The Cyber-MAR Project: First Results and Perspectives on the Use of Hybrid Cyber Ranges for Port Cyber Risk Assessment

Jacq, Olivier; Salazar, Pablo Gimenez; Parasuraman, Kamban; Kuusijärvi, Jarkko; Gkaniatsou, Andriana; Latsa, Evangelia; Amditis, Angelos

doi:10.1109/csr51186.2021.9527968

Cited by 9 publications

(9 citation statements)

References 6 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…According to our research, the extant literature on FGAC has to some degree been mainly focused on the technical implementation and not so much on the surrounding context such as viable business cases. Therefore, we propose that more research should be conducted on the non-technical perspective and especially in realistic use cases such as the Cyber-MAR project (Jacq et al, 2021). Our proposed framework provides a template on how organizations can enable FGAC in information sharing.…”

Section: Discussionmentioning

confidence: 99%

See 1 more Smart Citation

Enabling fine-grained access control in information sharing with structured data formats

Niskanen

Salonen

2023

eccws

View full text Add to dashboard Cite

The ongoing need for societal and industrial digital transformation requires rapidly expanding networks of interconnected organizations and dictates an increasing role for cybersecurity in information sharing. A typical setup consists of multiple stakeholders working closely together and needing efficient channels for sharing relevant information in a secure manner. This is especially prevalent with complex modern supply chains and critical information infrastructures. They often comprise of numerous co-operating organizations, people and in some cases smart devices having different levels of access to a variety of information. Granular access control plays a vital role when distributing information efficiently between stakeholders without revealing sensitive pieces of data to unwanted third parties. This article presents a novel framework for enabling fine-grained access control to share information efficiently and securely in these situations. Our motivation and use case for the framework originates from the secure sharing of cyber incident information in the maritime logistics industry. We present a novel solution to this problem by developing an information sharing platform and a meta-model, demonstrated using an implementation with structured JSON data formats, while supporting previously researched attribute-based encryption schemes. The proposed framework provides a broader context to the fine-grained data access control challenge in addition to the technical implementation.

show abstract

Section: Discussionmentioning

confidence: 99%

“…An increasing number of complex cyber-attacks has affected the maritime sector, which is somewhat typical for modern industries relying heavily on cyber-connected systems. In order to combat this, Jacq et al (2021) have identified a need for increasing the cyber risk awareness of the industry's smart ports.…”

Section: Introductionmentioning

confidence: 99%

Enabling fine-grained access control in information sharing with structured data formats

Niskanen

Salonen

2023

eccws

View full text Add to dashboard Cite

show abstract

“…Olivier et al [66] presented a high-end hybrid cyber range for port cyber risks awareness and training, focusing on a specific port use-case and achieved results. The Cyber-MAR project demonstrated the topology of a port's critical infrastructure with real cyber-physical systems and devices.…”

Section: Related Workmentioning

confidence: 99%

A modular cyber security training programme for the maritime domain

Oruc,

Chowdhury,

Gkioulos

2024

Int. J. Inf. Secur.

View full text Add to dashboard Cite

The global maritime industry is continuing the rapid digitization of systems and dependency on advancing technology, in a trend akin to other industrial domains. One of the main issues that this integration has brought is an increased vulnerability to a growing number of cyber threats. While several security measures are being implemented to prevent or respond to cyber attacks, the human element is still one of the main weaknesses. Many of today’s cyber attacks take advantage of human personnel’s lack of awareness, which makes cyber security awareness and training activities of critical importance. Unfortunately, current research is still limited in its offerings for cyber security training specific to maritime personnel. Moreover, such training programmes for the professionals should be developed role-based in accordance with the suggestions of many credited maritime organizations. For this reason, we developed a modular cyber security training programme for the maritime domain called Maritime Cyber Security (MarCy) by implementing Critical Events Model (CEM). Then, we evaluated the MarCy programme by utilizing the Delphi technique with the participation of 19 experts from academia and industry. In this study, we offer cyber security training for seafarers and office employees in shipping companies. We proposed eleven elective modules to improve the knowledge, skills, and attitude of learners against cyber risks. The MarCy programme can be implemented by universities, shipping companies, training institutes, and governmental organizations for maritime cyber security training purposes.

show abstract

“…Usefulness of industry 4.0 technologies in smart ports Port issues face not only opportunities, but also problems and obstacles due to cyberattacks that limit the growth of these important areas (51). Ports are key supports within the logistics value chain, which is why it is essential to assess and avoid IT disruptions in operations involving risks (52). Cyber-security is one of the biggest challenges in this industry, where container management and system hacking lead to hiding processes as fundamental as inspections (53).…”

Section: Technologies Used In Smart Portsmentioning

confidence: 99%

Utilidad de las tecnologías de las industria 4.0 en los smart ports

Giraldo,

Castaño,

López

et al. 2024

inycomp

View full text Add to dashboard Cite

Los Smart Ports (Puertos Inteligentes) se enfocan en desarrollar procesos más competitivos bajo criterios de costos, tiempos e información alrededor de toda la cadena de suministro con ayuda de las tecnologías pertenecientes a la industria 4.0. La presente investigación, tiene como objetivo analizar el uso de tecnologías emergentes empleadas en Smart Ports mediante consultas de análisis bibliométrico y revisión de literatura de la base de datos Scopus, donde se categorizaron por temáticas comunes. Se concluye el auge y desarrollo de la adopción de tecnologías emergentes en los puertos, principalmente el Internet de las Cosas (IoT), Big Data, Blockchain e Inteligencia Artificial; estas tecnologías han ayudado a que los procesos logísticos portuarios sean seguros y eficientes. También se identifica un énfasis por aportar a procesos de sostenibilidad ambiental, garantizando mediante tecnologías acciones de mejora en las terminales portuarias. Los principales ejemplos que están utilizando tecnologías de industria 4.0 en puertos se ubican en Shanghai, Huanghua, Rotterdam, Hamburgo, Barcelona, Salerno, Rávena, Vancouver y los Ángeles.

show abstract

The Cyber-MAR Project: First Results and Perspectives on the Use of Hybrid Cyber Ranges for Port Cyber Risk Assessment

Cited by 9 publications

References 6 publications

Enabling fine-grained access control in information sharing with structured data formats

Enabling fine-grained access control in information sharing with structured data formats

A modular cyber security training programme for the maritime domain

Utilidad de las tecnologías de las industria 4.0 en los smart ports

Contact Info

Product

Resources

About