Understanding the OT cyber risk on board ship and ship stability

Abstract

In the last years cyber security has become a relevant issue for the maritime industry. The increasing digitalization in the maritime sector enables the remote communication between the ships and the headquarter company by means of information technology systems, and most of the operational technology (OT) equipment on board ships exchanges online communications data with the shore for monitoring the main functions of the ship. Failure the vessel operational technology (OT) equipment on board ship, like the ECDIS map for navigation, the steering systems and the main engine controls, has serious consequences. In this article we discussed the vulnerability of different OT equipments on board ship, and we highlighted how the hacker can inject some malware that affects the hull stress monitoring systems (HSMS), or can easy manipulate the EDI messaging text of the load plan (there is still a significant lack of security in the validation of message integrity) that finally leads to detrimental effects on the the ship's stability.

Towards modeling of naval systems interdependencies for cybersecurity

“…Communication systems (5) provide Internet, from satellite connection (SATCOM) or broadband cellular network relay (3G, 4G, 5G) in coastal navigation, to the entertainment systems (3.1) for crew members and passengers. Also, third party systems (3.2) with desktop applications allow distant monitoring, data collection, maintenance, safety and security of platform systems (1) and bridge systems (2).…”

“…To ensure proper missions accomplishment, the operation status of vessels must be provided in real-time by controlling and monitoring multiple interdependent systems, defined as multilayered networks [1] of interacting systems and components, structured in functional blocks. These vessel systems are characterized by antagonistic features in terms of system design and operation, performance, reliability, and risk management requirements [2]. Often relying on Programmable Logical Controllers (PLC), those systems support navigation and communications safety, electricity, propulsion, and all basic amenities to sustain life on board, using Cyber Physical Systems (CPS).…”