Understanding the Vulnerabilities in Digital Components of An Integrated Bridge System (IBS)

Awan, Malik Shahzad Kaleem; Ghamdi, Mohammed A. Al

doi:10.3390/jmse7100350

Cited by 22 publications

(9 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Silverajan et al in Reference [25] explored security issues and cyber attacks targeting systems of smart ships. Awan et al in Reference [26] have analyzed 59 documented accidents to better understand the vulnerabilities of Integrated Bridge System (IBS) components. Svilicic et al in Reference [27] present a study on the cyber security resilience of a shipboard Integrated Navigational System (INS) installed on a RoPax ship engaged in international trade.…”

Section: Related Workmentioning

confidence: 99%

Managing Cyber Security Risks of the Cyber-Enabled Ship

Kavallieratos

Katsikas

2020

JMSE

View full text Add to dashboard Cite

One aspect of the digital transformation process in the shipping industry, a process often referred to as Shipping 4.0, is the increased digitization of on board systems that goes along with increased automation in and autonomy of the vessel. This is happening by integrating Information Technology with Operation Technology systems that results in Cyber Physical Systems on which the safe operations and sailing of contemporary and future vessels depend. Unavoidably, such highly interconnected and interdependent systems increase the exposure of the vessel’s digital infrastructure to cyber attacks and cyber security risks. In this paper, we leverage the STRIDE and DREAD methodologies to qualitatively and quantitatively assess the cyber risk of Cyber Physical Systems on board digitalized contemporary and future ships. Further, we propose appropriate cyber security baseline controls to mitigate such risks, by applying a systematic approach using a set of criteria that take into account the security requirements; the cyber risks; the possible attacks; and the possibly already existing controls, to select from the list of controls provided in the Industrial Control Systems (ICS) overlay of the NIST Guide to ICS Security. The results are expected to support the decision-making and the design of a security architecture for the cyber-enabled ship.

show abstract

Section: Related Workmentioning

confidence: 99%

Managing Cyber Security Risks of the Cyber-Enabled Ship

Kavallieratos

Katsikas

2020

JMSE

View full text Add to dashboard Cite

show abstract

“…In addition, Awan and Ghamdi [23] collected and analyzed cases of ship safety accidents that could affect cybersecurity. For instance, in the sinking of a coal carrier in 2004, the electronic navigational chart (ENC) was not up to date and failed to display the shallow water depth.…”

Section: Mitre Attandck-based Ship Cyberattack Analysismentioning

confidence: 99%

Cyberattack Models for Ship Equipment Based on the MITRE ATT&CK Framework

Jo¹,

Choi²,

You³

et al. 2022

Sensors

View full text Add to dashboard Cite

Cybersecurity is important on ships that use information and communication technology. On such ships, the work, control, and sensor systems are connected for steering, navigation, and cargo management inside the hull, and a cyberattack can have physical consequences such as sinking and crashing. Research on ship cybersecurity is a new challenge, and related studies are lacking. Cyberattack models can provide better insight. With this study, we aim to introduce a cyberattack analysis method based on the MITRE ATT&CK framework so that a cyberattack model for ships can be established. In addition, we identify the characteristics of the attack phase by analyzing cases of hacking and vulnerability research for ship systems using tactics, techniques, and procedures, and suggest the minimum measures essential for defense. Using the ship cyberattack model, we aim to identify the characteristics of the systems used for ship navigation, communication, and control; provide an understanding of the threats and vulnerabilities; and suggest mitigation measures through the proposed model. We believe the results of this study could guide future research.

show abstract

“…Other potential cyber risks onboard, such as crew awareness, cybersecurity procedures, and unauthorized access were also investigated in [10]. Cyber threats and vulnerabilities in the Integrated Bridge System (IBS) are presented in [40]. Several bridge components including AIS, Ship Security Alert System (SSAS), anemometer, echo-sounder, speed log, and such are described briefly.…”

Section: Conflicts Of Interestmentioning

confidence: 99%

Towards a Cyber-Physical Range for the Integrated Navigation System (INS)

Oruc

Gkioulos

Katsikas

2022

JMSE

View full text Add to dashboard Cite

The e-navigation concept was introduced by the IMO to enhance berth-to-berth navigation towards enhancing environmental protection, and safety and security at sea by leveraging technological advancements. Even though a number of e-navigation testbeds including some recognized by the IALA exist, they pertain to parts only of the Integrated Navigation System (INS) concept. Moreover, existing e-navigation and bridge testbeds do not have a cybersecurity testing functionality, therefore they cannot be used for assessing the cybersecurity posture of the INS. With cybersecurity concerns on the rise in the maritime domain, it is important to provide such capability. In this paper we review existing bridge testbeds, IMO regulations, and international standards, to first define a reference architecture for the INS and then to develop design specifications for an INS Cyber-Physical Range, i.e., an INS testbed with cybersecurity testing functionality.

show abstract

Understanding the Vulnerabilities in Digital Components of An Integrated Bridge System (IBS)

Cited by 22 publications

References 8 publications

Managing Cyber Security Risks of the Cyber-Enabled Ship

Managing Cyber Security Risks of the Cyber-Enabled Ship

Cyberattack Models for Ship Equipment Based on the MITRE ATT&CK Framework

Towards a Cyber-Physical Range for the Integrated Navigation System (INS)

Contact Info

Product

Resources

About