Maritime Cyber Security: Survival at Sea

By CDR Emil A. Muccin, USMS
Wednesday, July 18, 2012

What do we think of when we hear “Survival at Sea”? 
It usually brings up visions of a ship in a perilous situation confronting some extraordinary circumstances that might be life or death.  We are now faced with an even more harrowing scenario- broaching of maritime information including specific details that might encompass company proprietary data as well as details of vessel schedules and particulars.  Many of you have heard of recent cyber-attacks including Stuxnet that deliberately disrupted critical automation systems and the just released Flame computer virus disguised as a Microsoft-built program that has caused problems for Iran’s computer networks.  These cyber-attacks speak to the need for safe and secure information systems aboard maritime vessels and the requirements for a robust cyber defense system.  Counter terrorism experts indicate that future attacks are inevitable and that the US maybe in harm’s way of collateral damage if this is picked up by unfriendly adversaries.
Most people do not realize that a majority of activities in the maritime field rely on sophisticated electronic and communication systems, and that puts them in an extremely vulnerable position and exposes them to hacking similar to nuclear plants and other areas of national infrastructures.
A recent 2011 European Union (EU) Report on Maritime Cyber Security indicates that maritime cyber security awareness is currently low to non-existent.  This report covers many of the challenges facing mariners in the 21st century and highlights trends as well as examines current initiatives while offering recommendations to address these risks.  In the global world of 2012 this report proposes maritime cyber security as an important and timely next move in the global arena of Information and Communication Technology (ICT) infrastructure protection efforts.
Based on the high complexity of ICT aboard maritime vessels it is paramount to adequately support and maintain a proper maritime cyber defense system.  One of the basic concepts should be a design methodology that incorporates security in all major maritime ICT components.
Current maritime security principally deals with physical security and it now needs to be expanded to encompass cyber security and defense.
Much of the cruise industry currently has IT department onboard vessels and the new changes in the 2010 STCW Manila Amendments have even introduced an Electro Technical Officer (ETO) designation with approved training and Certificate of Competency (COC).  On board cruise and passenger vessels an ETO is immensely important as they have huge electrical requirements and unmanned technology handling them.  An ETO can be seen as a higher version of an electrical officer.  Some areas that an ETO is responsible for include radio communications, electronic navigation equipment, telephone and satellite communications and engine room electrical equipment. 
The 2010 STCW Manila Amendments have now been in force since January 1st, 2012 and although there is no specific requirement for the carrying of an ETO, IMO has created the position with core competencies and minimum mandatory requirements.  It is plausible to believe that future STCW Amendments will make this a mandatory position on certain type and size vessels.  Prudent vessel owners and operators would be wise to fully embrace this position and commence integrating it into their crew complement.
It is interesting to note that over 50% of international trade takes place via maritime shipping and within the European Union (EU) over 40% is via maritime commerce.  With these staggering numbers it should become readily apparent that the ICT infrastructure and backbone needs to be made more secure and tamper proof.  Measures that can be deployed include developing a holistic approach to cyber based risk management, building a framework for cyber incident response, enhancing information sharing to improve incident response capabilities and improving cyber security across all infrastructures.  Much of this can be framed around proper training for all crew members as well as implementing the ETO position and ensuring and performing systems audits on all equipment and systems to verify they have the latest security and software updates.
At sea some simple items that can be done to be more cyber secure and vigilant include whenever updating ECDIS charts to verify the source, request encrypted data and digital electronic signatures.  These are simple steps that can help alleviate someone maliciously sending you incorrect navigational data that could easily put your ship in jeopardy or peril for example by moving one buoy out of position in a channel.
Would it be beneficial for the maritime community to get together and form a maritime cyber security team that could establish strategy, policy and guidelines that would be beneficial in securing and protecting the maritime sector?  In today’s world now is the time to make this preventive move and on an individual basis all shipping companies should be self-evaluating their operations and infrastructure to ensure they are fully compliant with the latest security and protection systems to avoid future threats..


CDR Muccin, USMS is an Assistant Professor in Nautical Science/Marine Transportation at the United States Merchant Marine Academy.  The views here are her/his own and not those of the Academy, the Maritime Administration or any other branch of the United States government.


(Source: Maritime Reporter & Engineering News, July 2012 - www.marinelink.com)


Technology

MN100: MarineCFO

The Company: Founded in 1992, UA Business Solutions was a pioneer in the field of Enterprise Resource Planning (ERP) and an early Microsoft Partner. The ERP evolution

Better Turbocharger Performance, Proven Tech

Engineer wisdom: Nothing is worse as the right idea at the wrong time. But with the new ECOCHARGE Two-Stage Turbocharging System MAN D&T has reached both goals.

Rotor Sail Development Gets a €2.6 Mln Boost

Norsepower Oy Ltd., the leading provider of low maintenance, software operated, and data verified auxiliary wind propulsion systems, has been selected to receive €2.

Legal

Philippines: Sea Dispute Won't Shift Ties with China, U.S.

The Philippines' territorial dispute with China over the South China Sea has not caused Manila to rebalance diplomatic ties with either its ally, the United States,

Hanjin Shipping to Submit Self-Rescue Plan

South Korea’s Hanjin Shipping is planning on submitting a self-rescue plan to creditors this week to stave off bankruptcy by Aug. 25, reports Korea Herald quoting local media.

US Coast Guard Announces Final TWIC Rule

The U.S. Coast Guard announced Tuesday the publication of the final rule concerning Transportation Worker Identification Credential (TWIC) reader requirements. The

Shipbuilding

MN100: All American Marine, Inc.

The Company: All American Marine Inc. was founded in 1987 and specializes in the construction of custom tailored aluminum boats from 30 to 150 feet LOA. Today,

ACE Winches Bags Order from Vard

Deck machinery specialist ACE Winches said it has been awarded a spooling contract with Vard Group AS for Norway’s largest construction vessel.   The scope of work includes the spooling of two 3,

Five Minutes with Paul Switzer

Five minutes with Paul Switzer - Manager, Shipbuilding & Offshore, Viega   For readers not familiar with Viega, please give a ‘birds eye’ view, putting the company

Education/Training

South Africa Workshop Promotes Ship Energy Efficiency

An International Maritime Organization (IMO) workshop is raising awareness of the Organization’s regulatory regime dealing with improving energy efficiency and

MN100: SeaSchool

The Company: Sea School prides itself on remaining ahead of the competition with over 36 years experience in dealing with Coast Guard Licensing, Regulations, and Maritime Education.

Connected Ships, Smart Data, Cybersecurity to Feature in SHIPPINGInsight

Ship connectivity, smart data and cybersecurity will be central themes on the agenda at the fifth SHIPPINGInsight Fleet Optimization Conference & Exhibition. The

Maritime Security

Philippines: Sea Dispute Won't Shift Ties with China, U.S.

The Philippines' territorial dispute with China over the South China Sea has not caused Manila to rebalance diplomatic ties with either its ally, the United States,

USCG Evaluates Comms Equipment in Alaska

Coast Guard Research and Development Center evaluates state-of-the-art communications equipment and Next Generation Incident Command System in Alaska   At nearly 663,

TSA Boosts Maritime Security in a Big Way

Though most visible to the general public for its work at America’s airports, the U.S. Transportation Security Administration (TSA) also helps to secure the country’s

Maritime Safety

The Economics of Ship Breaking & Scrapping

Sometimes being an industry supplier offers interesting insights – your business is touched by the ups and downs of the charter market, but you are never so involved

Extreme Boat Lifts Installed in the Panama Canal

When the Republic of Panama needed lifts for a pair of its service boats, it turned to Golden Boat Lifts for the supply of two custom-designed 7,000 lb. capacity

Philippines: Sea Dispute Won't Shift Ties with China, U.S.

The Philippines' territorial dispute with China over the South China Sea has not caused Manila to rebalance diplomatic ties with either its ally, the United States,

Government Update

US Offshore Lease Sale Yields $18 Mln in High Bids

Today’s U.S. oil and gas Lease Sale 248 garnered $18,067,020 in high bids for 24 tracts covering 138,240 acres in the Western Gulf of Mexico Planning Area, announced

Another Hurdle for The Ocean Alliance

Commissioner William P. Doyle of the U.S. Federal Maritime Commission today voted in favor of requesting additional information from The Ocean Alliance parties.

Canada May Ask Far-offshore Drillers to Pay Extra

Canada may ask oil companies to contribute to the hundreds of millions of dollars or more the country has to pay to an international body if they drill far offshore,

Software Solutions

MN100: MarineCFO

The Company: Founded in 1992, UA Business Solutions was a pioneer in the field of Enterprise Resource Planning (ERP) and an early Microsoft Partner. The ERP evolution

Fugro, US Army Corps of Engineers Ink Mapping Deal

Fugro has been awarded a photogrammetric and LIDAR surveying and mapping contract by the U.S. Army Corps of Engineers, St. Louis District, Missouri. The agreement

Ocean Signal, AMI Marine Unveil E101V Float-Free EPIRB

Marine communications specialist Ocean Signal and VDR manufacturer AMI Marine will introduce a new float-free EPIRB with integrated voyage data recorder (VDR) memory

 
 
Maritime Careers / Shipboard Positions Maritime Contracts Maritime Security Navigation Offshore Oil Pod Propulsion Port Authority Salvage Ship Repair Shipbuilding / Vessel Construction
rss | archive | history | articles | privacy | contributors | top maritime news | about us | copyright | maritime magazines
maritime security news | shipbuilding news | maritime industry | shipping news | maritime reporting | workboats news | ship design | maritime business

Time taken: 0.1436 sec (7 req/sec)