A critical analysis of security vulnerabilities and countermeasures in a smart ship system

It is timely to raise cyber security awareness while attacks on maritime infrastructure have not yet gained critical momentum. This paper analyses vulnerabilities in existing shipborne systems and a range of measures to protect them. It discusses Information Technology network flaws, describes issues with Industrial Control Systems, and lays out major weaknesses in the Automated Identification System, Electronic Chart Display Information System and Very Small Aperture Terminals. The countermeasures relate to the concept of “Defence-in-depth”, and describe procedural and technical solutions. The maritime sector is interconnected and exposed to cyber threats. Internet satellite connections are feasible and omnipresent on vessels, offshore platforms and even submarines. It enables services that are critical for safety and rescue operations, navigation and communication in a physically remote environment. Remote control of processes and machinery brings benefits for safety and efficiency and commercial pressure drives the development and adaptation of new technologies. These advancements include sensor fusion, augmented reality and artificial intelligence and will lead the way to the paradigm of “smart” shipping. Forecasts suggest unmanned, autonomous ships in international waters by 2035. This paper is the starting point for future research, to help mapping out the risks and protect the maritime community from cyber threats

A comprehensive analysis of smart ship systems and underlying cybersecurity issues

The maritime domain benefits greatly from advanced technology and ubiquitous connectivity. From “smart” sensors to “augmented reality”, the opportunities to save costs and improve safety are endless. The aim of this dissertation is to study the capabilities of smart ship systems in the context of Internet-of-Things and analyse the potential cybersecurity risks and challenges that smart technologies may introduce into this accelerating digital economy. The first part of this work investigates the architecture of a “Smart Ship System” and the primary subsystems, including the integrated bridge, navigation and communication systems, networking, operational systems, and sensor networks. The mapping of the connected subsystems is fundamental to understand how the entire vessel can be protected in a cyber context. The Internet of Ships is formed by connecting the smart ship systems with maritime infrastructure. The major services that the “Internet of Ships” can provide are discussed and analysed, such as terrestrial services, ship-to-shore services, marine safety and navigation services, offshore services and satellite services. These services facilitate many layers of supply-chain functions and interactions that are instrumental to the success of the maritime industry. The second part builds on the gained understanding of the issues emerging from the digital transformation of seafaring. It introduces cybersecurity concepts and how these apply to the maritime domain. Then it outlines the threat sea-scape and gives guidance for a solid security program. A “Defence-in-Depth” cyber security resilience approach is proposed to protect the smart ship systems and the Internet-of-Ships with multi-layer measures, including security policies and procedures, physical security, perimeter security, network and host security, application security and data security. The most susceptible elements of the maritime sector are people – as target and as tools – for an attack. An improved appreciation of complexity of connected maritime systems along with a heightened cybersecurity awareness can prevent catastrophic incidents and protect lives and assets. In summary, this dissertation gives a comprehensive overview of the shipborne subsystems of a Smart Ship System and the major maritime services it can provide in the context of the Internetof- Ships ecosystem. The underlying cyber security issues and challenges are analyzed and a resilience building approach is discussed to protect the smart ships with multiple layers of security measures