Maritime Cyber Security: Survival at Sea

By CDR Emil A. Muccin, USMS
Wednesday, July 18, 2012

What do we think of when we hear “Survival at Sea”? 
It usually brings up visions of a ship in a perilous situation confronting some extraordinary circumstances that might be life or death.  We are now faced with an even more harrowing scenario- broaching of maritime information including specific details that might encompass company proprietary data as well as details of vessel schedules and particulars.  Many of you have heard of recent cyber-attacks including Stuxnet that deliberately disrupted critical automation systems and the just released Flame computer virus disguised as a Microsoft-built program that has caused problems for Iran’s computer networks.  These cyber-attacks speak to the need for safe and secure information systems aboard maritime vessels and the requirements for a robust cyber defense system.  Counter terrorism experts indicate that future attacks are inevitable and that the US maybe in harm’s way of collateral damage if this is picked up by unfriendly adversaries.
Most people do not realize that a majority of activities in the maritime field rely on sophisticated electronic and communication systems, and that puts them in an extremely vulnerable position and exposes them to hacking similar to nuclear plants and other areas of national infrastructures.
A recent 2011 European Union (EU) Report on Maritime Cyber Security indicates that maritime cyber security awareness is currently low to non-existent.  This report covers many of the challenges facing mariners in the 21st century and highlights trends as well as examines current initiatives while offering recommendations to address these risks.  In the global world of 2012 this report proposes maritime cyber security as an important and timely next move in the global arena of Information and Communication Technology (ICT) infrastructure protection efforts.
Based on the high complexity of ICT aboard maritime vessels it is paramount to adequately support and maintain a proper maritime cyber defense system.  One of the basic concepts should be a design methodology that incorporates security in all major maritime ICT components.
Current maritime security principally deals with physical security and it now needs to be expanded to encompass cyber security and defense.
Much of the cruise industry currently has IT department onboard vessels and the new changes in the 2010 STCW Manila Amendments have even introduced an Electro Technical Officer (ETO) designation with approved training and Certificate of Competency (COC).  On board cruise and passenger vessels an ETO is immensely important as they have huge electrical requirements and unmanned technology handling them.  An ETO can be seen as a higher version of an electrical officer.  Some areas that an ETO is responsible for include radio communications, electronic navigation equipment, telephone and satellite communications and engine room electrical equipment. 
The 2010 STCW Manila Amendments have now been in force since January 1st, 2012 and although there is no specific requirement for the carrying of an ETO, IMO has created the position with core competencies and minimum mandatory requirements.  It is plausible to believe that future STCW Amendments will make this a mandatory position on certain type and size vessels.  Prudent vessel owners and operators would be wise to fully embrace this position and commence integrating it into their crew complement.
It is interesting to note that over 50% of international trade takes place via maritime shipping and within the European Union (EU) over 40% is via maritime commerce.  With these staggering numbers it should become readily apparent that the ICT infrastructure and backbone needs to be made more secure and tamper proof.  Measures that can be deployed include developing a holistic approach to cyber based risk management, building a framework for cyber incident response, enhancing information sharing to improve incident response capabilities and improving cyber security across all infrastructures.  Much of this can be framed around proper training for all crew members as well as implementing the ETO position and ensuring and performing systems audits on all equipment and systems to verify they have the latest security and software updates.
At sea some simple items that can be done to be more cyber secure and vigilant include whenever updating ECDIS charts to verify the source, request encrypted data and digital electronic signatures.  These are simple steps that can help alleviate someone maliciously sending you incorrect navigational data that could easily put your ship in jeopardy or peril for example by moving one buoy out of position in a channel.
Would it be beneficial for the maritime community to get together and form a maritime cyber security team that could establish strategy, policy and guidelines that would be beneficial in securing and protecting the maritime sector?  In today’s world now is the time to make this preventive move and on an individual basis all shipping companies should be self-evaluating their operations and infrastructure to ensure they are fully compliant with the latest security and protection systems to avoid future threats..


CDR Muccin, USMS is an Assistant Professor in Nautical Science/Marine Transportation at the United States Merchant Marine Academy.  The views here are her/his own and not those of the Academy, the Maritime Administration or any other branch of the United States government.


(Source: Maritime Reporter & Engineering News, July 2012 - www.marinelink.com)

Maritime Reporter November 2014 Digital Edition
FREE Maritime Reporter Subscription
Latest Maritime News    rss feeds

Technology

Liquefaction Terminals to Dominate LNG Capital Expenditure

Capital expenditure (Capex) on global LNG facilities is expected to total $259 billion (bn) over the period 2015-2019, with investments expected to be 88% larger

Ennsub Delivers ROV Deployment Systems

Ennsub has completed the design and manufacture of two workclass remotely operated vehicle (WROV) deployment systems for ROVOP, due to be installed into a newbuild

Wärtsilä to Proceed with first LNG Terminal

Wärtsilä has been given full notice to proceed (NTP) from Manga LNG Oy for the supply of a liquefied natural gas (LNG) import terminal in Tornio, Northern Finland.

Legal

US Plans to Shut Royalty Loophole on Coal Exports

U.S. coal companies will no longer be able to settle royalties at low domestic prices when they make lucrative sales to Asia according to reforms proposed by the Interior Department on Friday.

Denmark Issues New Pilotage Regulations

In an effort to make the pilotage market more efficient, the Danish Maritime Authority (DMA) issued several new regulations following on amendments to the pilotage act.

US Shippers, West Coast Dockworkers Union Resume Contract Talks

Negotiators for shipping lines and terminal operators at 29 U.S. West Coast ports resumed contract talks with the union for dockworkers on Thursday, as cargo backups continued at the ports,

Shipbuilding

Damen Outfitting First of Nine Bahamas Patrol Boats

The first of nine Damen Stan Patrol 3007s ordered by the Royal Bahamas Defense Force has arrived at Damen Shipyards Gorinchem in the Netherlands for outfitting.

Liquefaction Terminals to Dominate LNG Capital Expenditure

Capital expenditure (Capex) on global LNG facilities is expected to total $259 billion (bn) over the period 2015-2019, with investments expected to be 88% larger

New Chinese Shipyard Launches First Ship

The new shipyard facility of Honghua Offshore Oil & Gas Equipment Company in Jiangsu, China, has launched its first ship, an IMT982 Platform Supply Vessel. The vessel,

Education/Training

San Jacinto College Breaks Ground on New Training Center

San Jacinto College has broken ground along the Port of Houston for its new 45,000-square-foot Maritime Training Center.   At the site of 3700 Old Highway 146 in La Porte,

Damen Shipyards Galati wins Dutch Romanian Award

Damen Shipyards Galati has been presented with the Dutch Romanian Business Award for its Corporate Social Responsibility plan, particularly the Group’s community investment initiatives.

Lowrance Renews Insight Genesis College Cup

Lowrance®, a world-leading brand in fishing electronics since 1957— announced today the renewal of its Insight Genesis™ College Cup. In its second year, the

Maritime Security

Damen Outfitting First of Nine Bahamas Patrol Boats

The first of nine Damen Stan Patrol 3007s ordered by the Royal Bahamas Defense Force has arrived at Damen Shipyards Gorinchem in the Netherlands for outfitting.

USCG on Cuba Policy Changes

The U.S. Coast Guard missions and operations in the Southeast remain unchanged. The Coast Guard strongly discourages attempts to illegally enter the country by taking to the sea.

NASSCO Opens Bremerton Repair Facility

General Dynamics NASSCO celebrated the grand opening of its new location in Bremerton, Wash., yesterday. The facility will support the company’s recently-awarded contract to repair and maintain U.

Maritime Safety

NZ Report: Human Error to Blame for Rena Grounding

New Zealand's Transport Accident Investigation Commission (TAIC) published its final report into the grounding of containership Rena in October 2011. The TAIC’s

DNV GL Targets Safer Approach to Subsea Lifting

The completion of a joint industry project (JIP) to improve existing standards and regulations around subsea lifting operations has resulted in a new recommended practice (RP).

NOAA: US to See More Floods from Sea Level Rise

Most of U.S. coast may see 30 or more days a year of floods up to 2 feet above high tides. By 2050, a majority of U.S. coastal areas are likely to be threatened

Government Update

Madsen to Chair Norway’s Research Council Executive Board

Henrik O. Madsen appointed chairman of the executive board of the Research Council of Norway   DNV GL president and CEO Henrik O. Madsen was appointed as chairman

MARAD Publishes US ATB, ITB Database

The U.S. Maritime Administration (MARAD) released what it is calling a first-of-its-kind public database that chronicles U.S.-flagged, privately owned domestic

Costa Rica Approves APM Terminals Project

Port operator APM Terminals, a unit of Denmark's A.P. Moller-Maersk, said on Friday Costa Rica's environment agency had approved the construction of its Moin Container Terminal project.

 
 
Maritime Careers / Shipboard Positions Maritime Contracts Maritime Security Offshore Oil Pipelines Ship Electronics Ship Repair Shipbuilding / Vessel Construction Sonar Winch
rss | archive | history | articles | privacy | terms and conditions | contributors | top maritime news | about us | copyright | maritime magazines
maritime security news | shipbuilding news | maritime industry | shipping news | maritime reporting | workboats news | ship design | maritime business

Time taken: 0.2612 sec (4 req/sec)