Maritime Cyber Security: Survival at Sea

By CDR Emil A. Muccin, USMS
Wednesday, July 18, 2012

What do we think of when we hear “Survival at Sea”? 
It usually brings up visions of a ship in a perilous situation confronting some extraordinary circumstances that might be life or death.  We are now faced with an even more harrowing scenario- broaching of maritime information including specific details that might encompass company proprietary data as well as details of vessel schedules and particulars.  Many of you have heard of recent cyber-attacks including Stuxnet that deliberately disrupted critical automation systems and the just released Flame computer virus disguised as a Microsoft-built program that has caused problems for Iran’s computer networks.  These cyber-attacks speak to the need for safe and secure information systems aboard maritime vessels and the requirements for a robust cyber defense system.  Counter terrorism experts indicate that future attacks are inevitable and that the US maybe in harm’s way of collateral damage if this is picked up by unfriendly adversaries.
Most people do not realize that a majority of activities in the maritime field rely on sophisticated electronic and communication systems, and that puts them in an extremely vulnerable position and exposes them to hacking similar to nuclear plants and other areas of national infrastructures.
A recent 2011 European Union (EU) Report on Maritime Cyber Security indicates that maritime cyber security awareness is currently low to non-existent.  This report covers many of the challenges facing mariners in the 21st century and highlights trends as well as examines current initiatives while offering recommendations to address these risks.  In the global world of 2012 this report proposes maritime cyber security as an important and timely next move in the global arena of Information and Communication Technology (ICT) infrastructure protection efforts.
Based on the high complexity of ICT aboard maritime vessels it is paramount to adequately support and maintain a proper maritime cyber defense system.  One of the basic concepts should be a design methodology that incorporates security in all major maritime ICT components.
Current maritime security principally deals with physical security and it now needs to be expanded to encompass cyber security and defense.
Much of the cruise industry currently has IT department onboard vessels and the new changes in the 2010 STCW Manila Amendments have even introduced an Electro Technical Officer (ETO) designation with approved training and Certificate of Competency (COC).  On board cruise and passenger vessels an ETO is immensely important as they have huge electrical requirements and unmanned technology handling them.  An ETO can be seen as a higher version of an electrical officer.  Some areas that an ETO is responsible for include radio communications, electronic navigation equipment, telephone and satellite communications and engine room electrical equipment. 
The 2010 STCW Manila Amendments have now been in force since January 1st, 2012 and although there is no specific requirement for the carrying of an ETO, IMO has created the position with core competencies and minimum mandatory requirements.  It is plausible to believe that future STCW Amendments will make this a mandatory position on certain type and size vessels.  Prudent vessel owners and operators would be wise to fully embrace this position and commence integrating it into their crew complement.
It is interesting to note that over 50% of international trade takes place via maritime shipping and within the European Union (EU) over 40% is via maritime commerce.  With these staggering numbers it should become readily apparent that the ICT infrastructure and backbone needs to be made more secure and tamper proof.  Measures that can be deployed include developing a holistic approach to cyber based risk management, building a framework for cyber incident response, enhancing information sharing to improve incident response capabilities and improving cyber security across all infrastructures.  Much of this can be framed around proper training for all crew members as well as implementing the ETO position and ensuring and performing systems audits on all equipment and systems to verify they have the latest security and software updates.
At sea some simple items that can be done to be more cyber secure and vigilant include whenever updating ECDIS charts to verify the source, request encrypted data and digital electronic signatures.  These are simple steps that can help alleviate someone maliciously sending you incorrect navigational data that could easily put your ship in jeopardy or peril for example by moving one buoy out of position in a channel.
Would it be beneficial for the maritime community to get together and form a maritime cyber security team that could establish strategy, policy and guidelines that would be beneficial in securing and protecting the maritime sector?  In today’s world now is the time to make this preventive move and on an individual basis all shipping companies should be self-evaluating their operations and infrastructure to ensure they are fully compliant with the latest security and protection systems to avoid future threats..


CDR Muccin, USMS is an Assistant Professor in Nautical Science/Marine Transportation at the United States Merchant Marine Academy.  The views here are her/his own and not those of the Academy, the Maritime Administration or any other branch of the United States government.


(Source: Maritime Reporter & Engineering News, July 2012 - www.marinelink.com)

Maritime Today


The Maritime Industry's original and most viewed E-News Service

Maritime Reporter January 2016 Digital Edition
FREE Maritime Reporter Subscription
Latest Maritime News    rss feeds

Technology

Norbulk Selects Parker Kittiwake’s Cat Fines Test Kit

Parker Kittiwake, a leading global supplier of asset control and protection technology, has today announced a significant order of its recently launched Cat Fines

European Consortium Launches Blue Nodules Project

On 1 February a European consortium launched a new Horizon 2020 project: Blue Nodules. This project addresses the challenge of creating a viable and sustainable

Seafarers help Sought to Improve Onboard Design

The Nautical Institute and CIRM (the principal international association for marine electronics companies) today launched a joint initiative to improve the usability

Legal

Globus Maritime Reclassifies Board Member

Globus Maritime Limited, a dry bulk shipping company, announced today that when Georgios Karageorgiou, a Class I director of Globus Maritime Limited  resigned on December 28,

Antietam, McCampbell Build Relationships at IFR 2016

Ticonderoga-class guided-missile cruiser USS Antietam (CG 54) and Arleigh Burke-class guided-missile destroyer USS McCampbell (DDG 85) arrived Feb. 4 in India

COSCO Plans European Transhipment Hub

China's COSCO is forging ahead with a plan to build a European transhipment hub, reports Reuters. The state owned shipping giant is expected to make an offer for

Shipbuilding

Crowley Christens 2nd LNG-ready Product Tanker

Crowley christens second of four newly built, LNG-ready product tankers for use in U.S. coastwise trade   Crowley Maritime Corp. has christened the second of

VT Halter Delivers ATB Tug to Bouchard

VT Halter Marine, Inc. announced the delivery of the M/V Morton S. Bouchard Jr., the first of the two 6,000 horsepower Twin Screw Articulated Tug Barge (ATB) tugs to Bouchard Transportation Co.

Damen Builds Cable Installer For Maersk Supply Service

New Damen-built vessel for Maersk Supply Service to undertake long-term charter with DeepOcean   A newbuild DP2 cable installation vessel, Maersk Connector, was

Education/Training

First Women's Expedition to the Arctic

Company "MyArctic-expeditions" organize the first women's expedition to the Arctic Ocean. The expedition will start on March 5 in the capital of the Nenets Autonomous

SUNY Maritime Among Top Schools for Career Placement

The Princeton Review’s annual college rankings place State University of New York Maritime College among the top 10 in the nation for career placement after graduation.

Campaign for Webb at $28 Mln and Counting

Webb Institute’s Campaign Cabinet, led by President Keith Michel ’73 and Campaign Chair Joseph Cuneo ’57 announced that $28 million (70 percent) of the $40 million

Maritime Security

Antietam, McCampbell Build Relationships at IFR 2016

Ticonderoga-class guided-missile cruiser USS Antietam (CG 54) and Arleigh Burke-class guided-missile destroyer USS McCampbell (DDG 85) arrived Feb. 4 in India

Hijacked Singaporean Ship Released in Nigeria

The crew of a Singapore-registered container vessel, Safmarine Kuramo, hijacked off the Nigerian Coast earlier this week, were released unharmed on Saturday (Feb

Indian Navy Shows Off Strength

India’s naval might was on full display off the coast of Visakhapatnam today (Saturday) as President Pranab Mukherjee reviewed the naval fleet.   Mukherjee,

Maritime Safety

Topaz Responder Saves Refugee Migrants

Topaz Energy and Marine has emerged as an unlikely player in the effort to save refugee migrants risking their lives on the sea crossing from Turkey to Greece’s islands in order to reach Europe.

Antietam, McCampbell Build Relationships at IFR 2016

Ticonderoga-class guided-missile cruiser USS Antietam (CG 54) and Arleigh Burke-class guided-missile destroyer USS McCampbell (DDG 85) arrived Feb. 4 in India

Hijacked Singaporean Ship Released in Nigeria

The crew of a Singapore-registered container vessel, Safmarine Kuramo, hijacked off the Nigerian Coast earlier this week, were released unharmed on Saturday (Feb

 
 
Maritime Careers / Shipboard Positions Maritime Contracts Maritime Security Naval Architecture Pipelines Salvage Ship Electronics Ship Repair Sonar Winch
rss | archive | history | articles | privacy | contributors | top maritime news | about us | copyright | maritime magazines
maritime security news | shipbuilding news | maritime industry | shipping news | maritime reporting | workboats news | ship design | maritime business

Time taken: 0.1432 sec (7 req/sec)