IMB: Guard Against Threat of Cyber Attacks

By Joseph R. Fonseca
Thursday, August 21, 2014
IMB Guard against threat of cyber attacks

 

The International Maritime Bureau (IMB) is calling for vigilance in the maritime sector as it emerges that shipping and the supply chain is the ‘next playground for hackers’.

IMB said, “Recent events have shown that systems managing the movement of goods need to be strengthened against the threat of cyber-attacks.

“It is vital that lessons learnt from other industrial sectors are applied quickly to close down cyber vulnerabilities in shipping and the supply chain.”

The threat of cyber-attacks on the sector have intensified in the past few months, with cyber security experts and the media alike warning of the dangers posed by criminals targeting carriers, ports, terminals and other transport operators.

They argue that while IT systems have become more sophisticated and thus enabling companies to better protect themselves against fraud and theft, it has also left them more vulnerable to ‘cyber criminals’.

Speaking at the TOC Container Supply Chain Europe Conference in London recently, TT Club’s insurance claims expert Mike Yarwood said, “We see incidents which at first appear to be a petty break-in at office facilities. The damage appears minimal – nothing is physically removed.”

He added; “More thorough post incident investigations however reveal that the ‘thieves’ were actually installing spyware within the operator’s IT network.”.

Yarwood said that more commonly targets are individuals’ personal devices where cyber security is less adequate.

Hackers often make use of social networks to target truck drivers and operational personnel who travel extensively to ascertain routing and overnight parking patterns. The criminals were looking to extract information such as release codes for containers from terminal facilities or passwords to discover delivery instructions.

“In instances discovered to date, there has been an apparent focus on specific individual containers in attempts to track the units through the supply chain to the destination port. Such systematic tracking is coupled with compromising the terminal’s IT systems to gain access to, or generate release codes for specific containers. Criminals are known to have targeted containers with illegal drugs in this way; however such methods also have greater scope in facilitating high value cargo thefts and human trafficking,” Yarwood revealed.

Whilst it is difficult to get hold of exact numbers and statistics, the risks should not be underestimated, and in June the US Government Accountability Office warned about the possible threats to US ports.

In a stinging report, the organisation said that the actions taken by the Department of Homeland Security and two component agencies, the US Coast Guard and Federal Emergency Management Agency, as well as other federal agencies, to address cybersecurity in the maritime port environment have been limited.

KPMG warns that hackers are the new open sea pirates. Wil Rockall a director in the organisation’s cyber security team highlights that the cyber security of maritime control systems are controlled by engineers and not chief information security officers (CISOs) or chief information officers (CIOs). Lacking security controls, these systems are vulnerable to hackers.

“Most ports and terminals are managed by industrial control systems which have, until very recently, been left out of the CIO’s scope. Historically, this security has not been managed by company CISOs and maritime control systems are very similar.

“As a consequence, the improvements that many companies have made to their corporate cyber security to address the change in the threat landscape over the past three to five years have not been replicated in these environments. Instead engineers have often been left to implement and manage these systems – people who focus normally on optimising processes efficiency and safety, not cyber and security risks. It has meant that many companies and their clients are sailing into uncharted waters when they come to try and manage these risks,” he said.

Rockall added; “We have found that one of the main blockers in improving this is a real translation problem when corporate IT security teams attempt to impose their standards on industrial control systems or maritime control systems. KPMG’s work with the operator of one of the largest fleets of crude oil and oil products tankers and liquefied natural gas carriers in the world, found that bridging that gap and coming up with pragmatic solutions to improve industrial control systems security without compromising process efficiency or safety, are vital to the success of industrial control systems cyber risk management.”
 

Maritime Reporter September 2014 Digital Edition
FREE Maritime Reporter Subscription
Latest Maritime News    rss feeds

News

Vale CEO: Coal Deal Soon

Brazilian mining company Vale SA is close to making a "strategic" announcement concerning its coal unit, the company's chief executive Murilio Ferreira said on

Braemar Hosts Insurance Experts

Braemar (incorporating The Salvage Association) welcomed an invited group of marine insurance professionals onto its specialist port and shipyard familiarization

NAO Announces Financials, Declares Dividend

Nordic American Offshore Ltd. has declared a dividend of $0.45 per share for 3Q2014, as previously announced. This is the same dividend as for the previous two quarters.

Electronics

Aquarius MAS with Marine Solar Power Installed on Delos

Eco Marine Power together with strategic partners has installed an Aquarius Management & Automation System (MAS) integrated with a marine solar panel array on-board the Blue Star 'Delos'.

New Videoconferencing Kits Offer Medical Lifeline

DigiGone, a communication solution provider specializing in secure video transmission, introduced its new remote telemedicine kits for marine, aviation and land-based applications.

L-3 MSI Supplies Navigation for the Oasis Class

L-3 Marine Systems International (L-3 MSI) has been awarded a contract to provide its NACOS Platinum navigation system, including an integrated dynamic positioning system,

Maritime Safety

Partnerships Key to Caribbean Maritime Security

Planning and execution of port and maritime safety and security in Caribbean region is all about partnerships Maritime security and safety experts are meeting in Nassau,

Braemar Hosts Insurance Experts

Braemar (incorporating The Salvage Association) welcomed an invited group of marine insurance professionals onto its specialist port and shipyard familiarization

Monitoring U.S. Troops Returning from Ebola Mission

Secretary Hagel has signed an order that validated a recommendation from the Joint Chiefs of Staff to place all U.S. military service members returning from

Communication

New Videoconferencing Kits Offer Medical Lifeline

DigiGone, a communication solution provider specializing in secure video transmission, introduced its new remote telemedicine kits for marine, aviation and land-based applications.

ExxonMobil 3Q 2014 Earnings Conference Call

Exxon Mobil Corporation will release third quarter financial results on Friday, October 31, 2014. The earnings press release will be available at 7 a.m. CT at www.

WTO Publishes Annual Package of Trade and Tariff Data

The WTO released on 28 October 2014 new editions of its key statistical publications: International Trade Statistics, Trade Profiles, World Tariff Profiles and Services Profiles.

Software Solutions

Marlink, Palantir Enter IT Services Partnership

Marlink and Palantir AS have signed a strategic partnership agreement that aims to improve access to IT services in the maritime industry. Palantir’s IT products

Tianchen Selects AVEVA 3D Design Solution

AVEVA announced that Tianchen, one of China’s largest engineering contractors serving the chemical processing industry, has selected AVEVA Everything3D (AVEVA E3D) as its 3D design solution.

iXBlue Gyrocompass Chosen for the French Navy

PIRIOU selects iXBlue’s QUADRANS as reference gyrocompass for the French Navy B2M multi-mission ship program as iXBlue QUADRANS sales tops 400 units since launch.

Logistics

Kirby Corp. Announces Record 3Q Results

Record 2014 third quarter earnings per share of $1.34 compared with $1.21 in the 2013 third quarter, which included a $0.08 benefit due to the reduction of the United earnout liability.

Vale Financials Disappoint; Iron Ore Prices, Currency Cited

Brazil's Vale posted a surprise loss of $1.44 billion on Thursday, hurt by a fall in the price of iron ore, higher production costs and a weakening Brazilian currency.

US Natgas Exports Would Raise Energy Prices but Boost Economy

Expanded U.S. liquefied natural gas exports would mean a modest price increase for domestic consumers, but the higher costs would be offset by a boost to the economy, the U.

 
 
Maritime Careers / Shipboard Positions Maritime Security Navigation Offshore Oil Port Authority Salvage Ship Repair Ship Simulators Shipbuilding / Vessel Construction Winch
rss | archive | history | articles | privacy | terms and conditions | contributors | top maritime news | about us | copyright | maritime magazines
maritime security news | shipbuilding news | maritime industry | shipping news | maritime reporting | workboats news | ship design | maritime business

Time taken: 0.2239 sec (4 req/sec)