MAN Rolls Out Cyber Security Solution
MAN Energy Solutions’ after-sales division MAN PrimeServ announced a new digital addition to its retrofit portfolio to prepare shipowners for developments within the area of marine cyber security.
MAN EngineVault aims to revitalize existing engines, machinery, auxiliary systems, instrumentation and control systems that have already operated in the field for multiple years, protecting main-engine networks from online and physical cyber attacks.
Set to come as come as standard in newbuilt ME-engines from May 2020, MAN EngineVault combines software and hardware to provide firewall protection, comprehensive white listing and application-layer protection that seals engine networks off from virtually any known threat – including on-board attacks via compromised USB flash drives and similar, physical media, MAN said.
Michael Petersen – Vice President, Head of PrimeServ Copenhagen – said, “Data is shaping the future of shipping. Engine data in particular is essential to help our customers make smarter decisions and better predictions. We realize that the increase in digitization and network-based systems also increases vulnerability for cyber attacks that can potentially paralyze entire businesses. Therefore, implementing defensive barriers – also for your vessels' main engines – should be an essential element in proactive cyber security management.”
In connection with this, the IMO, SIRE and SOLAS are all set to introduce guidelines from January 1, 2021 that will require operators to address the issue.
According to MAN, protection involves three main security components:
- Full network hardening via port protection, encryption of all data received and transmitted, and advanced network segment segregation
- Critical hardware protection via the latest state-of-the-art main operating panels for the engine control and management systems
- Cutting-edge application-layer protection and extensive whitelisting that only allows MAN-certified software on your engine network.
Even in the event of a successful attack, MAN EngineVault can immediately return engine networks to their last-known safe state.
In addition to comprehensive, in-house testing, MAN PrimeServ also trialed MAN EngineVault in the field aboard the Adriatic Gas, a semi-refrigerated carrier owned by UltraShip.
“One of MAN PrimeServ’s aims is to contribute to areas where we can provide unique benefits to our customers’ business,” Petersen said. “Ultimately, MAN EngineVault optimizes the availability and efficiency of ship installations. It is our firm belief that cross-industry cooperation is essential to the success of the digital transition that the industry is currently experiencing, and in this respect we thank UltraShip for their role in helping to bring MAN EngineVault to the market.”