Ensuring Cybersecurity in Shipping: Reference to Estonian Shipowners

• Autorzy: Heering D.

Identyfikatory

DOI

10.12716/1001.14.02.01

• Języki publikacji: EN

Abstrakty

EN

Ships, ports and offshore facilities are increasingly becoming dependent on modern information and opera-tional technology. Cyber incidents on ships can create disruptions of critical systems that cause problems for the ship’s safe operation. Therefore, the shipowners must be prepared to cope with rising cyber threats. In or-der to prevent cyber incidents happening on ships and in the companies, essential steps must be taken on the management level. This paper introduces results of two surveys on cybersecurity and cyber awareness carried out in between 2017 – 2019 among the shipping companies operating in Estonia. Feedback was received from 12 shipowners out of 19 and the results show that at least 7 organisations had been the victims to different types of cyberattacks. The results indicate that shipowners are not paying enough of attention to potential cyber threats and education of their employees. Finally, the paper proposes cyber risk mitigation means for the shipowners.

Słowa kluczowe

EN

cyber security; cybersecurity in shipping; Estonian shipowners; cyber attack; cyber incidents; cyber threats; MET System in Estonia; cyber risk

• Wydawca: Faculty of Navigation, Gdynia Maritime University
• Czasopismo: TransNav : International Journal on Marine Navigation and Safety of Sea Transportation
• Rocznik: 2020
• Tom: Vol. 14, no. 2
• Strony: 271--278
• Opis fizyczny: Bibliogr. 26 poz., rys., tab.

Twórcy

autor

Heering D.

• Tallinn University of Technology, Tallinn, Estonia

Bibliografia

• 1. Allianz Global Corporate & Specialty. 2018. Safety and Shipping Review 2018: 25.
• 2. Asariotis, Regina, Mark Assaf, Hassiba Benamara, Jan Hoffmann, Anila Premti, Luisa Rodríguez, Mathis Weller, et al. 2018. Review of Maritime Transport 2018.
• 3. Bhatti, Jahshan, and Todd E. Humphreys. 2017. Hostile Control of Ships via False GPS Signals: Demonstration and Detection. Navigation, Journal of the Institute of Navigation. doi:10.1002/navi.183
• 4. BIMCO, Fairplay, ABS Advanced Solutions. 2018. Maritime Cyber Survey 2018 - the results.
• 5. BIMCO. 2017. The Guidelines on Cyber Security Onboard Ships.
• 6. Caponi, Steven L, and Kate B Belmont. 2015. Maritime Cybersecurity: A Growing Threat Goes Unanswered. Intellectual Property & Technology Law Journal; Clifton. doi:10.1093/ser/mwy024.
• 7. Clarckson PLC. 2017. Notice of cyber security incident. https://www.clarksons.com/news/notice-of-cybersecurity-incident/
• 8. DNV GL. 2016. Cyber security resilience management for ships and mobile offshore units in operation. Dnvgl-Rp0496
• 9. Dyryavyy, Yevgen. 2014. Preparing for Cyber Battleships – Electronic Chart Display and Information System Security.
• 10. Greenberg, Andy. 2018. The Untold Story of NotPetya, the Most Devastating Cyberattack in History. Wired. https://www.wired.com/story/notpetya-cyberattackukraine-russia-code-crashed-the-world/
• 11. Hunt, Tõnis, Kadi Kasepõld, and Madli Kopti. 2016. Merendussektori majandusmõju uuring. I etapp. Tallinn.
• 12. IMO. 2019a. International Convention on Standards of Training, Certification and Watchkeeping for Seafarers , 1978. http://www.imo.org/en/OurWork/HumanElement/Train ingCertification/Pages/STCW-Convention.aspx. Accessed February 20
• 13. IMO. 2019b. Maritime cyber risk. http://www.imo.org/en/OurWork/Security/Guide_to_M aritime_Security/Pages/Cyber-security.aspx. Accessed March 4
• 14. IMO. 2017. Guidelines on Maritime Cyber Risk Managemen
• 15. Johanson, Adele. 2016. No major cargo ship registered in Estonia. news.postimees.ee. https://news.postimees.ee/3855923/no-major-cargo-shipregistered-in-estonia
• 16. Johnson, Jennifer. 2018a. Cosco Shipping hit by ransomware attack. The Institute of Marine Engineering, Science and Technology. https://www.imarest.org/themarineprofessional/item/43 57-cosco-shipping-hit-by-ransomware-attack
• 17. Johnson, Jennifer. 2018b. Ports of Barcelona and San Diego hit by cyber attacks. The Marine Profesional - Online News website of The Institute of Marine Engineering, Science and Technology. https://www.imarest.org/themarineprofessional/item/44 73-ports-of-barcelona-and-san-diego-hit-by-cyberattacks
• 18. Lee, Andrew, and Hansford Wogan. 2018. Jones Walker LLP 2018 Maritime Cybersecurity Survey.
• 19. Lloyd’s Register. 2016. Deploying information and communications technology in shipping – Lloyd’s Register’s approach to assurance
• 20. Lund, Mass Soldal, Odd Sveinung Hareide, and Øyvind Jøsok. 2018. An Attack on an Integrated Navigation System. Sjøkrigsskolen 3: 149–163. doi:10.21339/2464353x.3.2.149.
• 21. Maennel, K., Mäses, S. and Maennel, O. (2018) ‘Cyber Hygiene: The Big Picture’, in Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics). doi: 10.1007/978-3-030-03638-6_18
• 22. Nguyen, Lili. 2018. Crew Connectivity 2018 Survey Results. KNect365. https://knect365.com/shipping/article/37c4946d-cae74749-98dd-a4bc1f5b11e8/crew-connectivity-2018-surveyresults
• 23. Reimer, Andres. 2014. Last large cargo ship exits Estonian flag. Postimees. https://news.postimees.ee/2779320/lastlarge-cargo-ship-exits-estonian-flag
• 24. Rizvanolli, Anisa, Ole John, and Carlos Jahn. 2018. Cyber security in shipping and navigation: a framework for ship design and compliance check 1 . Need for Cyber Security in Shipping. In ISIS-MTE.
• 25. Tam, Kimberly, and Kevin D. Jones. 2018. Maritime cybersecurity policy: the scope and impact of evolving technology on international shipping. Journal of Cyber Policy: 1–18. doi:10.1080/23738871.2018.1513053.
• 26. Thompson, Hugh, and Steve Trilling. 2018. Cyber Security Predictions: 2019 and Beyond. Symantec. https://www.symantec.com/blogs/feature-stories/cybersecurity-predictions-2019-and-beyond

Uwagi

Opracowanie rekordu ze środków MNiSW, umowa Nr 461252 w ramach programu "Społeczna odpowiedzialność nauki" - moduł: Popularyzacja nauki i promocja sportu (2020)