Knowledge management methodology for identifying threats in maritime/logistics supply chains

Abstract

The growing complexity and the heterogeneity of critical infrastructures (CIs) in multicultural maritime and logistics networks challenge existing methods and tools to dynamically respond to the frequent change of information and to the lack of efficiently sharing security knowledge over the supply chain. This fosters a semantic gap, which causes disintegration in the supply-chain workflow and attracts cyber-attackers attention. This paper proposes a knowledge management methodology and an associated tool for the maritime logistics and supply chain (MLoSC), which aims to enable the sharing of supply chain knowledge and suggests ways for identifying cyber threats over CIs. The methodology is illustrated via an indicative service (the vehicle transport service), examined in the context of three prominent maritime use cases. The proposed methodology is used to develop a knowledge base for the MLoSC using semantic web technologies.

Understanding the Vulnerabilities in Digital Components of An Integrated Bridge System (IBS)

“…In multicultural maritime and logistics networks, the biggest challenge lies in the existing methods and tools to dynamically respond to the frequent change of information as well as the lack of efficiently sharing security knowledge over the supply chain [10]. Our study is different than [10] as we have provided a broader overview of the maritime cyber security challenges associated with marine vessels in deep seas. Our work is also the first study of its kind to describe and report the historical evidences of malfunctioning of digital components of an IBS.…”

A Novel Risk Assessment Methodology for SCADA Maritime Logistics Environments

“…A structured body of cybersecurity knowledge using Knowledge Management practices to organize the knowledge [13,55].…”

“…This is achieved by adopting knowledge management practices, which analyze in-depth inter-organizational and cross-organizational key-concepts of MLoSC critical services: Key-management processes, participating business partners and operating CPSs. The aforementioned approach implements a combined technique of process-centric and asset-centric views analyzed in Reference [55]. The process-centric view, depicted in Figure 1, defines the business processes and business partners' participation and collaboration in the provision of the supply chain service whereas the cyber-asset view, shown in Figure 2, identifies the cyber-assets operation and their interrelation within the supply chain service.…”

“…Adoption of business modeling and simulation techniques to carry out different real-life cyber-attack scenarios and experiment with the results [7,55].…”

“…Involvement of all CI operators, including entities of both public and private sector participating, in order to have a clear and detailed view of SCADA cyber-risks at the asset-individual level and to identify the overall cyberdependencies across SCADA Networks and hence detecting the impact at the system level [55].…”