Maritime Cyber Security: Navigation and Ships’ Systems Maritime Cyber Security Roundtable...

Maritime Cyber Security:Navigation and Ships’ Systems

Maritime Cyber Security Roundtable DiscussionPresented by

The Combined Joint Operations from the Sea Centre of Excellence

Old Dominion University

CAPT David B. Moskoff, USMSProfessor of Marine Transportation

United States Merchant Marine Academy

Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

Location, Technology and E-Navigation• “Location” through precise positioning more important than ever

due many new factors:• Larger ships more cargo more $ at risk• Faster ships less reaction time, more area• Crew Size watch standers, fatigue, solo, safety• W/O Load info+, technology – i.e. GMDSS• Deeper Draft less UKC, bottom surveys• Technology skillsets/instincts dependency

For Example: Largest Container Ship (in 2006)EMMA MAERSK 170,974 GT397 m (1,302 ft)56 m (184 ft)15.5 m (51 ft)

Ship’s E-Nav Bridge EquipmentTechnology Recently Much More Sophisticated

• ECDIS (Electronic Chart Display and Information System)• AIS (Automatic Identification System)• LRIT (Long Range Identification and Tracking)• Radar/ARPA (Automatic Radar Plotting Aid)• Compass (Gyro, Fluxgate, GPS and others)• Steering (Computerized Automatic Steering System)• VDR (Voyage Data Recorder –”Black Box”)• GMDSS (Global Maritime Distress and Safety System)• Numerous other advanced units and systems

ECDIS Definition

An Electronic Chart Display and Information System is:

• computer-based navigation system-complies with IMO

• can be used as an alternative to paper navigation charts

• integrates a variety of real-time information• automated decision aid - continuously

determining ship’s position in relation to land, charted objects, navigation aids and unseen hazards

ECDIS Definition•

An ECDIS includes electronic navigational charts (ENC) and integrates position information from the Global Positioning System (GPS) and other navigational sensors, such as radar, fathometer and automatic identification systems (AIS). It may also display additional navigation-related information, such as sailing directions.

ECDIS Electronic Chart Display and Information System

AIS (Automatic Identification System)

ECDIS with AIS Overlay

AIS Symbols and Information

Note TCPA and CPA Above – Based on GPS Position Input

Shipboard Radar/ARPA Unit

Marine Radar Display - Sperry

ECDIS with Radar Overlay

Combining All Three on One Display

The ECDIS becomes the ultimate “Magic Box” that is an extremely valuable tool for the well-trained navigator when position input is accurate.

AIS and Radar Overlay on ECDISIntegrated with Compass, Depth and other sensors

IBS (Integrated Bridge System)Solo Watchstanding

Recent Technology Onboard Ships• The Good• The Bad• The Ugly

• CSL Thames Grounding: Not Enough ECDIS Training • ttp://www.youtube.com/watch?feature=endscreen&v=2m4JGoJZESs&NR=1• http://www.ntsb.gov/news/events/2009/san_francisco_ca/animation.html

Important E-Navigation Terms PNT – Positioning, Navigation and TimingGPS – NavStar (U.S. Air Force) – Universal useDGPS - Differential Global Positioning SystemGNSS – Global Navigation Satellite SystemRSNS - Regional Satellite Navigation Systems

GLONASS (Russia), Galileo (EU), Compass (China)Beidou (China), QZSS (Japan), IRNSS (India)Electronic Charts, ECDIS/ECS, Track Control, AIS,LRIT, IBS, LF, Loran C and Enhanced Loran (eLoran)

GPS/GNSS is an ENav ConcernECDIS [and AIS] Position Input

• Commercial Ships – C/A Code• Primary and Secondary Inputs• Typically from GPS/GLONASS Today• Galileo and Compass in Future• LF System - eLoran as Backup

THV GALATEA – Lighthouse Tender

…..from article by David Hambling on THV GALETEA

….When Last activated the jammer, the ship went haywire. According to the electronic display on the ship's bridge, the Galatea was suddenly flying at Mach speeds over northern Europe and Ireland.

The ship's navigation backup - its gyrocompass- crashed, because it uses GPS to provide corrections. The radar did the same. Even the ship's satellite communications failed, because GPS points the antenna in the right direction. "The crew were well trained and briefed, so they knew what was going on," says Last. "But, like us, they were surprised.“ http://www.gla-rrnav.org/radionavigation/gnss_dgnss/vulnerabilities.html

GPS/NavStar – The U.S. Satellite SystemSome Known Vulnerabilities of GPS/GNSS Systems:1. Low power signal strength - inherent weakness2. Potential for unintentional interference3. Potential for intentional jamming or interference4. Potential for spoofing (hacking) and meaconing5. Potential for EMP to destroy receiver electronics6. Technical failure(s) of satellites (constellation) 7. Exposure of satellites to kinetic or laser attacks http://www.youtube.com/v/Uk7DVpCkgwQ&hl=en

http://www.alibaba.com/product-gs/386981063/EST_808LC_Portable_Military_blocker.html

High Power Mobile Phone & GPS(L1)/WiFi/Bluetooth Signal Jammer

Output power is 320 watt.The shielding radius is from 300-500 meters...Model Number: KTC-VU Jammer 2.0 Pelican Min. Order: 5 PiecesPort: Shenzhen Supply Ability: 50 Pieces per Day

Why Conduct Intentional Activities?A. PNT Signal is Critical to Infrastructure• Criminals – PNT regulates Banking and Finance• Hackers – Government, IT, Defense, Commercial• Terrorists - Defense, Government, Energy, IT, Communications,

Nuclear Industry, Banking, Transportation, Water, Chemical, Agriculture and Food, Emergency Services, Finance, more

• Extremists - ??????????????????????????• Military – Electronic Warfare (EW) & Cyber• Pirates – Hijack Ship, Ground Ship, Steal Cargo

Examples: Other ENav/GPS Concerns• ECDIS is a Computer Subject to Viruses, etc.

• IT Attacks Against Ship (i.e. Spearfishing) http://www.transas.com/support/chart_corrections/

http://www.transis.com/support/chart_corrections/

• Military Using Commercial GPS – C/A Code• http://www.youtube.com/watch?v=fVxDVUsiejQ&feature=related

• Lack of Low Frequency(LF) eLoran-Type Backup

• Electromagnetic Pulse Attack (EMP) Kills All?Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

Quick Look at GPS and eLoranGPS: Weak Transmitting Signal Strength

High Frequency Bands – L1, L2, L5Satellite Based – High OrbitingFairly Easy to Jam/Spoof

eLoran: Powerful Transmitting Signal StrengthLow Frequency Band – 100 KHzTerrestrial Based – Secure StationsVirtually Impossible to Jam/Spoof

Both: Very High Accuracy Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

eLoran – The Terrestrial SystemEnhanced Loran (eLoran)

What is it? How does it work? What are its benefits? How much would it cost? Why isn’t everyone funding it? What’s the current status?

What Can Ships Do? Options?• Use GPS/GNSS receivers (+$15) that detect spoofing and

jamming to warn users.• Provide as many inputs to navigation positioning as

possible – i.e. LF eLoran - especially in coastal/shallow areas.

• Use Parallel Indexing and Cross Indexing Radar Techniques routinely.

• Use ECDIS/ECS units with both a primary and a secondary input at all possible times in all available areas.

What Can Ships Do? Options?• Maintain Skillsets: Piloting, Celestial, Instruments

(fathometer, fathograph)• Audit and Test ships for jamming and other

vulnerabilities: test in open water areas under controlled conditions.

• Conduct ship drills (like fire drills) on regular basis: consider GNSS failure, GNSS jamming, GNSS spoofing, equipment failures, EMP attack, etc.

Just Don’t Put All Your Eggs in One Basket

United StatesMerchantMarine

Academy

CAPT David B. Moskoff, USMSProfessor of Marine Transportation

United States Merchant Marine AcademyMaster Mariner – USCG Unlimited

moskoffd@usmma.edu516.726.5856

Questions? Comments? Discussion?

Maritime Cyber Security: Navigation and Ships’ Systems Maritime Cyber Security Roundtable...

Documents

Report No. CG-D-06-16 Maritime Cyber Security University Research · 2017-03-28 · the Maritime Cyber Security Research Summit to discuss maritime cyber security risks and vulnerabilities

Maritime cyber risk management - Intertanko · Maritime cyber risk management Maritime Safety Division Javier Yasnikouski Head, Maritime Security Sub-Division for Maritime Security

« CYBER SECURITY - Accueil · The cyber security solutions of classical ... gouv.fr.vpn.e2.rie.gouv.fr/Surete-des-navires ... the Maritime Affairs Directorate and to the audit of

Maritime Cyber Security: Energy-based Port Operations Presented by

Where port security Maritime meetscybersecurity Cyber Security … · 2020. 8. 4. · Where port security meetscybersecurity. 4 August 2020 • 14:00-14:45 BST. Part of. Maritime

Maritime Interdiction Operations Journal NATO MARITIME ...nmiotc.nato.int/wp-content/uploads/2018/09/NMIOTCjournal91.pdf · Maritime Cyber Security, for example, which is a primary

Cyber Security The Cyber Security - GOV.UK

Maritime Cybersecuritymciba.ru/kcfinder/upload/files/EER2018 - Maritime Cybersecurity... · Many market insurance policies ... • BIMCO Industry Guidelines on Cyber Security on-board

Maritime Cyber Security Resilience · Cyber Security in the Class scope for ships and offshore units. Main rules, Class Notation & Type Approval –verify the holistic cyber resilience

Maritime Cyber Security Cyber Security and Shippingcd502fa18faf34612009-6be874ed8f905033bd346f731eef6b8c.r48... · 2017-11-01 · Cyber security threats are progressing and becoming

Maritime Cyber-Security What is the problem and what can be … · 2019-12-05 · Maritime Cyber Threats ^The insurance industry may come to regard a vessel as unseaworthy if appropriate

Strategies for Maritime Cyber Security Leveraging the Other Modesonlinepubs.trb.org/onlinepubs/conferences/2014/MTS2014/Dinning.pdf · Strategies for Maritime Cyber Security – Leveraging

Cyber Security, Cyber Intelligence & Cyber Investigation

Maritime Cyber

Cyber Security Analyst Course Outline Cyber Security

CYBER AWARENESS TRAINING - Allied Maritime Command CY… · CYBER AWARENESS TRAINING. INTRODUCTION Growing threats in the Cyber domain. Definitions Cyber security Cyber defence Information

Cyber Security at Sea - Belgische Vereniging voor … · Cyber security awareness in the maritime industry is still low ... ECDIS AIS Radar Gyro ... Adopting industry best practice

THE MARITIME DIMENSION OF EUROPEAN … maritime cyber security awareness is currently low, to non- ... port authorities, national cyber security offices, etc. ^Analysis of cyber security

Maritime Cyber Security: concepts, problems and models · lines and recommendations for protecting the Maritime infrastructure from cyber threats. As incidents become more frequent,

Maritime security- roles and responsibilitiesind.ntou.edu.tw/~shuentai/112/Maritime Security/Maritime Security 3... · Maritime security- roles and responsibilities of maritime participants