IMB: Guard Against Threat of Cyber Attacks

By Joseph R. Fonseca
Thursday, August 21, 2014
IMB Guard against threat of cyber attacks

 

The International Maritime Bureau (IMB) is calling for vigilance in the maritime sector as it emerges that shipping and the supply chain is the ‘next playground for hackers’.

IMB said, “Recent events have shown that systems managing the movement of goods need to be strengthened against the threat of cyber-attacks.

“It is vital that lessons learnt from other industrial sectors are applied quickly to close down cyber vulnerabilities in shipping and the supply chain.”

The threat of cyber-attacks on the sector have intensified in the past few months, with cyber security experts and the media alike warning of the dangers posed by criminals targeting carriers, ports, terminals and other transport operators.

They argue that while IT systems have become more sophisticated and thus enabling companies to better protect themselves against fraud and theft, it has also left them more vulnerable to ‘cyber criminals’.

Speaking at the TOC Container Supply Chain Europe Conference in London recently, TT Club’s insurance claims expert Mike Yarwood said, “We see incidents which at first appear to be a petty break-in at office facilities. The damage appears minimal – nothing is physically removed.”

He added; “More thorough post incident investigations however reveal that the ‘thieves’ were actually installing spyware within the operator’s IT network.”.

Yarwood said that more commonly targets are individuals’ personal devices where cyber security is less adequate.

Hackers often make use of social networks to target truck drivers and operational personnel who travel extensively to ascertain routing and overnight parking patterns. The criminals were looking to extract information such as release codes for containers from terminal facilities or passwords to discover delivery instructions.

“In instances discovered to date, there has been an apparent focus on specific individual containers in attempts to track the units through the supply chain to the destination port. Such systematic tracking is coupled with compromising the terminal’s IT systems to gain access to, or generate release codes for specific containers. Criminals are known to have targeted containers with illegal drugs in this way; however such methods also have greater scope in facilitating high value cargo thefts and human trafficking,” Yarwood revealed.

Whilst it is difficult to get hold of exact numbers and statistics, the risks should not be underestimated, and in June the US Government Accountability Office warned about the possible threats to US ports.

In a stinging report, the organisation said that the actions taken by the Department of Homeland Security and two component agencies, the US Coast Guard and Federal Emergency Management Agency, as well as other federal agencies, to address cybersecurity in the maritime port environment have been limited.

KPMG warns that hackers are the new open sea pirates. Wil Rockall a director in the organisation’s cyber security team highlights that the cyber security of maritime control systems are controlled by engineers and not chief information security officers (CISOs) or chief information officers (CIOs). Lacking security controls, these systems are vulnerable to hackers.

“Most ports and terminals are managed by industrial control systems which have, until very recently, been left out of the CIO’s scope. Historically, this security has not been managed by company CISOs and maritime control systems are very similar.

“As a consequence, the improvements that many companies have made to their corporate cyber security to address the change in the threat landscape over the past three to five years have not been replicated in these environments. Instead engineers have often been left to implement and manage these systems – people who focus normally on optimising processes efficiency and safety, not cyber and security risks. It has meant that many companies and their clients are sailing into uncharted waters when they come to try and manage these risks,” he said.

Rockall added; “We have found that one of the main blockers in improving this is a real translation problem when corporate IT security teams attempt to impose their standards on industrial control systems or maritime control systems. KPMG’s work with the operator of one of the largest fleets of crude oil and oil products tankers and liquefied natural gas carriers in the world, found that bridging that gap and coming up with pragmatic solutions to improve industrial control systems security without compromising process efficiency or safety, are vital to the success of industrial control systems cyber risk management.”
 

Maritime Reporter April 2015 Digital Edition
FREE Maritime Reporter Subscription
Latest Maritime News    rss feeds

Maritime Security

HMS Prince of Wales Bridge Sets Sail

The bridge section of the second Queen Elizabeth Class aircraft carrier set sail today from Glasgow on its first sea voyage to Rosyth.   Upper Block 07 is where

Iran Moves Ships, Reducing Tensions Near Yemen

A flotilla of nine Iranian military and cargo ships that U.S. officials feared was carrying arms to strife-torn Yemen sailed northeast in the direction of Iran on Friday,

Russia, France Close to Deal on Mistrals

Russia and France are close to reaching an agreement for Paris to cancel a frozen contract on the sale of Mistral helicopter carriers and reimburse Moscow, a Russian

News

5th Floating Accommodation for Lerwick

A further accommodation ship, Ocean Atlantic, is due at Lerwick on Monday 27 April 2015 and is on its way from Portland in Dorset. As with the other floating accommodation at the port,

Double Order for Super Gloria Reachstacker

Kalmar, part of Cargotec, has gained an order for two Super Gloria reachstackers from Tadarsa Logistics S.L. in Aviles, Spain. The largest reachstackers ever built,

Goliat FPSO in Norway

The Goliat FPSO was successfully floated off the heavy-lift vessel, Dockwise Vanguard, in the fjord outside Hammerfest, says Eni Norge    The Goliat platform has arrived in Hammerfest,

Electronics

HMS Prince of Wales Bridge Sets Sail

The bridge section of the second Queen Elizabeth Class aircraft carrier set sail today from Glasgow on its first sea voyage to Rosyth.   Upper Block 07 is where

Huat Retires as Non-Ex Dir. of ST Engineering

Singapore Technologies Engineering Ltd (ST Engineering) today announced the retirement of Mr Quek Poh Huat as non-executive Director of the Company at its Annual General Meeting on 23 April 2015.

GOST System Tracks Stolen Boat in Abacos

GOST (Global Ocean Security Technologies), celebrating its 10th year as a world leader in marine security, tracking, monitoring and video surveillance systems,

Maritime Safety

BIMCO Welcomes EU Decision on Migrants

BIMCO has stated today that it appreciates the new efforts by EU leaders to reduce increasing reliance on merchant shipping to rescue the growing numbers of

Two Rescued from Sinking Shrimp Boat

Two fishermen were rescued from their sinking shrimp boat by a U.S. Coast Guard aircrew Friday off the coast of Saint Simons Island near Brunswic, Georgia.   Watchstanders

IMO: Making Ferries Safer

The International Maritime Organization (IMO) domestic ferry safety conference in Manila April 24 has adopted guidelines to aid the process of reducing the mounting

Communication

Salvage and Wreck Removal Conference

HINODE Events and Services Pvt Ltd., have announced the 4th Annual Conference on Salvage and Wreck Removal in India to be held on Wednesday, July 8, 2015 at Visakhapatnam on India's East Coast.

General Mills Strategically placed in Port Salford

General Mills UK & Ireland – responsible for a range of market-leading brands, including Old El Paso, Green Giant, Betty Crocker and Nature Valley – is to be

East to Succeed Rishton as Rolls-Royce CEO

John Rishton will retire as chief executive of Rolls-Royce on July 2, 2015 and will be succeeded by Warren East, whose appointment follows an extensive international search,

Software Solutions

SDARI Inks Agreement for INTERSCHALT Loading Software

INTERSCHALT maritime systems AG, a maritime software and services provider of loading computers on board containerships, signed a cooperation agreement with the

AMI Maritime, BMT SMART Sign Partnership Agreement

BMT SMART (BMT), the specialist fleet and vessel performance management company of BMT Group, announced that Singapore-based AMI Maritime Pte Ltd has become an accredited service partner.

China's WSDDI Extends FORAN Licenses

China’s Wuhan Ship Development and Design Institute (WSDDI) extended its FORAN contract with SENER.   At the end of December 2014, WSDDI signed a contract with SENER’s partner in Beijing,

Logistics

Norwegian Car Carriers to Buy Two from Hyundai Samho

Oslo-listed Norwegian Car Carriers (NOCC) has signed a contract with Hyundai Samho Heavy Industries for the construction of two 6500 ceu Pure Car Truck Carrier (OCTCs).

APM Maasvlakte II Terminal Opens

APM Terminals Maasvlakte II held a ceremony  to celebrate the opening of the world’s most automated container terminal.   The  event that was attended by Dutch

Goliat FPSO in Norway

The Goliat FPSO was successfully floated off the heavy-lift vessel, Dockwise Vanguard, in the fjord outside Hammerfest, says Eni Norge    The Goliat platform has arrived in Hammerfest,

 
 
Maritime Careers / Shipboard Positions Maritime Standards Naval Architecture Navigation Offshore Oil Pipelines Pod Propulsion Salvage Ship Electronics Ship Simulators
rss | archive | history | articles | privacy | contributors | top maritime news | about us | copyright | maritime magazines
maritime security news | shipbuilding news | maritime industry | shipping news | maritime reporting | workboats news | ship design | maritime business

Time taken: 0.1679 sec (6 req/sec)