Improving cyber security awareness in maritime transport : A way forward
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
It is believed that maritime shipping trade has considerable impact on the global economy because 90% of international trade is carried out by maritime transportation. A merchant ship incident can not only cause casualties but also result in ports being shut down, shipping routes being blocked, other ships being damaged, and potential theft. Most ship equipment and systems are computer- and internet-based, and are susceptible to cyber threat by hackers. Cyber-attacks are increasingly common in present times; some examples are the NotPetya attack on A.P. Moller-Maersk, the infection of Australian customs service and immigration, and North Korea attacking GPS signals of vessels on the Korean coast. Unfortunately, seafarers are often unable to fathom the extent of damage that a cyber security attack can cause to a ship. The International Maritime Organization does not deal with cyber security. SOLAS, STCW, and ISPS provide security only against physical threats such as pirates. However, in accordance with resolution MSC.428 (98), the document of compliance of a shipping company requires a cyber threat management system to be included in the approved safety management system, from 1st of January, 2020. The concept of security in the maritime field is defined in SOLAS chapter XI-2, ISPS code (A/8.4, B/8, B/15), and a chapter of STCW convention, although at present it only addresses security threats related to piracy. This paper proposes a method to improve cyber security awareness in maritime transport by introducing the definition of cyber security into the ISPS code, to facilitate a change of security concepts for ships.
Abstract
It is believed that maritime shipping trade has considerable impact on the global economy because 90% of international trade is carried out by maritime transportation. A merchant ship incident can not only cause casualties but also result in ports being shut down, shipping routes being blocked, other ships being damaged, and potential theft. Most ship equipment and systems are computer- and internet-based, and are susceptible to cyber threat by hackers. Cyber-attacks are increasingly common in present times; some examples are the NotPetya attack on A.P. Moller-Maersk, the infection of Australian customs service and immigration, and North Korea attacking GPS signals of vessels on the Korean coast. Unfortunately, seafarers are often unable to fathom the extent of damage that a cyber security attack can cause to a ship. The International Maritime Organization does not deal with cyber security. SOLAS, STCW, and ISPS provide security only against physical threats such as pirates. However, in accordance with resolution MSC.428 (98), the document of compliance of a shipping company requires a cyber threat management system to be included in the approved safety management system, from 1st of January, 2020. The concept of security in the maritime field is defined in SOLAS chapter XI-2, ISPS code (A/8.4, B/8, B/15), and a chapter of STCW convention, although at present it only addresses security threats related to piracy. This paper proposes a method to improve cyber security awareness in maritime transport by introducing the definition of cyber security into the ISPS code, to facilitate a change of security concepts for ships.
참고문헌 (27)
- "Overview of the International Shipping Industry"[URL]
- "What Marine Communication Systems Are Used in the Maritime Industry"[URL]
- Elias. Bou-Harb, "On the impact of empirical attack models targeting Marine transportation", 5th IEEE International Conference on Models and Technologies for Intelligent Transportation System(MT-ITS), pp.200~205 (2017)
- "The National Impact of a West Coast Port Stoppage"[URL]
- "Maersk Shipping Reports $300M Loss Stemming from NotPetya Attack"[URL]
- J. Bhatti, "Covert control of surface vessels via counterfeitcivil GPS signals", pp.1~10 (2015), Semanticscholar
- "Maritime Industry is Easy Meat for Cyber Criminals"[URL]
- "Police Warning after Drug Traffickers' Cyber-attack"[URL]
- "North Korea interfering with GPS signals in South Korea as China relations deteriorate"[URL]
- "2016 cyber security survey in association with BIMCO"[URL]
- "The Guidelines on Cyber security onboard ships"[URL]
- International Maritime Organization (IMO), "MSC-FAL.1", Circ.3, “GUIDELINES ON MARITIME CYBER RISK MANAGEMENT,”, 2017
- International Maritime Organization (IMO), "MSC.1", Circ.1526, “INTERIM GUIDELINES ON MARITIME CYBER RISK MANAGEMENT,”, 2016
- International Maritime Organization (IMO), "MSC.428(98), “MARITIME CYBER RISK MANAGEMENT IN SAFETY MANAGEMENT SYSTEMS,”", ~ (2017)
- Measures toward enhancing maritime cybersecurity, "International Maritime Organization (IMO)", ~, pp.FAL 39 (2014), 7
- REPORT OF THE MARITIME SAFETY COMMITTEE ON ITS NINETY-FOURTH SESSION, "International Maritime Organization (IMO)", ~, pp.MSC 94 (2014), 21
- REPORT OF THE MARITIME SAFETY COMMITTEE ON ITS NINETY-FITTH SESSION, "International Maritime Organization (IMO)", ~, pp.MSC 94 (2015), 22
- GUIDELINES ON THE FACILITATION ASPECTS OF PROTECTING THE MARITIME TRANSPORT NETWORK FROM CYBERTHREATS, "International Maritime Organization (IMO)", ~, pp.FAL 40 (2016), 9
- REPORT OF THE FACILITATION COMMITTEE ON ITS FORTY-FIRST SESSION, "International Maritime Organization (IMO)", ~, pp.FAL 41 (2017), 17
- REPORT OF THE MARITIME SAFETY COMMITTEE ON ITS NINETY-EIGHTH SESSION, "International Maritime Organization (IMO)", ~, pp.MSC 98 (2017), 23
- "JWC International"[URL]
- "Aspida Cyber security"[URL]
- "Maritime Cyber Security and Big Data"[URL]
- Report of the Working Group, "International Maritime Organization (IMO)", ~, pp.MSC 96 (2017), WP.9
- International Maritime Organization (IMO), "SOLAS Convention", ~ (2017)
- IMO, "STCW Convention & Codes, Manila Amendments 2011", STCW Code Part A, 2015
- International Maritime Organization (IMO), "ISPS Code", ~ (2017)