IMB: Guard Against Threat of Cyber Attacks

By Joseph R. Fonseca
Thursday, August 21, 2014
IMB Guard against threat of cyber attacks

 

The International Maritime Bureau (IMB) is calling for vigilance in the maritime sector as it emerges that shipping and the supply chain is the ‘next playground for hackers’.

IMB said, “Recent events have shown that systems managing the movement of goods need to be strengthened against the threat of cyber-attacks.

“It is vital that lessons learnt from other industrial sectors are applied quickly to close down cyber vulnerabilities in shipping and the supply chain.”

The threat of cyber-attacks on the sector have intensified in the past few months, with cyber security experts and the media alike warning of the dangers posed by criminals targeting carriers, ports, terminals and other transport operators.

They argue that while IT systems have become more sophisticated and thus enabling companies to better protect themselves against fraud and theft, it has also left them more vulnerable to ‘cyber criminals’.

Speaking at the TOC Container Supply Chain Europe Conference in London recently, TT Club’s insurance claims expert Mike Yarwood said, “We see incidents which at first appear to be a petty break-in at office facilities. The damage appears minimal – nothing is physically removed.”

He added; “More thorough post incident investigations however reveal that the ‘thieves’ were actually installing spyware within the operator’s IT network.”.

Yarwood said that more commonly targets are individuals’ personal devices where cyber security is less adequate.

Hackers often make use of social networks to target truck drivers and operational personnel who travel extensively to ascertain routing and overnight parking patterns. The criminals were looking to extract information such as release codes for containers from terminal facilities or passwords to discover delivery instructions.

“In instances discovered to date, there has been an apparent focus on specific individual containers in attempts to track the units through the supply chain to the destination port. Such systematic tracking is coupled with compromising the terminal’s IT systems to gain access to, or generate release codes for specific containers. Criminals are known to have targeted containers with illegal drugs in this way; however such methods also have greater scope in facilitating high value cargo thefts and human trafficking,” Yarwood revealed.

Whilst it is difficult to get hold of exact numbers and statistics, the risks should not be underestimated, and in June the US Government Accountability Office warned about the possible threats to US ports.

In a stinging report, the organisation said that the actions taken by the Department of Homeland Security and two component agencies, the US Coast Guard and Federal Emergency Management Agency, as well as other federal agencies, to address cybersecurity in the maritime port environment have been limited.

KPMG warns that hackers are the new open sea pirates. Wil Rockall a director in the organisation’s cyber security team highlights that the cyber security of maritime control systems are controlled by engineers and not chief information security officers (CISOs) or chief information officers (CIOs). Lacking security controls, these systems are vulnerable to hackers.

“Most ports and terminals are managed by industrial control systems which have, until very recently, been left out of the CIO’s scope. Historically, this security has not been managed by company CISOs and maritime control systems are very similar.

“As a consequence, the improvements that many companies have made to their corporate cyber security to address the change in the threat landscape over the past three to five years have not been replicated in these environments. Instead engineers have often been left to implement and manage these systems – people who focus normally on optimising processes efficiency and safety, not cyber and security risks. It has meant that many companies and their clients are sailing into uncharted waters when they come to try and manage these risks,” he said.

Rockall added; “We have found that one of the main blockers in improving this is a real translation problem when corporate IT security teams attempt to impose their standards on industrial control systems or maritime control systems. KPMG’s work with the operator of one of the largest fleets of crude oil and oil products tankers and liquefied natural gas carriers in the world, found that bridging that gap and coming up with pragmatic solutions to improve industrial control systems security without compromising process efficiency or safety, are vital to the success of industrial control systems cyber risk management.”
 

Maritime Reporter January 2015 Digital Edition
FREE Maritime Reporter Subscription
Latest Maritime News    rss feeds

News

Zamakona, Finnish GS-Hydro Ink Deal

The presentation ceremony of the Finnish multinational leader in water services GS-Hydro, new partner of Zamakona Yards in Canarias was held yesterday (January 29th at 7 p.

Naval EXPO Coming to Washington

For the first time ever, the general public will be admitted free to the Naval Future Force Science and Technology EXPO general exhibit hall Feb. 4-5 where they

Adani Group Revamps Businesses

Adani Enterprises Limited together with its subsidiaries Adani Ports and Special Economic Zone Limited (“APSEZ”) and Adani Power Limited (“APL”) today announced

Electronics

Kongsberg Expands Louisiana Office, Training Facility

Kongsberg Maritime has purchased approximately 5.2 acres for new construction on an 82,980 sq ft office and training facility. Construction on the James Business

USCG Updates Rules for Arrival/Departure Notices, AIS

Final rule on vessel requirements for Notices of Arrival and Departure and Automatic Identification System published in Federal Register   U.S. Coast Guard (USCG)

Raytheon Anschütz Opens Service Center in Panama

German navigation system manufacturer Raytheon Anschütz has established its new subsidiary Raytheon Anschuetz Panama, S. de R.L., in Panama City.   The new company,

Maritime Safety

Naval EXPO Coming to Washington

For the first time ever, the general public will be admitted free to the Naval Future Force Science and Technology EXPO general exhibit hall Feb. 4-5 where they

PHA Budgets $ 275 mi for Capital Improvements

In 2015, the Port of Houston Authority has budgeted $275 million for various capital improvement projects. About $184 million is being allocated to its container

USCG Updates Rules for Arrival/Departure Notices, AIS

Final rule on vessel requirements for Notices of Arrival and Departure and Automatic Identification System published in Federal Register   U.S. Coast Guard (USCG)

Communication

Directorate Changes at Fastnet

Fastnet, the UK and Irish listed E&P company focused on near-term exploration and appraisal acreage in Morocco and the Celtic Sea, announces certain management

Transas: The Bridge to Tomorrow

Transas was founded in 1990, by a group of former navigators and engineers, who at that time envisioned ways in which computers could revolutionize maritime safety, communications and security.

Oman to Implement Maritime Communications Network

Oman to roll out the national maritime communications network along its lengthy coastline soon, says Al-Madakhel Investment that has been tasked with design, construction

Software Solutions

SSI Launches ShipConstructor 2015 R2.1

SSI has today released ShipConstructor 2015 R2.1 software.   The software release comes in response to emerging ship design, engineering and building trends as

Tero Marine Names Staubo VP of Sales

Erik Sarmento Staubo has been promoted to vice president of sales at Norwegian software company Tero Marine, assuming the role from February 1.   Staubo has for the last 1.

Navigational Charts App Debuts at Ocean Business

An independent consultancy and software development company will launch a new web and PC based navigational charting app at Ocean Business 2015.   Norcom Technology

Logistics

Congestion is Port of Long Beach’s Toughest Issue

Slangerup’s State of the Port address outlines goals for Energy Island, smarter supply chain   In his first-ever State of the Port address, Port of Long Beach

Shippers Must Monitor Greek Government Changes

Moore Stephens says shipping must monitor developments in wake of Greek government change   International accountant and shipping adviser Moore Stephens says

ISS Palumbo UK Acquires Union Transport

ISS Palumbo UK, part of maritime services provider Inchcape Shipping Services (ISS), has acquired U.K. freight forwarding specialist Union Transport (Newcastle) Ltd.

 
 
Maritime Careers / Shipboard Positions Maritime Contracts Maritime Standards Offshore Oil Pod Propulsion Port Authority Salvage Ship Electronics Ship Repair Ship Simulators
rss | archive | history | articles | privacy | terms and conditions | contributors | top maritime news | about us | copyright | maritime magazines
maritime security news | shipbuilding news | maritime industry | shipping news | maritime reporting | workboats news | ship design | maritime business

Time taken: 0.2700 sec (4 req/sec)