Cyber-physical security for ports infrastructure

Abstract

the progression of cyber-physical systems in the wider maritime industry and port domains, along with their rising cybersecurity vulnerabilities.Existing and applicable industry and government standards and mandates associated with cybersecurity attempt to impose regulatory compliance and increase asset cybersecurity integrity with reduced emphasis however, in the existing OT (Operational Technology) components and systems. The use of security risk assessment tools and processes that are used in other industrial sectors, such as the Security Risk Assessment (SRA) and the Bow Tie Analysis methods, can support the evaluation of IT/OT infrastructure for cyber-physical security susceptibilities and then assign suitable reactive measures. The implementation of cybersecurity safeguards that arise through the implementation of the MITRE ATT&CK Threat Model can enhance the cybersecurity posture of those assets that support the logistics chain, assuming that they are intermittently adapted following evaluations for their effectiveness and suitability. Finally, the improvement of stakeholder communication and cyber-awareness along with the increase in cyber-physical security resiliency can further be aided by the effective convergence of the segregated cyber and physical security elements of waterside or landside-based IT/OT infrastructure.

Comprehensive Analysis of Maritime Cybersecurity Landscape Based on the NIST CSF v2.0

“…This is adeptly discussed by Poyhonen et al [51], who proposed a risk assessment methodology tailored to smart port operations while shining a light on the inherent cyber threats and defensive measures in the evolving maritime environment. Similarly, Progoulakis et al [52] underlined the emerging vulnerabilities due to the integration of IT and OT systems in global ports, championing the use of tools such as security risk assessment and bow-tie analysis to manage these cyber-physical security susceptibilities while emphasising the importance of regulatory compliance and continuous evaluation. Additionally, a research paper on the Maritime Transportation System highlights the use of empirical data and expert insights to develop a risk assessment approach, primarily focusing on understanding potential financial losses due to cyberattacks on port IT and OT systems [53].…”

Use of the geospatial technologies and its implications in the maritime transport and logistics

“…This includes the communication systems used to remotely operate and monitor the vessel, as well as any other systems or devices that may interact with the ASV. Ensuring the security of these systems is critical to preventing attacks that could compromise the ASV [50].…”

Кібербезпека В Сфері Морського Сполучення

“…A cyber-physical security analysis was performed on port facilities, which included using the Bow Tie Analysis (BTA) technique on a marine asset. [2] Found that BTA is useful for assessing cyber-physical security threats in the marine industry, especially in navigational communication systems.…”