Maritime and port cybersecurity.

This article is also available in French.

Below is a report produced by the BBC in Finland aboard an autonomous vessel (a real one, not a 3D animation). It is quite interesting, as this type of technology may soon become a reality.

Around 2:30 in the video, the journalist briefly addresses cybersecurity, explaining that “if something goes wrong with the autonomous vessel, a control station [on shore] like this one will allow operators to take control of the ship from land and bring it to safety, wherever it is in the world. Rolls-Royce, which developed the technology, believes that within less than 20 years we will see fully autonomous ships crossing our oceans. But, as with any connected technology, one of the major concerns is security.”

This article is also available in French.

Pursuing the latest innovations at all costs can sometimes lead to unexpected consequences. The website USNI News reports that the U.S. Navy will progressively move back from touchscreen propulsion controls in favor of traditional rotary knobs, physical controls, and switches.

Two years ago, a collision between the U.S. warship USS John S. McCain and a tanker resulted in the deaths of ten sailors in busy waters near Singapore and Malaysia.

This article is also available in French.

Even a brief and high-level risk analysis makes it possible to identify several major risk scenarios that could affect the maritime sector. The list below is not exhaustive, but it provides an overview of some of the most relevant concerns.

For vessels, these scenarios may include:

• attempts to spoof or jam positioning or communication systems, either directly targeting the vessel or affecting its surrounding environment
• malfunctions or loss of availability of ECDIS navigation systems, even though these systems are often deployed with redundancy
• the transmission of false safety information to vessels (GMDSS alerts, AIS data, weather information, etc.)
• intrusions targeting onboard industrial control systems, including propulsion, navigation, or cargo management systems
• the remote takeover of a vessel or part of its systems
• the partial or complete encryption of onboard information systems through ransomware attacks

Ports are also exposed to similar risks, including:

This article is also available in French.

In an article published yesterday, the company Pen Test Partners, known for its blog posts on maritime cybersecurity, released a new, somewhat alarming article on the topic.

Apparently, we are no longer supposed to adopt an alarming tone, so let us try to analyze it calmly.

The company, which operates in the United Kingdom and the United States, conducts penetration tests at the request of its clients on different types of ships. In their article, they explain that each time they perform such work, they manage to identify information systems that few - sometimes none - of the crew members know about, or whose purpose they do not understand. This may seem surprising. However, there can be explanations (which the article does not highlight, preferring - somewhat excessively in my view - the buzz). Here are a few possible explanations:

This article is also available in French.

This has always surprised me, but relatively few people are actually familiar with the field of submarine cables. I am not only referring to the technology itself, but it is quite surprising to realize that some people are not even aware of their existence. It must be said that, lying deep on the ocean floor, it is tempting to forget about them. Yet they handle 98% of intercontinental telephone communications and data transfers every day. Without them, our daily lives and our economy would be profoundly disrupted.

This article is also available in French.

As mentioned last year, the Port of Singapore authorities inaugurated their Maritime Security Operations Center (MSOC) on May 16, 2019. Singapore is a major global transshipment hub, particularly for container traffic.

“It is therefore important that we protect our maritime and port infrastructure to prevent any major disruption to port operations and the delivery of services,”
said Niam Chiang Meng, Chairman of the Maritime and Port Authority of Singapore.