Cleveland Cascades LtdCoaltrans Virtual World Coal Leaders Network 2020TMS Webinar Series COVID-19: A Leadership Perspective - ‘Container Terminals in the Pandemic - Rapid bounce back or slow recovery?China Coaltrans 2020TBA GroupCimbria
  • Port of Vancouver USA
  • Cimbria
  • Sailors Society
  • Port of Stockton
  • Bühler GmbH
  • Coaltrans Virtual World Coal Leaders Network 2020

Cyber-attacks up 900% in three years

(Posted on 22/07/20)

Cyber-attacks on the maritime industry’s operational technology (OT) systems have increased by 900% over the last three years with the number of reported incidents set to reach record volumes by year end.

Addressing port and terminal operators during an online forum last week, Robert Rizika, Naval Dome’s Boston-based Head of North American Operations, explained that in 2017 there were 50 significant OT hacks reported, increasing to 120 in 2018 and more than 310 last year. He said this year is looking like it will end with more than 500 major cyber security breaches, with substantially more going unreported.

Speaking during the 2020 Port Security Seminar & Expo, a week-long virtual conference organised by the American Association of Port Authorities, Rizika said that since NotPetya – the virus that resulted in a US$300 million loss for Maersk – “attacks are increasing at an alarming rate”.

Recalling recent attacks, he told delegates that in 2018 the first ports were affected, with Barcelona, then San Diego falling under attack. Australian shipbuilder Austal was hit and the attack on COSCO took down half of the shipowner’s US network.

He said this year a US-based gas pipeline operator and shipping company MSC have been hit by malware, of which the latter incident shut down the shipowner’s Geneva HQ for five days. A US-based cargo facility’s operating systems were infected with the Ryuk ransomware, and last month the OT systems at Iran’s Shahid Rajee port were hacked, restricting all infrastructure movements, creating a massive back log.

Reports of this attack have gone some way in raising public awareness of the potential wider impact of cyber threats on ports around the world. Intelligence from Iran, along with digital satellite imagery, showed the Iranian port in a state of flux for several days. Dozens of cargo ships and oil tankers waiting to offload, while long queues of trucks formed at the entrance to the port stretching for miles, according to Naval Dome.

Emphasising the economic impact and ripple effect of a cyber-attack on port infrastructures, Rizika revealed that a report published by Lloyd’s of London indicated that if 15 Asian ports were hacked financial losses would be more than US$110 billion, a significant amount of which would not be recovered through insurance policies, as OT system hacks are not covered.

Going on to explain which parts of the OT system – the network connecting RTGs, STS cranes, traffic control and vessel berthing systems, cargo handling and safety and security systems, etc., – are under threat, Rizika said all of them.

“Unlike the IT infrastructure, there is no “dashboard” for the OT network allowing operators to see the health of all connected systems. Operators rarely know if an attack has taken place, invariably writing up any anomaly as a system error, system failure, or requiring restart.

“They don’t know how to describe something unfamiliar to them. Systems are being attacked but they are not logged as such and, subsequently, the IT network gets infected,” Rizika explained.

“What is interesting is that many operators believe they have this protected with traditional cyber security, but the fire walls and software protecting the IT side, do not protect individual systems on the OT network,” he said.

An example would be the installation of an antivirus system on a vessel bridge navigation system (ECDIS) or, alternatively, a positioning system in a floating rig DP (Dynamic Positioning), or on one of the dock cranes on the pier side of the port.

“The antivirus system would very quickly turn out to be non-essential, impairing and inhibiting system performance. Antivirus systems are simply irrelevant in places where the attacker is anonymous and discreet,” he said.

Latest News

CSM and Permuda announce JV

(Posted on 25/10/20)

The Italian ship-owning Group Premuda, controlled by Pillarstone, the industrial and financial platform... Read more


North to enhance routing risk advice

(Posted on 23/10/20)

Leading international shipping insurer North P&I Club has launched a new marine risk awareness solution... Read more


IMEC commissions Ocean to develop competencies for Ratings

(Posted on 23/10/20)

The International Maritime Employers’ Council (IMEC) has commissioned Ocean Technologies Group... Read more


Piracy increasing off West Africa

(Posted on 18/10/20)

ICC International Maritime Bureau (IMB) figures show a rise in piracy and armed robbery on the world... Read more


CCS fleet grows to 155m GT

(Posted on 16/10/20)

China Classification Society (CCS) grew its serviced fleet to 34,974 vessels in 2019, marking another... Read more


Pandemic has some positive effects on training

(Posted on 16/10/20)

Leading international catering management and training provider, MCTC has revealed that COVID-19 has... Read more


INTERCARGO address key issues

(Posted on 12/10/20)

The International Association of Dry Cargo Shipowners (INTERCARGO) has held its Annual General Meeting... Read more


Jones steps down as BRS chairman

(Posted on 12/10/20)

The BRS Group has a new chairman. As the partnership agreement stipulates, on reaching the age of 65... Read more


Høglund and Veracity to collaborate

(Posted on 12/10/20)

Høglund Marine Solutions (Høglund) and Veracity by DNV GL (Veracity) have signed a collaboration... Read more


German Shipowners welcome LNG investments

(Posted on 07/10/20)

“As one of the world’s major shipping nations, Germany needs an LNG infrastructure for its... Read more


Bühler GmbHTOC EventsPort of Vancouver USAPort of South LouisianaThe Wolfson Centre for Bulk Solids Handling Technology Port of Stockton
  • TBA Group
  • The Wolfson Centre for Bulk Solids Handling Technology
  • Vigan
  • China Coaltrans 2020
  • TOC Events

Subscribe to our newsletter

Keep up to date with the latest global news in bulk cargo handling and shipping