Towards a Maritime Cyber Range training environment

Potamos, Georgios; Peratikou, Adamantini; Stavrou, Stavros

doi:10.1109/csr51186.2021.9527904

Cited by 11 publications

(4 citation statements)

References 21 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Potamos et al [111] introduced a maritime cyber range training environment designed to simulate offensive and defensive actions in maritime cyber security. The environment included various components like navigational, information, and telecommunications systems, as well as networks and Supervisory Control and Data Acquisition (SCADA) systems.…”

Section: Related Workmentioning

confidence: 99%

A modular cyber security training programme for the maritime domain

Oruc,

Chowdhury,

Gkioulos

2024

Int. J. Inf. Secur.

View full text Add to dashboard Cite

The global maritime industry is continuing the rapid digitization of systems and dependency on advancing technology, in a trend akin to other industrial domains. One of the main issues that this integration has brought is an increased vulnerability to a growing number of cyber threats. While several security measures are being implemented to prevent or respond to cyber attacks, the human element is still one of the main weaknesses. Many of today’s cyber attacks take advantage of human personnel’s lack of awareness, which makes cyber security awareness and training activities of critical importance. Unfortunately, current research is still limited in its offerings for cyber security training specific to maritime personnel. Moreover, such training programmes for the professionals should be developed role-based in accordance with the suggestions of many credited maritime organizations. For this reason, we developed a modular cyber security training programme for the maritime domain called Maritime Cyber Security (MarCy) by implementing Critical Events Model (CEM). Then, we evaluated the MarCy programme by utilizing the Delphi technique with the participation of 19 experts from academia and industry. In this study, we offer cyber security training for seafarers and office employees in shipping companies. We proposed eleven elective modules to improve the knowledge, skills, and attitude of learners against cyber risks. The MarCy programme can be implemented by universities, shipping companies, training institutes, and governmental organizations for maritime cyber security training purposes.

show abstract

Section: Related Workmentioning

confidence: 99%

A modular cyber security training programme for the maritime domain

Oruc,

Chowdhury,

Gkioulos

2024

Int. J. Inf. Secur.

View full text Add to dashboard Cite

show abstract

“…In this paper, the work in ref. [ 13 ] is discussed to provide a clear overview of an attacker’s capabilities, concerning the vulnerabilities’ exploitation of the navigational and surveillance systems, that may change the security and safety situation in this complex environment [ 27 ]. Table 1 presents a list of recent cyberincidents in the maritime domain, identifying the attacks that were executed against specific sensors/systems, along with details regarding the infected systems and the type of attack.…”

Section: Initial Phase—cyberthreat Landscape In the Maritime Contextmentioning

confidence: 99%

Enhancing Maritime Cybersecurity through Operational Technology Sensor Data Fusion: A Comprehensive Survey and Analysis

Potamos,

Stavrou,

Stavrou

2024

Sensors

Self Cite

View full text Add to dashboard Cite

Cybersecurity is becoming an increasingly important aspect in ensuring maritime data protection and operational continuity. Ships, ports, surveillance and navigation systems, industrial technology, cargo, and logistics systems all contribute to a complex maritime environment with a significant cyberattack surface. To that aim, a wide range of cyberattacks in the maritime domain are possible, with the potential to infect vulnerable information and communication systems, compromising safety and security. The use of navigation and surveillance systems, which are considered as part of the maritime OT sensors, can improve maritime cyber situational awareness. This survey critically investigates whether the fusion of OT data, which are used to provide maritime situational awareness, may also improve the ability to detect cyberincidents in real time or near-real time. It includes a thorough analysis of the relevant literature, emphasizing RF but also other sensors, and data fusion approaches that can help improve maritime cybersecurity.

show abstract

“…Cybersecurity training conducted in a virtual training environment (VTE) offers numerous advantages that make it a preferred choice for many organizations and industry participants [6]. The VTE enables the creation of realistic simulations of cyber attacks, threats, and scenarios that can be used for training.…”

Section: Introductionmentioning

confidence: 99%

“…Conducting cybersecurity training in a virtual environment requires a specialized simulation environment to provide the various training scenarios. Acquiring simulation environments such as Cyber Range is a costly investment for any maritime company or training institution [6]. However, there are also technical solutions based on open-source programs that can have the same efficiency, but at a significantly lower cost.…”

Section: Introductionmentioning

confidence: 99%

Approach to Developing a Maritime Cybersecurity Virtual Training Environment

Nikolov

2024

ETR

View full text Add to dashboard Cite

The maritime industry is increasingly reliant on digital systems for navigation, communication, cargo management, and other critical functions. As these systems become more interconnected and technologically advanced, they also become vulnerable to cyber threats. A virtual training environment allows maritime personnel to simulate cyber attacks and practice responding to them, enhancing their preparedness and resilience against real-world cyber threats. Cyber attacks targeting maritime assets can have severe consequences, including disruptions to operations, financial losses, environmental damage, and even threats to human safety. By providing virtual training environments, maritime organizations can identify and mitigate cybersecurity risks before they escalate into actual incidents, thereby safeguarding their assets and operations. Regulatory bodies, such as the International Maritime Organization (IMO) and various national maritime authorities, have established guidelines and regulations aimed at enhancing cybersecurity in the maritime sector. Developing a virtual training environment enables maritime organizations to ensure compliance with these regulations by training personnel on cybersecurity best practices and regulatory requirements. Conducting hands-on cybersecurity training in a real-world maritime environment can be logistically challenging and costly. A virtual training environment offers a cost-effective alternative by allowing personnel to engage in realistic cybersecurity scenarios without the need for physical equipment or resources. This paper presents an approach to developing a maritime cybersecurity virtual training environment utilizing open-source software.

show abstract

Towards a Maritime Cyber Range training environment

Cited by 11 publications

References 21 publications

A modular cyber security training programme for the maritime domain

A modular cyber security training programme for the maritime domain

Enhancing Maritime Cybersecurity through Operational Technology Sensor Data Fusion: A Comprehensive Survey and Analysis

Approach to Developing a Maritime Cybersecurity Virtual Training Environment

Contact Info

Product

Resources

About