Totem Plus
-
- "A Maritime Disaster Waiting to Happen" Maritime Reporter, Jun 2019 #15
Since the founding in 2016, cyber defence company Naval Dome has won awards for its Endpoint cyber defense system and achieved the highest level of security certification from classification society DNV GL, helping to protect merchant ships, cruise ships and yachts from cyber-attack.
In 2019, Naval Dome optimized Endpoint with a “Dashboard” App, providing maritime users with a clear picture of the cyber status of all critical systems on board the ship, designed to allow users to quickly determine which systems are protected and those that are susceptible to unauthorized penetration.The importance of securing a ship’s navigation, bridge and machinery systems from the nefarious activities of the cyber-criminal cannot be under played, especially in an age characterized by a rise in religious, environmental and political activism/terrorism.
If a commercial ship ceded control to outside forces, the ramifications far transcend damage to the ship and crew, and in fact global trade can be disrupted, economies affected, marine environments and eco-systems heavily polluted in addition to human casualties..
“The maritime industry is just not prepared for terrorists to use ships in the same way that they were able to infiltrate the civil aviation sector,” said Itai Sela, Naval Dome’s CEO. “As a $4 trillion industry responsible for transporting 80% of the world’s energy, commodities and goods, any activity that disrupts global trade will have far reaching consequences.”
There have already been well documented incidents where shipping companies have been hacked but it is less known that the navigational equipment aboard a fleet of 15 tankers has also been hacked.
“It is easy to understand why shipping is now in the cross-hair of the terrorist,” said Sela. “The easiest way for hackers to penetrate a ship is to attack systems at the ship manager or original equipment manufacturer’s head office. All a hacker has to do is infiltrate these systems and wait until some someone sends an infected email to someone onboard ship – the attack is delivered. It spreads. It’s autonomous.”
Once ship systems have been infected, it’s open season for the criminal/activist terrorist. Navigational systems can be controlled, resulting in the vessel being shown in a false position, or radar targets being hidden or corrupted, leaving the ship vulnerable to grounding, collision. In extreme cases, the whole integrated bridge system could be disabled, passing control of the ship to an external computer.
Machinery systems can be accessed. Valves remotely closed or opened to render the vessel motionless, cause pollution or to raise system pressures and temperatures to result, in the case of tankers or chemical carriers, in explosion.It doesn’t end there.
Itai Sela, Naval Dome’s CEO. Photo: Naval DomeShip’s fire-fighting and safety systems can be attacked, as can the processing systems onboard rigs, platform, FPSOs, and drilling ships.
“Cruiseships are an especially attractive target,” suggests Sela. “We have already seen the global response to the Viking Sky’s engine failure, which resulted in complete loss of power and the ship drifting in harsh Norwegian seas. While I am not suggesting in anyway that this was a cyber event, imagine the consequences and the global response if it was.”Naval Dome has demonstrated the maritime industry’s nightmare security scenario with a series of cyber penetration tests on systems in common use aboard tankers, containerships and cruise ships.
Test results revealed with startling simplicity the ease with which terrorists can access and over-ride ship critical systems.
With the permission and under the supervision of system manufacturers and owners, Naval Dome’s cyber engineering team hacked into live, in-operation systems used to control a ships’ navigation, radar, engines, pumps and machinery.
While the test ships and their systems were not in any danger, Naval Dome was able to shift the vessel’s reported position and mislead the radar display. Another attack resulted in machinery being disabled, signals to fuel and ballast pumps being over-ridden and steering gear controls manipulated.
Commenting on the first wave of penetration tests, on the ship’s Electronic Chart Display and Information System (ECDIS), Asaf Shefi, Naval Dome's CTO, the former Head of the Israeli Naval C4I and Cyber Defense Unit, says: "We designed the attack to alter the vessel’s position at a critical point during an intended voyage - during night-time passage through a narrow canal. During the attack, the system's display looked normal, but it was deceiving the Officer of the Watch. The actual situation was completely different to the one on screen.”
According to Shefi, the Naval Dome hack was able to alter draft/water depth details in line with the spurious position data displayed on screen.
In a second wave, the test ship’s radar was hit. While the radar is widely considered an impregnable, standalone system, Naval Dome's team used the local Ethernet Switch Interface - which connects the radar to the ECDIS, Bridge Alert System and Voyage Data Recorder – to hack the system.
“The impact of this controlled attack was quite frightening,” says Shefi. "We succeeded in eliminating radar targets, simply deleting them from the screen. At the same time, the system display showed that the radar was working perfectly, including detection thresholds, which were presented on the radar as perfectly normal.”A third controlled attack was performed on the Machinery Control System (MCS), which was connected to the Voyage Data Recorder. In this case, Naval Dome's team chose to penetrate the system using an infected USB stick placed in an inlet/socket.
"Once we connected to the vessel's MCS, the virus file ran itself and started to change the functionality of auxiliary systems. The first target was the ballast system and the effects were startling. The display was presented as perfectly normal, while the valves and pumps were disrupted and stopped working. We could have misled all the auxiliary systems controlled by the MCS, including air-conditioning, generators, fuel systems and more.”
Shefi furthers that the virus infecting ship systems can also be unwittingly transferred by the system manufacturer.
“As manufacturers themselves can be targeted, when they take control of onboard computers to carry out diagnostics or perform software upgrades, they can inadvertently open the gate to a cyber-attack and infect other PC-based systems onboard the ship. Our solution prevents this from happening.”
One company that has been quick to respond to the threat is bridge systems supplier Totem Plus. Under an agreement inked in February, Naval Dome licensed the OEM to integrate its software with their hard drives across several hundred systems in the Totem Plus portfolio. The arrangement provides the highest level of cyber protection at the system build stage, prior to shipment to end-users. “The Totem Plus systems leave the factory fully cyber protected by Naval Dome,” said Sela.
-
)
April 2024 - Marine News page: 23the rule new projects might be set within historical vessel routes, con? icting with existing maritime uses and users. The USCG’s fairway proposal is based on BOEM’s exist- ing WEA projections (contained in the December Notice). The 18 proposed fairways, traf? c separation schemes and precautionary
-
)
April 2024 - Marine News page: 12Insights century technology in 2024.” That’s an area of focus. industry. We want to do that in a realistic way. These are We also want to make sure that we have workers on our great careers where a hardworking person can make a six- vessels who are ? t for duty. One of the things that we have ? gure
-
)
February 2024 - Maritime Reporter and Engineering News page: 10Back to the Drawing Board Let’s Set Some Standards for Micro Cargo By Rik van Hemmen s zero carbon cargo efforts are progressing, it is becoming more apparent that the lowest hanging fruit is in the last few miles. This is where a large amount of carbon is expended in delivering small A parcels to
-
)
February 2024 - Maritime Reporter and Engineering News page: 2NO.2 / VOL. 86 / FEBRUARY 2024 26 Photo on this page and on the Cover: Courtesy ARC 22 Marine Power: The Future is Now Departments Matt Hart, Wabtec Corporation, offers insights on how the megatrends of decar- bonization, energy transition and autonomy drive engine innovations. 4 Authors & Contributors By
-
)
January 2024 - Marine Technology Reporter page: 59All images courtesy Oceanology International participants and to deliver another packed three days of exhi- Oi24 Events and Features bition and conference activity, features, workshops and one- Oceanology International is able to capitalize on the advan- to-one meetings.” tages of ExCeL’s expansive 18
-
)
January 2024 - Marine Technology Reporter page: 56FLOATING OFFSHORE WIND GAZELLE WIND POWER We’re already working on the pre-FEED, and now we’re go- clude 70 turbines of 15MW each, and has preselected Gazelle ing to be working on the engineering portion. Our main goal as one of the providers for the offshore wind platform. So, is to prove the concept
-
)
January 2024 - Marine Technology Reporter page: 19the back that we call wave channels. They do a number of of operation, you’re in trouble. We’ve seen some big storms somewhat nuanced and complex hydrodynamic things, but this past year, we have some great videos on YouTube from basically they cause the machine to move a lot more in waves. cameras on
-
)
January 2024 - Marine Technology Reporter page: 16INSIGHTS SCIENCE RESEARCH MANAGEMENT Map of NOC vessel operations from April 2022 – March 2023. Green = RRS James Cook, Blue = RRS Discovery Credit: NOC bon output, with an ambition of reaching net zero by 2040. MFP to be able to undertake the same project management and international collaboration.
-
)
January 2024 - Maritime Reporter and Engineering News page: 28MEET THE CTO emission target. “We decided it’s better to have 3 vessels with dual For the largest ships in the CMB fuel than to have one zero-emission vessel [with ? eet, the focus is on ammonia, as it is no market]. [A zero-emission vessel is] often a cheapest from a production point of white elephant
-
)
January 2024 - Maritime Reporter and Engineering News page: 26MEET THE CTO has grown to 90 people across several something that is scalable.” fuels, resulting in an overall reduction world regions, and this technical talent Next the CMB.TECH team targeted of 65% of traditional fuel consump- base is central to Campe completing the Crew Transfer Vessel (CTV) used
-
)
January 2024 - Maritime Reporter and Engineering News page: 24MEET THE CTO s maritime navigates a ment track record and business sense to tasked with future proo? ng a ? eet had future premised on meeting deliver. “So three weeks later, I started never, in fact, sailed onboard a com- and beating decarboniza- here in Antwerp.” mercial ship. Ation targets
-
)
January 2024 - Maritime Reporter and Engineering News page: 22MEET THE CTO ROY CAMPE In 2015 Belgian shipowner CMB tapped industry outsider Roy Campe for a simple task: future proof the ? eet. Campe, who came to the table with a background in aerospace plus air and ? uid dynamics design, took the mandate and ran with it, building a team and delivering world
-
)
November 2023 - Marine Technology Reporter page: 32SONAR TECHNOLOGIES DAWN MASSA STANCAVISH, MASSA ue to grow that process and have quality products throughout. I know your business is driven by multiple mar- kets – defense, offshore energy and science –but let’s start on the defense business as it’s most A big part of that equation is technology
-
)
November 2023 - Marine Technology Reporter page: 20EYE ON THE NAVY NATO GAINS EXPERIENCE WITH UNMANNED SYSTEMS All photos courtesy NATO By Edward Lundquist allies and partners have taken Messenger is in its second year. Both are conducted at the Navy advantage of recent demon- Operational Experimentation Centre in Tróia, one of two Por- NATO strations
-
)
December 2023 - Maritime Reporter and Engineering News page: 39EAGLE VELLORE EAGLE VELLORE AET delivered its newest vessel, the ? rst of three Very Large Crude Carrier (VLCC) powered by dual-fuel lique? ed natural gas Photo courtesy AET (LNG) engines, on long-term charter to Shell Tankers (Singapore) Private Limited. The Malaysian-? agged Eagle Vellore was
-
)
December 2023 - Maritime Reporter and Engineering News page: 38G REAT of BERLIN EXPRESS HIPS S 2023 Photo courtesy Hapag-LLoyd BERLIN EXPRESS SERI DAMAI Hapag-Lloyd welcomed Berlin Express into its ? eet, the MISC welcomed two of its latest new generation of Lique- ? rst ship of its new Hamburg Express class and the ? rst of a ? ed Natural Gas (LNG) carriers
-
)
December 2023 - Maritime Reporter and Engineering News page: 30G REAT of HIPS S SHIP OWNER/OPERATOR Ship Owner Mitsui O.S.K. Lines, Ltd. 2023 Shipbuilder Oshima Shipbuilding LOA 235m Breadth 43m Deadweight About 100,422 tons Flag/Port of registry Japan/Port of Noshiro WIND CHALLENGER SPECIFICATIONS Height Up to about 53 m (4-tier) Width About 15 m Sail
-
)
December 2023 - Maritime Reporter and Engineering News page: 29The Wabtec 16V250MDC, EPA Tier 4, IMO Tier III marine diesel engines NSMV Main Particulars Length 525 ft. (160.05m) Breadth 88.5 ft. (27m) Depth 55.1 ft. (16.8m) Draft, design 21.4 ft. (6.5m) Range 10,000+ miles @ 18 knots Propulsion Diesel Electric Engines 4 x Wabtec Total installed power 16
-
)
December 2023 - Maritime Reporter and Engineering News page: 28G REAT of HIPS S 2023 NSMV 1: EM mpire State VII is the ? rst in a series of ? ve Na- that there are two separate engine rooms with a pair of diesel tional Security Multi-Mission Vessel (NSMV), generators in each, both feeding dual high voltage switch- built at Philly Shipyard, powered by Wabtec
-
)
November 2023 - Marine News page: 45the construction of the vessel.” switchboards and dual propulsion motors. This Congressional direction led to a MARAD Vessel Power onboard consists of Wabtec Corporation’s Construction Manager (VCM) contract award to TOTE 16V250MDC, EPA Tier 4, IMO Tier III marine diesel Services in 2019, leveraging
-
)
November 2023 - Maritime Reporter and Engineering News page: 66TECH FEATURE: GEARS While the Karl Senner LLC reference list is long, a strong recent win was last- month’s delivery of a pair of Damen 3013 Multi Cats, built by Conrad Shipyard for Great Lakes Dredge & Dock. Credit: Great Lakes Dredge & Dock Gearing Up for a Hybrid Future Karl Senner LLC is a ? xture
-
)
November 2023 - Maritime Reporter and Engineering News page: 52PHILIPPINE'S FASTCAT FERRIES “[Hong Kong mogul] Sir Gordon Wu came to our of? ce, and we also went to his of? ce in Hong Kong; he was interested to get into this business. He told me: ‘Mary Ann, as long as there's water, you have business. The name of the game is ef? ciency.’ So I guess the challenge
-
)
November 2023 - Maritime Reporter and Engineering News page: 36CIO IN FOCUS mulating best practices from industries outside of because of the synergies of our teams, I have a combined re- maritime has been a mantra in boardrooms and sponsibility. In a nutshell, I'm responsible for the technology conferences for decades, as traditional maritime of the company plus
-
)
November 2023 - Maritime Reporter and Engineering News page: 28FUEL TRANSITION Laura Maersk was built to ABS class and Source Maersk features a classic design. traditional investment.” For Maersk, the cost should not be an while fuel preparation spaces must be safeguarded with addi- excuse for not acting. tional ventilation and continuous monitoring in case of