A Novel Risk Assessment Methodology for SCADA Maritime Logistics Environments

Abstract

In recent years maritime logistics infrastructures are the global links among societies and economies. This challenges adversaries to intrude on the cyber-dependent ICTs by performing high-level intelligent techniques. A potential cyber-attack on such infrastructures can cause tremendous damages starting from supply chain service disruption ending up with threatening the whole human welfare. Current risk management policies embed significant limitations in terms of capturing the specific security requirements of ICTs and control/monitoring devices, such as IoT platforms, satellites and time installations, which are primary functioning for the provision of Maritime Logistics and Supply Chain (MLoSC) services. This work presents a novel risk assessment methodology capable of addressing the security particularities and specificities of the complex nature of SCADA infrastructures and Cyber-Physical Systems (CPSs) of the Maritime Logistics Industry. The methodology identifies asset vulnerabilities and threats to estimate the cyber-risks and their cascading effects within the supply chain, introducing a set of subsequent security assessment services. The utilization of these services is demonstrated via a critical, real-life SCADA scenario indicating how they can facilitate supply chain operators in comprehending the threat landscape of their infrastructures and guide them how to adopt optimal mitigation strategies to counter or eliminate their cyber-risks.

Information security governance in the electricity industry

“…With the results obtained in risk assessment, the definition of priorities and decision making are put into practice. For Martins et al (2019), You et al (2018), Kalogeraki et al (2018), the risk management involving information security is fundamental for efficient governance. Around 92.3% agree with authors, while 50% of the companies that participated in the study count on this process.…”

“…In fact, risks form an endless cycle, that is, they are always back, so, proposals for risk contention must arise in the short and long term, since every day a new method of attack or virus is created (Han et al, 2016;Kalogeraki et al, 2018). Thereby, one can state that information security governance is highly important, and thus, the organization and those responsible for files and locations where information is kept must be prepared for risks and ready for any eventuality, ensuring high level of governance (Mishra, 2015).…”

Understanding the Vulnerabilities in Digital Components of An Integrated Bridge System (IBS)

“…Maritime Logistics and Supply Chains (MLoSCs), which include ports, maritime authorities, airports, railways, energy providers, banks, maritime logistics and transport companies, act as the blood veins of global trade and economy in the modern era [9]. Unlike [9], which focuses on inland infrastructure our study explores the historical evidences that have affected the maritime operations in deep seas and the disruption has consequential effects on the inland infrastructure mainly in terms of delay or unavailability of goods at ports.…”

“…Maritime Logistics and Supply Chains (MLoSCs), which include ports, maritime authorities, airports, railways, energy providers, banks, maritime logistics and transport companies, act as the blood veins of global trade and economy in the modern era [9]. Unlike [9], which focuses on inland infrastructure our study explores the historical evidences that have affected the maritime operations in deep seas and the disruption has consequential effects on the inland infrastructure mainly in terms of delay or unavailability of goods at ports. The scope of our study is limited to collection and review of existing literature on maritime cyber security as well as on the vulnerabilities of digital components of an IBS, nonetheless, the study can be extended further to develop risk assessment frameworks for marine vessels operating in deep waters.…”

Liquefied Natural Gas as a New Hazard; Learning Processes in Norwegian Fire Brigades

“…Most reported leakages have occurred during the loading/unloading of cargo [23]. The potential for terror attacks may also represent a very serious threat that could turn LNG ships into bombs [39].…”