Maritime Cyber Security: Survival at Sea

By CDR Emil A. Muccin, USMS
Wednesday, July 18, 2012

What do we think of when we hear “Survival at Sea”? 
It usually brings up visions of a ship in a perilous situation confronting some extraordinary circumstances that might be life or death.  We are now faced with an even more harrowing scenario- broaching of maritime information including specific details that might encompass company proprietary data as well as details of vessel schedules and particulars.  Many of you have heard of recent cyber-attacks including Stuxnet that deliberately disrupted critical automation systems and the just released Flame computer virus disguised as a Microsoft-built program that has caused problems for Iran’s computer networks.  These cyber-attacks speak to the need for safe and secure information systems aboard maritime vessels and the requirements for a robust cyber defense system.  Counter terrorism experts indicate that future attacks are inevitable and that the US maybe in harm’s way of collateral damage if this is picked up by unfriendly adversaries.
Most people do not realize that a majority of activities in the maritime field rely on sophisticated electronic and communication systems, and that puts them in an extremely vulnerable position and exposes them to hacking similar to nuclear plants and other areas of national infrastructures.
A recent 2011 European Union (EU) Report on Maritime Cyber Security indicates that maritime cyber security awareness is currently low to non-existent.  This report covers many of the challenges facing mariners in the 21st century and highlights trends as well as examines current initiatives while offering recommendations to address these risks.  In the global world of 2012 this report proposes maritime cyber security as an important and timely next move in the global arena of Information and Communication Technology (ICT) infrastructure protection efforts.
Based on the high complexity of ICT aboard maritime vessels it is paramount to adequately support and maintain a proper maritime cyber defense system.  One of the basic concepts should be a design methodology that incorporates security in all major maritime ICT components.
Current maritime security principally deals with physical security and it now needs to be expanded to encompass cyber security and defense.
Much of the cruise industry currently has IT department onboard vessels and the new changes in the 2010 STCW Manila Amendments have even introduced an Electro Technical Officer (ETO) designation with approved training and Certificate of Competency (COC).  On board cruise and passenger vessels an ETO is immensely important as they have huge electrical requirements and unmanned technology handling them.  An ETO can be seen as a higher version of an electrical officer.  Some areas that an ETO is responsible for include radio communications, electronic navigation equipment, telephone and satellite communications and engine room electrical equipment. 
The 2010 STCW Manila Amendments have now been in force since January 1st, 2012 and although there is no specific requirement for the carrying of an ETO, IMO has created the position with core competencies and minimum mandatory requirements.  It is plausible to believe that future STCW Amendments will make this a mandatory position on certain type and size vessels.  Prudent vessel owners and operators would be wise to fully embrace this position and commence integrating it into their crew complement.
It is interesting to note that over 50% of international trade takes place via maritime shipping and within the European Union (EU) over 40% is via maritime commerce.  With these staggering numbers it should become readily apparent that the ICT infrastructure and backbone needs to be made more secure and tamper proof.  Measures that can be deployed include developing a holistic approach to cyber based risk management, building a framework for cyber incident response, enhancing information sharing to improve incident response capabilities and improving cyber security across all infrastructures.  Much of this can be framed around proper training for all crew members as well as implementing the ETO position and ensuring and performing systems audits on all equipment and systems to verify they have the latest security and software updates.
At sea some simple items that can be done to be more cyber secure and vigilant include whenever updating ECDIS charts to verify the source, request encrypted data and digital electronic signatures.  These are simple steps that can help alleviate someone maliciously sending you incorrect navigational data that could easily put your ship in jeopardy or peril for example by moving one buoy out of position in a channel.
Would it be beneficial for the maritime community to get together and form a maritime cyber security team that could establish strategy, policy and guidelines that would be beneficial in securing and protecting the maritime sector?  In today’s world now is the time to make this preventive move and on an individual basis all shipping companies should be self-evaluating their operations and infrastructure to ensure they are fully compliant with the latest security and protection systems to avoid future threats..


CDR Muccin, USMS is an Assistant Professor in Nautical Science/Marine Transportation at the United States Merchant Marine Academy.  The views here are her/his own and not those of the Academy, the Maritime Administration or any other branch of the United States government.


(Source: Maritime Reporter & Engineering News, July 2012 - www.marinelink.com)

Maritime Reporter March 2014 Digital Edition
FREE Maritime Reporter Subscription
Latest Maritime News    rss feeds

Technology

Safety the Focus as Heavy Lifting Picks Up

Modern heavy lift capabilities are crucial for safe, efficient operations offshore Heavy lift operations offshore are an awe-inspiring feat, but an operation that

STEM: SeaPerch Underwater Robotic Championships

University of Southern Mississippi Site for Fourth National SeaPerch Challenge – Underwater Robotic Championships Excitement continues to build for the Fourth Annual National SeaPerch Challenge,

CNR: Innovation Maintains US Naval Advantages

An interview with Rear Adm. Matt Klunder, U.S. Navy Chief of Naval Research What are your near term, mid-term and long term science and technology (S&T) objectives?

Shipbuilding

Azeri Shipyard, BP Sign Vessel Construction Contract

Azeri state energy company SOCAR's shipyard and British oil major BP have signed a $378 million deal to design and build a subsea construction vessel for the Shah Deniz II gas project,

Fishing Vessels Fit with Wärtsilä’s NOx Reducer

Wärtsilä said its new NOx Reducer will be fitted to two new fishing vessels under construction at the Celiktrans yard in Turkey. The ships are owned by HB Grandi,

CMM Takes Delivery of Damen PSV for Brazil

New supplier CMM Gravity to start on long-term contract with Petrobras. CMM has taken delivery of a Damen Platform Supply Vessel 3300. The 80-meter, 3,300t deadweight

Education/Training

MSI Develops LNG Bunkering Safety Training

The Maritime Simulation Institute in Middletown, Rhode Island is developing a liquefied natural gas (LNG) bunkering safety training course. The first session, which is expected to begin in June,

C-MAR's Modern Approach to DP Training in Brazil

The modern offshore maritime industry heavily relies on different classes of DP vessels, from OSVs to Drillships and Tankers, almost all vessels serving the oil

GEIMS Maritime Training accorded highest grade from DGS

Great Eastern Institute of Maritime Studies (GEIMS) is now the first approved maritime training Institution in India to achieve the 'outstanding (A1)' grade. The

Maritime Security

CNR: Innovation Maintains US Naval Advantages

An interview with Rear Adm. Matt Klunder, U.S. Navy Chief of Naval Research What are your near term, mid-term and long term science and technology (S&T) objectives?

USS Taylor to Enter Black Sea

The U.S. Navy reported that the Oliver Hazard Perry-class frigate USS Taylor (FFG 50), homeported in Mayport, Fla., will enter the Black Sea April 22 to promote peace and stability in the region.

Unique Technologies Improve Port Security

Practical results from the SUPPORT (Security UPgrade for PORTS) project, coordinated by BMT Group Ltd. and part-funded by the European Commission’s FP7 Security

Maritime Safety

MSI Develops LNG Bunkering Safety Training

The Maritime Simulation Institute in Middletown, Rhode Island is developing a liquefied natural gas (LNG) bunkering safety training course. The first session, which is expected to begin in June,

Safety the Focus as Heavy Lifting Picks Up

Modern heavy lift capabilities are crucial for safe, efficient operations offshore Heavy lift operations offshore are an awe-inspiring feat, but an operation that

Pirates Raid Tanker off Malaysia, 3 Mariners Taken

Armed pirates raided an oil tanker off the coast of Malaysia and took three crew members with them, Malaysian maritime officials said on Wednesday, underscoring

Government Update

Korean Prosecutors Raid Home of Ferry's Owner

Prosecutors investigating the fatal sinking of a South Korean ferry have raided the home of Yoo Byung-un, the head of a family that owns the Chonghaejin Marine Co.

UK Subsidises 8 Renewable Energy Contracts

The British government on Wednesday awarded investment contracts under a new subsidy regime to eight renewable energy projects, including five offshore wind farms and three biomass plants.

China's Seizure of Japanese Ship has Pre-WWII Roots

It all began with a pre-World War II contract between China's then "ship king" and a Japanese company to lease two Chinese freighters. When the one-year lease was up in 1937,

Software Solutions

European Launch of SMS at Counter Terror Expo

Kelvin Hughes is delighted to announce that it will be displaying its new Single Mast Solution (SMS) at Counter Terror Expo 2014 from April 29-30. This will be

ESAB Releases Updated Columbus III

ESAB Welding & Cutting Products announces the release of Columbus III version 1.2, a powerful CAD/CAM programming and nesting software optimized for plasma, oxy-fuel, laser and waterjet cutting.

TEPNG Integrates AVEVA Engineering & Design

AVEVA announced that TOTAL E&P Nigeria Ltd. (TEPNG) has adopted AVEVA’s Engineering & Design solutions as part of an Integrated Engineering & Design approach. TEPNG

Insurance

China's Japanese Ship Seizure has pre-WWII Roots

It all began with a pre-World War Two contract between China's then "ship king" and a Japanese company to lease two Chinese freighters. When the one-year lease was up in 1937,

Calculating Settlement Value of a Case

It has been said that war is politics by other means.  It is probably equally true that litigation is business by other means.  On the one hand, the threat of litigation – and the resulting costs,

How to Work with Your Insurer When Experiencing a Loss

Marine insurance – just like health, automobile and homeowner’s insurance – can be a valuable safeguard in case something unexpected happens. And when something bad happens,

 
 
Maritime Careers / Shipboard Positions Maritime Contracts Maritime Standards Naval Architecture Pipelines Port Authority Ship Electronics Ship Repair Sonar Winch
rss | archive | history | articles | privacy | contributors | top maritime news | about us | copyright | maritime magazines
maritime security news | shipbuilding news | maritime industry | shipping news | maritime reporting | workboats news | ship design | maritime business

Time taken: 0.4112 sec (2 req/sec)