Page 18: of Maritime Reporter Magazine (June 2023)

Cyber Security © AdobeStock/Yeti Studio

Maritime CyberInsecurity… and how the law is changing

By Gene F. Price, Frost Brown Todd he maritime industry depends on automation to nections to other supply systems.

quickly and ef? ciently perform each task required Cyber-criminals are brazenly targeting the maritime com- to load, navigate, and ultimately unload a vessel. munity, and their attacks have become proli? c. In 2020, cyber-

TOperators of these automated systems could work attacks affecting the Maritime Transportation System (MTS) for the vessel itself, the different ports the vessel visits, or the increased by 400%, with a 900% increase over the prior three logistics, maintenance, or service support companies it inter- years. Even the International Maritime Organization (IMO) acts with along the way. Many will be distant from the ship or experienced what it called a “sophisticated cyber-attack” that port, using remote technology to perform their work. Larger took down its web portal in September 2020. merchant vessels further require operational technology (OT) As indicated above, there are many possible vectors for networks to ensure a seamless, pro? table voyage. These in- infecting maritime systems. Security researchers believe that clude systems relating to ballast, stability, cargo, propulsion, electronic chart display and information systems sometimes power, navigation, and weather systems. used on MTS vessels are vulnerable to attack, which are

Ironically, these essential systems can be turned into weap- frequently linked to GPS-connected autopilots. This in turn ons against the operators. It is quite possible for a savvy and can provide access to some OT systems lacking in adequate resourced attacker to create a pollution incident, disrupt ports defenses. For instance, hackers allegedly compromised the and critical infrastructure, or cause harm to the ship itself. The steering and maneuver controls of a German-owned container complexity of these systems isn’t unique to vessels either. vessel in February 2017, and an IT team was forced to come

Sprawling networks amalgamated into a “system of systems” aboard to help the crew regain control. are used by ports, terminals, and vendors. Each can create If you were watching the automatic identi? cation system vectors for cyber-attacks in and of themselves or through con- (AIS) in 2021, you might have noticed two NATO warships 18 Maritime Reporter & Engineering News • June 2023

MR #6 (18-33).indd 18 6/5/2023 12:36:24 PM