S-PORT: "A Secure, Collaborative Environment for the Security Management of Port Information Systems"

Abstract

The large amount of sensitive information and services that Ports' Information Systems (PIS) manage require effective security management. Existing risk assessment, business continuity and security management methodologies and standards are unable to meet the needs of the PIS responding to their complexity and criticality. Identifying these weaknesses and exploiting advanced open-source technologies and interactive software tools, we propose a secure, collaborative environment (S-Port) for the security management of PIS.

S-Port: Collaborative security management of Port Information systems

“…Assets are modeled in S-Port on a per e-service basis, as depicted in Figure 2 [24]. • Identify and assess the impact (business, legal, economic and technological) of security incidents, which is assessed by each user on a five-item scale (1)(2)(3)(4)(5). The security officer of PCIT is able to view via online forms and charts, print or download the Impact Assessment Results (see Fig.…”

“…In cooperation with the three commercial ports that participated in the project (Piraeus Port Authority, Thessaloniki Port Authority, and Municipal Port Fund of the Island of Mykonos) a novel collaborative environment for the security management of PICT systems was developed. The architecture of the S-Port platform incorporates various collaborative tools; a preliminary proposal can be found in [4]. This paper presents how the risk model of S-Port is implemented, the services offered, coupled with experimental results.…”

“…PICT systems are characterized by the large volume of information processed, complexity and distributed assets. Moreover, they are called to provide a variety of services to users, public bodies and other critical infrastructures [4]. Existing security standards, best practices, maritime regulation [5] [6] and risk assessment methodologies and tools fail to adequately address the specific needs of port authorities for a solid and effective information security management system.…”

Open Issues and Proposals in the IT Security Management of Commercial Ports: The S-PORT National Case

“…In STORM-RM a multicriteria collaborative decision making technique is applied enabling all users (internal and external) to evaluate the impacts depending upon their experience and role in their interaction with the IT system under assessment (where most of the existing risk management methodologies enable only the security team to be involved in the impact evaluation). The STORM-RM has been parameterised for the PIT-systems [14], [20] considering sectoral PIT and cyber threats, setting criteria in the impact evaluation rising from the fact that ports are CIs and assigning roles/ opinion weights according to the ports' users. The basic goal of this parameterised methodology is the collection of knowledge and experience from all port's users (i.e.…”

STORM - Collaborative Security Management Environment

“…The STORM environment has been proposed [42] as the preferred solution in order to provide security management services to the port Information systems. It will also be implemented in the S-PORT project STORM has also been selected as the appropriate architecture for policy making in collaborative environments and it will be implemented in the E.C.…”