{"id":29244,"date":"2023-05-06T22:08:24","date_gmt":"2023-05-06T20:08:24","guid":{"rendered":"https:\/\/marineforum.online\/?p=29244"},"modified":"2023-05-08T13:24:49","modified_gmt":"2023-05-08T11:24:49","slug":"it-security-on-board-the-fkie-security-laboratory","status":"publish","type":"post","link":"https:\/\/marineforum.online\/en\/it-sicherheit-an-bord-sicherheitslabor-der-fkie\/","title":{"rendered":"IT security on board - FKIE security laboratory"},"content":{"rendered":"

As reported by Informationsdienst Wissenschaft (idw) on 2 May 2023, the \"Maritime Cyber Security\" research group at the Fraunhofer Institute for Communication, Information Processing and Ergonomics (FKIE) is building a maritime security laboratory together with the Fraunhofer Center for Maritime Logistics and Services (Fraunhofer CML). The aim is to simulate, recognise and defend against cyber attacks on ships.<\/span><\/span><\/span><\/p>\n

Ships as potential targets<\/span><\/span><\/span><\/strong><\/p>\n

Cyberattacks on industry and critical infrastructure are increasing worldwide. Ships, which transport billions of tonnes of goods around the world every year, are also potential targets as part of global supply chains. Overall, the need for networking is increasing - whether it is to be able to control routes ideally, monitor the flow of goods or enable the crew to connect to home. This makes maritime systems more susceptible to cyberattacks, as IT-supported on-board systems are often poorly secured.<\/span><\/span><\/span><\/p>\n

Realistic test environment with stationary ship bridge<\/span><\/span><\/span><\/strong><\/p>\n

According to the Fraunhofer FKIE, three types of attack are conceivable:<\/span><\/span><\/span><\/p>\n

+ General attacks, not specifically aimed at ships, are the most common threat. A USB stick infected with a malicious programme and inserted into the on-board computer is enough.<\/span><\/span><\/span><\/p>\n

+ Targeted attacks, carried out with a high level of expertise, that simply make ships disappear from the radar, for example.<\/span><\/span><\/span><\/p>\n

+ Electromagnetic warfare (electronic warfare), when satellite-based positioning is influenced by jamming transmitters or high-frequency radio waves.<\/span><\/span><\/span><\/p>\n

\"\"
Manipulation of the radar image using the Bridge Attack Tool (BRAT). Photo: FKIE<\/figcaption><\/figure>\n

Simulation in the laboratory<\/span><\/span><\/span><\/strong><\/p>\n

These different types of attack with an impact on the real world can be simulated in the maritime security laboratory. As part of the MaCy (Maritime Cyber Security Laboratory) project in Hamburg, the Fraunhofer CML is currently developing a realistic ship's bridge into a cyber security laboratory. This environment provides all the instruments and systems on land that can also be found at sea, such as bridge hardware, marine radio and AIS (Automatic Identification System) transmitters\/receivers, as well as radar equipment or ECDIS (Electronic Chart Display and Information System) for navigation. Within the test environment, various devices and procedures are used to generate, recognise, investigate and, ideally, prevent IT security incidents. <\/span><\/span><\/span><\/p>\n

The \"Bridge Attack Tool\" (BRAT) can be used to carry out various attacks, attacks, malfunctions or manipulations of the radar and navigation systems and show their effects on the on-board systems. After the analysis, industry partners can be made aware of existing weaknesses, supported in technical improvements and practical countermeasures can be developed.<\/span><\/span><\/span><\/p>\n

Recognition and display<\/span><\/span><\/span><\/strong><\/p>\n

In order to fend off cyber attacks on board as early as possible, the team has developed an intrusion detection system that recognises anomalies, evaluates them as possible attacks and issues warnings and alarms as well as instructions and recommendations for action to the crew on a Cyber Incident Monitor (CIM).<\/span><\/span><\/span><\/p>\n

These should be clear and easy to implement, even in stressful situations. To this end, warning messages and acoustic alarms are linked to information and decision-making aids, e.g. \"GPS not trustworthy!\". The concept of alarm and warning messages is adapted to the guidelines of the International Maritime Organisation (IMO) on bridge alarm management. The work on CIM and BRAT is being carried out together with other companies as part of a research project for the Federal Ministry for Digital and Transport Affairs.<\/span><\/span><\/span><\/p>\n

Creating awareness ...<\/span><\/span><\/span><\/strong><\/p>\n

With the help of the innovative maritime security laboratory, the Fraunhofer Institute aims to raise awareness of the dangers of cyberattacks at sea among companies, authorities and nautical experts and, together with partners from industry, develop measures to test and retrofit existing systems on the one hand and to provide research data for the development of new solutions on the other.<\/span><\/span><\/span><\/p>\n

... Develop measures ...<\/span><\/span><\/span><\/strong><\/p>\n

Just because cyber attacks on ships have not yet become known on a large scale does not mean that security should be neglected. Especially on older freighters that have been in operation for decades, many systems urgently need to be upgraded. Consistent prevention in combination with effective methods for recognising potential cyber attacks is the best protection.<\/span><\/span><\/span><\/p>\n

... Understanding dependencies<\/span><\/span><\/span><\/strong><\/p>\n

The cargo ship \"Ever Given\" blocked the Suez Canal for six days in spring 2021. Even if the cause of the accident was not a cyber attack, it is easy to imagine what impact a successful attack against the digital navigation and communication systems of one or more freighters could have.<\/span><\/span><\/span><\/p>\n