Towards a Cyber Secure Shipboard Radar

Abstract

This paper presents a comparative cyber security resilience estimation of shipboard radars that are implemented on two oil/chemical tankers certified as SOLAS ships. The estimated radars were chosen from the same manufacturer, but belonged to different generations. The estimation was conducted by means of ships' crew interviews and computational testing of the radars using a widely deployed vulnerability scanning software tool. The identified cyber threats were analysed qualitatively in order to gain a holistic understanding of cyber risks threatening shipboard radar systems. The results obtained experimentally indicate that potential cyber threats mainly relate to maintenance of the radars' underlying operating system, suggesting the need for regulatory standardisation of periodic cyber security testing of radar systems.

A Study on Cyber Security Threats in a Shipboard Integrated Navigational System

“…In the case of the tested INS, the manufacturer of the underlying operating system will discontinue support and strongly recommend moving to next generation before the end of the current year (2019) [34]. The identified cyber threats corresponded to the previous findings with shipboard ECDIS and radar systems, indicating the same cyber risk threatening each of the navigation systems that are from different manufacturers and are installed on different types of ships [1,21].…”

“…The identified threats were analyzed qualitatively to study the source of cyber risks threatening the INS. The results obtained point out cyber threats related to weaknesses of the INS underlying operating system, suggesting a need for occasional preventive maintenance in addition to the regulatory compliance required.Recently, cybersecurity assessments of a shipboard ECDIS and a shipboard radar have been presented [1,21]. Although both the ECDIS and radar are IMO type approved and computer-based systems, they are installed as an individual equipment, providing their basic functionality.…”

“…Recently, cybersecurity assessments of a shipboard ECDIS and a shipboard radar have been presented [1,21]. Although both the ECDIS and radar are IMO type approved and computer-based systems, they are installed as an individual equipment, providing their basic functionality.…”

Towards a Cyber-Physical Range for the Integrated Navigation System (INS)

“…Some bridge equipment, such as ECDIS and RADAR require operating systems to work. Different operating systems are used, namely Linux [11], Microsoft Windows Embedded Standard 7 [105], Microsoft Windows Compact Embedded [105], Microsoft Windows 7 Professional [106], Microsoft XP Embedded [107].…”

“…As an open source chartplotter, the OpenCPN [128] which is compatible with the Bridge Command, could be used [35,145]. In the testbed, vulnerability scanners (e.g., Nessus Professional [39]) may be utilized to detect vulnerabilities of components and network [105]. An INS network may be created using network simulation tools (e.g., OPNET Network Simulator [146]) [147].…”