries would take part in the sixth Maritime Security Desktop Exercise that is scheduled to be held in Yogyakarta, Indonesia from March 30 to April 1.

Japan's Navy Unveils De-Facto Aircraft Carrier

Japan's Maritime Self Defense Force (JMSDF) took delivery of its biggest warship Izumo, since World War II, a vessel that observers say is a "de-facto aircraft carrier".

News

Carnival to Add Nine Ships to Cruise Fleet

Carnival Corporation enters into strategic partnerships to add nine cruise ships to its fleet over a four-year period starting in 2019; shipbuilders Fincantieri

Coast Guard Academy Cadet to Receive Fulbright Scholarship

Stephen Horvath, a first class cadet at the U.S. Coast Guard Academy, was recently granted a two-year Fulbright Scholarship to study renewable energy technologies

Ecochlor Presents BWTS Case Study at CMA

Ballast water treatment technology developer Ecochlor Inc. presented a project case study yesterday at CMA Shipping 2015 in Stamford, Conn. The case study covered

Maritime Safety

Greek Ferry Runs Aground in the Aegean

A Greek ferry ran aground on the Aegean island of Kassos overnight, the AP is reporting.      None of the 227 passengers and 55 crew were injured and a tug

US Will Work to Ensure Bab-el-Mandeb Strait Remains Open

The U.S. military will work with Gulf and European partners to ensure the strategic Bab el-Mandeb Strait at the tip of the Red Sea remains open to commerce despite fighting and instability in Yemen,

BMT’s REMBRANDT-INLAND Simulation Tool

Brown Water Training and Collision Reconstruction Taken to a New Level When a new or expanded port is planned on an inland waterway, how do you assure the civil

Communication

Affordable SATCOM for Workboat Applications

SATCOM edges closer to providing standardized services to the workboat sector. It’s affordable now and someday soon, you won’t be able to afford to be without it.

Salvage, Wreck Removal Beset with Chronic Problems

The basic nature of maritime casualties, salvage and wreck removal has evolved rapidly over the last few years. Ships and offshore constructions have become more technologically elaborate,

JIT Transit Slots Reduced at Panama Canal

The Panama Canal has experienced an unusual increase in the number of vessels awaiting transit during the past few weeks. Several measures have been implemented to reduce the backlog,

Software Solutions

DNV GL - Maritime CEO Addresses Cybersecurity at CMA 2015

“Ships and offshore structures are becoming more and more interconnected,” said Tor Svensen, CEO DNV GL - Maritime, when taking the stage at this year’s CMA

VesselVanguard wins Chris-Craft Order

Digital Boat Profile and Customer Service Portal Gives Cutting Edge Options for Vessel Management to Boat Owners Palm Beach Gardens, Fla. VesselVanguard,

ASV Wins Maritime Autonomy R&D Funding

ASV Ltd, in partnership with nine other commercial and research organisations, have been awarded funding by Innovate UK to undertake in excess of £3million worth

Logistics

Baltic Sea Freight Index Flat on Muted Vessel Activity

The Baltic Exchange's main sea freight index, which tracks rates for ships carrying dry bulk commodities, remained steady on Thursday due to a muted vessel activity.

Long Beach, LA Collaborate to Improve Cargo Flow

Executives from the ports of Long Beach and Los Angeles held a kickoff meeting earlier this week to begin working together to focus on cargo conveyance strategies

Expanded Panama Canal to be Operational by April 2015

The widened Panama Canal is expected to finally be up and running in April 2016, after months of delays and cost overruns, AFP reports. The expansion project area will allow bigger ships to transit,

 
 
Maritime Careers / Shipboard Positions Maritime Contracts Maritime Security Naval Architecture Navigation Pod Propulsion Salvage Ship Electronics Ship Repair Sonar
rss | archive | history | articles | privacy | terms and conditions | contributors | top maritime news | about us | copyright | maritime magazines
maritime security news | shipbuilding news | maritime industry | shipping news | maritime reporting | workboats news | ship design | maritime business

Time taken: 0.1867 sec (5 req/sec)