Journal is indexed in following databases:
- SCOPUS
- Web of Science Core Collection - Journal Citation Reports
- EBSCOhost
- Directory of Open Access Journals
- TRID Database - Transportation Research Board
- Index Copernicus Journals Master List
- BazTech
- Google Scholar
2023 Journal Impact Factor - 0.7
2023 CiteScore - 1.4
ISSN 2083-6473
ISSN 2083-6481 (electronic version)
Editor-in-Chief
Associate Editor
Prof. Tomasz Neumann
Published by
TransNav, Faculty of Navigation
Gdynia Maritime University
3, John Paul II Avenue
81-345 Gdynia, POLAND
e-mail transnav@umg.edu.pl
Cybersecurity in Maritime Industry
1 Gdynia Maritime University, Gdynia, Poland
ABSTRACT: The maritime industry is increasingly adopting digital solutions to optimize operations, reduce costs, improve data processing speeds, promote sustainability, and enhance safety. Advances in information technology, particularly through satellite internet connections, have enabled seamless communication between IT and operational systems. However, these developments also introduce significant cybersecurity risks. To mitigate these challenges, international regulations, such as the IMO’s Maritime Cyber Risk Management Resolution (2021), and guidelines have been implemented, emphasizing the integration of cybersecurity into Safety Management Systems (SMS). Effective cybersecurity management requires a top-down approach, beginning with executive leadership and fostering a culture of cybersecurity throughout organizations. Frameworks like those developed by the U.S. National Institute of Standards and Technology (NIST) complement IMO guidelines by providing tools to assess and manage cyber risks, especially in offshore operations experiencing rapid technological advancements. The offshore sector, vital to renewable energy and maritime economy growth, faces unique risks due to its dependency on interconnected systems. Comprehensive measures are necessary to safeguard navigation, protect infrastructure, and ensure personnel safety while adhering to evolving regulatory and technological standards. This paper highlights the need for robust cybersecurity frameworks to secure maritime operations against emerging threats, including data breaches, system manipulation, and cyberattacks, which pose challenges to global trade and maritime safety.
KEYWORDS: Risk Assessment, Maritime Transport, Maritime Safety, Human Element, Seafarers, International Maritime Organization (IMO), Safety Management System (SMS), Cyber Security
REFERENCES
Afenyo, M., Caesar, L.D.: Maritime cybersecurity threats: Gaps and directions for future research. Ocean & Coastal Management. 236, 106493 (2023). - doi:10.1016/j.ocecoaman.2023.106493
Alanda, A. et al.: Cross-Site Scripting (XSS) Vulnerabilities in Modern Web Applications. In: 2024 11th International Conference on Electrical Engineering, Computer Science and Informatics (EECSI). pp. 270–276 (2024). - doi:10.1109/EECSI63442.2024.10776461
Androjna, A. et al.: Assessing Cyber Challenges of Maritime Navigation. Journal of Marine Science and Engineering. 8, 10, 776 (2020). - doi:10.3390/jmse8100776
Benton, K., Bross, T.: Timing Analysis of SSL/TLS Man in the Middle Attacks. CoRR. abs/1308.3559, (2013).
Bimco: The Guidelines on Cyber Security Onboard Ships, https://www.bimco.org/-/media/bimco/about-us-and-our-members/publications/ebooks/guidelines-on-cyber-security-onboard-ships-v4.ashx?rev=e86ee4330cce44d7b90ad718e8af3c2e, last accessed 2024/12/03.
De Alwis, N., Nam, H.-S.: A way towards port automation: challenges and implications. WMU Journal of Maritime Affairs. (2024). - doi:10.1007/s13437-024-00350-9
Dyrcz, C.: Bezpieczeństwo morskie a nawigacja. Nautologia. 158, 1–10 (2021).
Forte, D.: Spyware: more than a costly annoyance. Network Security. 2005, 12, 8–10 (2005). - doi:10.1016/S1353-4858(05)70312-3
Gupta, B.B. et al.: Defending against phishing attacks: taxonomy of methods, current issues and future directions. Telecommun Syst. 67, 2, 247–267 (2018). - doi:10.1007/s11235-017-0334-z
IMO: Directive A 584(14) Measures to prevent unlawful acts which threaten the safety of ships and the security of their passengers and crew, https://wwwcdn.imo.org/localresources/en/OurWork/Security/Documents/Resolution%20A.584(14).pdf, last accessed 2024/12/03.
IMO: MSC/Circ.443 Measures to prevent unlawful acts against passengers and crews on board ships, https://wwwcdn.imo.org/localresources/en/OurWork/Security/Documents/MSC.Circ.443.pdf, last accessed 2024/12/03.
IMO: MSC-FAL.1/Circ.3/Rev.2 Guidelines on maritime cyber risk management, https://wwwcdn.imo.org/localresources/en/OurWork/Security/Documents/MSC-FAL.1-Circ.3-Rev.2%20-%20Guidelines%20On%20Maritime%20Cyber%20Risk%20Management%20(Secretariat)%20(1).pdf, last accessed 2024/12/03.
IMO: Resolution A 741(18) International management code for the safe operation of ships and for pollution prevention (International Safety Management (ISM) code). (2017).
IMO: Resolution MSC 428(98). Maritime Cyber Risk Management in Safety Management Systems. (2017).
IMO: SOLAS XI-2 and the ISPS Code, https://www.imo.org/en/OurWork/Security/Pages/SOLAS-XI-2%20ISPS%20Code.aspx, last accessed 2024/12/03.
Kopacz, Z. et al.: Formalne i nieformalne oceny bezpieczeństwa morskiego. Zeszyty Naukowe Akademii Marynarki Wojennej. R. 46 nr 3 (162), 51–67 (2005).
Lind, M. et al. eds: Maritime Informatics. Springer International Publishing, Cham (2021). - doi:10.1007/978-3-030-50892-0
Linh Vu et al.: A Cyber-HIL for Investigating Control Systems in Ship Cyber Physical Systems Under Communication Issues and Cyber Attacks. IEEE Transactions on Industry Applications. 60, 2, 2142–2152 (2024). - doi:10.1109/TIA.2023.3311429
Martínez, F. et al.: Maritime cybersecurity: protecting digital seas. Int. J. Inf. Secur. 23, 2, 1429–1457 (2024). - doi:10.1007/s10207-023-00800-0
Mohsendokht, M. et al.: Decoding dependencies among the risk factors influencing maritime cybersecurity: Lessons learned from historical incidents in the past two decades. Ocean Engineering. 312, 119078 (2024). - doi:10.1016/j.oceaneng.2024.119078
Mraković, I., Vojinović, R.: Maritime Cyber Security Analysis – How to Reduce Threats? Transactions on Maritime Science. 8, 1, 132–139 (2019). - doi:10.7225/toms.v08.n01.013
NIST: Releases Version 1.1 of its Popular Cybersecurity Framework, https://www.nist.gov/news-events/news/2018/04/nist-releases-version-11-its-popular-cybersecurity-framework, last accessed 2024/12/03.
Paar, C., Pelzl, J.: Understanding Cryptography: A Textbook for Students and Practitioners. Springer, Berlin, Heidelberg (2010). - doi:10.1007/978-3-642-04101-3
Polish Government: Poland’s energy policy until 2040, https://www.gov.pl/web/klimat/polityka-energetyczna-polski, last accessed 2024/12/03.
Schiller, C.A. et al.: Chapter 2 - Botnets Overview. In: Schiller, C.A. et al. (eds.) Botnets. pp. 29–75 Syngress, Burlington (2007). - doi:10.1016/B978-159749135-8/50004-4
Spravil, J. et al.: Detecting Maritime GPS Spoofing Attacks Based on NMEA Sentence Integrity Monitoring. Journal of Marine Science and Engineering. 11, 5, 928 (2023). - doi:10.3390/jmse11050928
Trabelsi, Z. et al.: Malicious sniffing systems detection platform. In: 2004 International Symposium on Applications and the Internet. Proceedings. pp. 201–207 (2004). - doi:10.1109/SAINT.2004.1266117
Yang, Y. et al.: Internet of things for smart ports: Technologies and challenges. IEEE Instrumentation & Measurement Magazine. 21, 1, 34–43 (2018). - doi:10.1109/MIM.2018.8278808
Zeb, K. et al.: DDoS attacks and countermeasures in cyberspace. In: 2015 2nd World Symposium on Web Applications and Networking (WSWAN). pp. 1–6 (2015). - doi:10.1109/WSWAN.2015.7210322
Zhao, Y. et al.: ARP Spoofing Analysis and Prevention. In: 2020 5th International Conference on Smart Grid and Electrical Automation (ICSGEA). pp. 572–575 (2020). - doi:10.1109/ICSGEA51094.2020.00130
Zhuo, Z. et al.: Long short-term memory on abstract syntax tree for SQL injection detection. IET Software. 15, 2, 188–197 (2021). - doi:10.1049/sfw2.12018
Zobal, L. et al.: Current State of Honeypots and Deception Strategies in Cybersecurity. In: 2019 11th International Congress on Ultra Modern Telecommunications and Control Systems and Workshops (ICUMT). pp. 1–9 (2019). - doi:10.1109/ICUMT48472.2019.8970921
Citation note:
Neumann T.: Cybersecurity in Maritime Industry. TransNav, the International Journal on Marine Navigation and Safety of Sea Transportation, Vol. 18, No. 4, doi:10.12716/1001.18.04.02, pp. 765-774, 2024
Authors in other databases:
56825238000
OSCcDNYAAAAJOther publications of authors:
File downloaded 3 times
