Assessing Cyber Challenges of Maritime Navigation

Androjna, Andrej; Brčko, Tanja; Pavić, Ivica; Greidanus, H.

doi:10.3390/jmse8100776

Cited by 49 publications

(29 citation statements)

References 40 publications

(59 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…GPS and navigational technologies, which are actively used in the maritime sector, are specific goals of various cyberattack that aim to exploit design flaws to destabilise services that depend on these technologies [29]. Such attacks pose medium to high risks because, in addition to data and service protocol violations, there is the possibility of physical damage.…”

Section: Global Position Systemmentioning

confidence: 99%

Cybersecurity Challenges in the Maritime Sector

Akpan

Bendiab

Shiaeles

et al. 2022

Network

View full text Add to dashboard Cite

Cyberattacks have been rapidly increasing over the years, resulting to big financial losses to businesses for recovery, regulatory sanctions, as well as collateral damages, such as reputation and trust. In this respect, the maritime sector, which until now was considered safe due to the lack of Internet connectivity and the isolated nature of ships in the sea, is showing a 900% increase in cybersecurity breaches on operational technology as it enters the digital era. Although some research is being conducted in this area, maritime cybersecurity has not been deeply investigated. Hence, this paper provides a close investigation of the landscape of cybersecurity in the maritime sector with the aim of highlighting security problems and challenges. First, it explores the systems available on ships that could be targeted by attackers, their possible vulnerabilities that an attacker could exploit, the consequences if the system is accessed, and actual incidents. Then, it describes and analyses possible mitigation actions that can be utilised in advance to prevent such attacks. Finally, several challenges and open problems are discussed for future research.

show abstract

Section: Global Position Systemmentioning

confidence: 99%

Cybersecurity Challenges in the Maritime Sector

Akpan

Bendiab

Shiaeles

et al. 2022

Network

View full text Add to dashboard Cite

show abstract

“…Competing signals can be transmitted deliberately to prevent accurate reception of data from satellites, thus jamming communication devices. Spoofing introduces false signals, thereby compromising the reliability of navigational equipment used (Androjna et al 2020). These types of signal interference have the potential to shift the course of navigation, obfuscation, theft, damage or denial of service, which have far greater consequences on autonomous ships than in conventional ones (Androjna et al 2020;Jones et al 2016).…”

Section: Threats To Navigational Systemsmentioning

confidence: 99%

Cyber security risk assessment in autonomous shipping

et al. 2022

View full text Add to dashboard Cite

Autonomous ships would require higher cyber-physical interaction in comparison with traditional shipping operations, thus increasing the vulnerabilities associated with cyber security. The increasing complexity surrounding the innate characteristics of the shipping industry makes it challenging to build a resilient framework for ensuring cyber security. This study proposes a multi-criteria decision-making (MCDM) framework for assessing cyber security risk in the autonomous shipping context. The research was validated through surveying subject matter experts, system designers and seafarers. Different types of equipment and systems are ranked based on their perceived vulnerability to cyber threats. Survey data from 28 subject matter experts are collected and analysed through the Bayesian best-worst method (BWM). At system level, the results indicate that navigational systems are the most vulnerable to potential cyber threats, while propulsion systems are the least vulnerable element in the context of future autonomous shipping operations. On a subsystem level, the three most vulnerable parts are Global Navigation Satellite System (GNSS), Electronic Chart Display and Information System (ECDIS) and the communication devices on shore control centres (SCC), while the least vulnerable parts are engine controls, SCC integration platforms and cargo handling at ports.

show abstract

“…Having in mind the broader infrastructure of the maritime supply chains, the various assets involved and their related challenges and threats must be identified. In [ 16 ], by analyzing available resources, a shift in mind-set is proved as essential to direct more attention and resources toward cybersecurity. The need for multiple positioning, navigation, and timing (PNT) systems onboard maritime vessels to complement GPS-only navigation is identified.…”

Section: Related Workmentioning

confidence: 99%

An Adaptive, Situation-Based Risk Assessment and Security Enforcement Framework for the Maritime Sector

Grigoriadis

Laborde

Verdier

et al. 2021

Sensors

View full text Add to dashboard Cite

Maritime processes involve actors and systems that continuously change their underlying environment, location and threat exposure. Thus, risk mitigation requires a dynamic risk assessment process, coupled with an adaptive, event driven security enforcement mechanism, to efficiently deal with dynamically evolving risks in a cost efficient manner. In this paper, we propose an adaptive security framework that covers both situational risk assessment and situational driven security policy deployment. We extend MITIGATE, a maritime-specific risk assessment methodology, to capture situations in the risk assessment process and thus produce fine-grained and situation-specific, dynamic risk estimations. Then, we integrate DynSMAUG, a situation-driven security management system, to enforce adaptive security policies that dynamically implement security controls specific to each situation. To validate the proposed framework, we test it based on maritime cargo transfer service. We utilize various maritime specific and generic systems employed during cargo transfer, to produce dynamic risks for various situations. Our results show that the proposed framework can effectively assess dynamic risks per situation and automate the enforcement of adaptive security controls per situation. This is an important improvement in contrast to static and situation-agnostic risk assessment frameworks, where security controls always default to worst-case risks, with a consequent impact on the cost and the applicability of proper security controls.

show abstract

Assessing Cyber Challenges of Maritime Navigation

Cited by 49 publications

References 40 publications

Cybersecurity Challenges in the Maritime Sector

Cybersecurity Challenges in the Maritime Sector

Cyber security risk assessment in autonomous shipping

An Adaptive, Situation-Based Risk Assessment and Security Enforcement Framework for the Maritime Sector

Contact Info

Product

Resources

About