SIGMAR: Ensuring Integrity and Authenticity of Maritime Systems using Digital Signatures

Hemminghaus, Christian; Bauer, Jan; Wolsing, Konrad

doi:10.1109/isncc52172.2021.9615738

Cited by 5 publications

(3 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This protocol employs Ipv4 multicast with separate receiver groups dependent on the equipment type and is based on the UDP/IP stack (Hemminghaus et al, 2021a). On these networks, person-on-the-side (PotS) and person-in-the-middle (PitM) attacks are often possible, meaning an attacker can passively listen,or actively tamper or replay messages (Hemminghaus et al, 2021b). There is only one option for authentication, which is the message digest 5 (MD5) hash algorithm.…”

Section: Identification Of Cyber Vulnerabilities and Cyber-attacks Fo...mentioning

confidence: 99%

See 1 more Smart Citation

Cybersecurity risk assessment of VDR

et al. 2023

View full text Add to dashboard Cite

The voyage data recorder (VDR) is a data recording system that aims to provide all navigational, positional, communicational, sensor, control and command information for data-driven investigation of accidents onboard ships. Due to the increasing dependence on interconnected networks, cybersecurity threats are one of the most severe issues and critical problems when it comes to safeguarding sensitive information and assets. Cybersecurity issues are extremely important for the VDR, considering that modern VDRs may have internet connections for data transfer, network links to the ship's critical systems and the capacity to record potentially sensitive data. Thus, this research adopted failure modes and effects analysis (FMEA) to perform a cybersecurity risk assessment of a VDR in order to identify cyber vulnerabilities and specific cyberattacks that might be launched against the VDR. The findings of the study indicate certain cyberattacks (false information, command injection, viruses) as well as specific VDR components (data acquisition unit (DAU), remote access, playback software) that required special attention. Accordingly, preventative and control measures to improve VDR cybersecurity have been discussed in detail. This research makes a contribution significantly to the improvement of ship safety management systems, particularly in terms of cybersecurity.

show abstract

Section: Identification Of Cyber Vulnerabilities and Cyber-attacks Fo...mentioning

confidence: 99%

“…There is only one option for authentication, which is the message digest 5 (MD5) hash algorithm. However, the key of the MD5 hash can be broken easily (Hemminghaus et al, 2021b).…”

Section: Identification Of Cyber Vulnerabilities and Cyber-attacks Fo...mentioning

confidence: 99%

Cybersecurity risk assessment of VDR

et al. 2023

View full text Add to dashboard Cite

show abstract

“…A reliable and accurate position and time estimation is crucial for navigation and the situational picture in IBSs. Hence, for redundancy, the majority of vessels are equipped with two GNSS devices [10] that are supplemented by a variety of additional sensors, networked in a maritime system [11][12][13]. A typical system architecture is exemplarily shown in Figure 1, and a brief introduction to these systems with a focus on GPS integration is given below.…”

Section: Maritime Systems On Board Vesselsmentioning

confidence: 99%

Detecting Maritime GPS Spoofing Attacks Based on NMEA Sentence Integrity Monitoring

Spravil

Hemminghaus

Rechenberg

et al. 2023

JMSE

View full text Add to dashboard Cite

Today’s maritime transportation relies on global navigation satellite systems (GNSSs) for accurate navigation. The high-precision GNSS receivers on board modern vessels are often considered trustworthy. However, due to technological advances and malicious activities, this assumption is no longer always true. Numerous incidents of tampered GNSS signals have been reported. Furthermore, researchers have demonstrated that manipulations can be carried out even with inexpensive hardware and little expert knowledge, lowering the barrier for malicious attacks with far-reaching consequences. Hence, exclusive trust in GNSS is misplaced, and methods for reliable detection are urgently needed. However, many of the proposed solutions require expensive replacement of existing hardware. In this paper, therefore, we present MAritime Nmea-based Anomaly detection (MANA), a novel low-cost framework for GPS spoofing detection. MANA monitors NMEA-0183 data and advantageously combines several software-based methods. Using simulations supported by real-world experiments that generate an extensive dataset, we investigate our approach and finally evaluate its effectiveness.

show abstract