Paperless ship navigation: cyber security weaknesses

Maritime transportation is backbone of globalized trade and the manufacturing supply chain as nowadays more than four fifths of world merchandise trade by volume is carried by ships. Safe navigation of ships of today depends heavily on cyber-physical systems, of which the central is the Electronic Chart Display and Information System (ECDIS). The paperless ship navigation is allowed when the type approved ECDIS with official electronic navigation charts acts as an independent backup for the primary system. In this paper, we present an analysis of cyber security weaknesses of the paperless ship navigation that relies on two internetworked ECDIS workstations in the backup arrangement. The method of analysis is based on cyber security testing of the ECDIS workstations with an industry vulnerability scanner tool. The detected vulnerabilities are analysed in the context of ECDIS backup arrangement and safeguards implemented on board the paperless ship. The obtained results suggest that the critical cyber threat vectors result from uncontrolled internetworking of unmaintained ECDIS workstations with identical hardware and software configurations.

• Record URL:
  • https://doi.org/10.1007/s12198-020-00222-2
• Availability:
  • Find a library where document is available. Order URL: http://worldcat.org/issn/19387741
• Supplemental Notes:
  • © 2020 Springer Nature Switzerland AG. Part of Springer Nature.
• Authors:
  • Svilicic, Boris
  • 0000-0002-7280-9525
  • Kristić, Miho
  • Žuškin, Srđan
  • 0000-0001-8389-828X
  • Brčić, David
  • 0000-0002-6638-8285
• Publication Date: 2018-4

Language

• English

Media Info

• Media Type: Web
• Features: References;
• Pagination: pp 203–214
• Serial:
  • Journal of Transportation Security
  • Volume: 13
  • Issue Number: 3-4
  • Publisher: Springer Publishing
  • ISSN: 1938-7741
  • EISSN: 1938-775X
  • Serial URL: http://link.springer.com/journal/12198

Subject/Index Terms

• TRT Terms: Cargo ships; Computer security; Navigation computers
• Identifier Terms: Electronic Chart Display & Information System (ECDIS)
• Subject Areas: Data and Information Technology; Marine Transportation; Security and Emergencies;

Filing Info

• Accession Number: 01761640
• Record Type: Publication
• Files: TRIS
• Created Date: Dec 29 2020 10:46AM