Abstract
The emergence of autonomous ships represents a significant advancement in maritime technology, promising enhanced efficiency, reduced operating costs and reducing or even completely removing crews from hazardous environments. However, the progress is accompanied by a burgeoning concern on the cyber security of these autonomous ships due to their exposure to the “connected world”. The four key systems investigated in this study are: 1) Shore Control Centre (SCC); 2) Communication System; 3) Autonomous Ship Controller (ASC), and 4) Autonomous Navigation System (ANS). The paper highlights specific operational technology (OT) risks associated with MASS (Maritime Autonomous Surface Ship). For completeness, the study also drills down to cyber risks and impacts associated with sub-systems of these major OT systems. A comprehensive cyber risk assessment methodology employing the MITRE framework is provided to evaluate the severity of risks. Recommended mitigations include defence-in-depth cybersecurity protections for all systems, security-by-design approaches, personnel training and redundancy in certain critical systems (The full version of guidelines is accessible through this link for further reference). Taking into account all aspects, this paper functions as a case study examining cyber risks of the OT system of autonomous ships.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Similar content being viewed by others
References
Tijan, E., Jović, M., Aksentijević, S., Pucihar, A.: Digital transformation in the maritime transport sector. Technol. Forecast. Soc. Chang. 170, 120879 (2021)
Annex 2 framework for the regulatory scoping exercise for the use of maritime autonomous surface ships (mass). https://maiif.org/wp-content/uploads/2019/06/MSC-100_20-Annex-20-1.pdf. Accessed 06 Nov 2023
Ahvenjärvi, S.: The human element and autonomous ships. TransNav: Int. J. Mar. Navig. Saf. Sea Transp. 10(3), 517–521 (2016)
Mallam, S.C., Nazir, S., Sharma, A.: The human element in future maritime operations-perceived impact of autonomous shipping. Ergonomics 63(3), 334–345 (2020)
Kavallieratos, G., Spathoulas, G., Katsikas, S.: Cyber risk propagation and optimal selection of cybersecurity controls for complex cyberphysical systems. Sensors 21(5), 1691 (2021)
Bolbot, V., Theotokatos, G., Boulougouris, E., Vassalos, D.: Safety related cyber-attacks identification and assessment for autonomous inland ships. In: International Seminar on Safety and Security of Autonomous Vessels (ISSAV) (2019)
Yoo, J., Jo, Y.: Formulating cybersecurity requirements for autonomous ships using the square methodology. Sensors 23(11), 5033 (2023)
Cho, S., Orye, E., Visky, G., Prates, V.: Cybersecurity considerations in autonomous ships. NATO Cooperative Cyber Defence Centre of Excellence: Tallinn, Estonia (2022)
Guidance for autonomous ships. http://krs.westus.cloudapp.azure.com/Files/KRRules/KRRules2022/data/data_other/ENGLISH/gc28e000.pdf. Accessed 06 Nov 2023
Mass uk industry conduct principles and code of practice 2022 (v6). https://www.maritimeuk.org/priorities/innovation/maritime-uk-autonomous-systems-regulatory-working-group/mass-uk-industry-conduct-principles-and-code-practice-2022-v6/. Accessed 06 Nov 2023
Autonomous and remote control functions. https://safety4sea.com/wp-content/uploads/2021/07/ABS-Autonomous-and-Remote-Control-Functions-2021_07.pdf. Accessed 06 Nov 2023
Guidelines on remotely operated vessels and autonomous surface vessels. http://www.irclass.org/media/5777/asv-guidelines_dec-2021_new.pdf. Accessed 06 Nov 2023
Guidelines for automated/autonomous operation on ships (ver.1.0). https://maritimecyprus.com/wp-content/uploads/2020/01/classnk-autonomous.pdf. Accessed 06 Nov 2023
Regulations for classification of maritime autonomous and remotely controlled surface ships (mass). https://lk.rs-class.org/regbook/getDocument2?type=rules3 &d=7CA5D1FA-BD6A-4DB0-A826-BC26E4219555 &f. Accessed 06 Nov 2023
Guidelines for autonomous shipping. https://erules.veristar.com/dy/data/bv/pdf/641-NI_2019-10.pdf. Accessed 06 Nov 2023
Guidelines for autonomous cargo ships. https://www.ccs.org.cn/ccswzen/articleDetail?id=201910000000003792. Accessed 06 Nov 2023
Autonomous and remotely-operated ships. https://www.dnv.com/maritime/publications/remote-controlled-autonomous-ships-paper-download.html. Accessed 06 Nov 2023
Cyber-enabled ships: Shipright procedure - autonomous ships. https://issuu.com/lr_marine/docs/lr_cyber-enabled_ships_shipright_pr. Accessed 06 Nov 2023
Final report summary-munin (maritime unmanned navigation through intelligence in networks). https://www.semanticscholar.org/paper/Final-Report-Summary-MUNIN-%28-Maritime-Unmanned-in-%29-Munin-Grant/5aebf0ce4f2da30bc665f4745b069a8f6b6729b1. Accessed 06 Nov 2023
The mayflower autonomous ship project. https://mas400.com. Accessed 06 Nov 2023
The nippon foundation meguri2040 fully autonomous ship program. https://www.nippon-foundation.or.jp/en/news/articles/2022/20220111-67000.html. Accessed 06 Nov 2023
Partnered with st engineering on sea trials of autonomous vessel technology on our harbour tug. https://posh.com.sg/partnered-with-st-engineering-on-sea-trials-of-autonomous-vessel-technology-on-our-harbour-tug-posh-harvest/. Accessed 06 Nov 2023
Vessel review | zhi fei - chinese-built 300teu boxship boasts autonomous navigation features. https://www.bairdmaritime.com/ship-world/boxship-world/vessel-review-zhi-fei-chinese-built-300teu-boxship-boasts-autonomous-navigation-features/. Accessed 06 Nov 2023
Samsung heavy industries succeeds autonomous vessel navigation. https://www.hellenicshippingnews.com/samsung-heavy-industries-succeeds-autonomous-vessel-navigation/. Accessed 06 Nov 2023
Porathe, T., Prison, J., Man, Y.: Situation awareness in remote control centres for unmanned ships. In: Proceedings of Human Factors in Ship Design & Operation, 26–27 February 2014, London, UK, p. 93 (2014)
Kim, M., Joung, T.H., Jeong, B., Park, H.S.: Autonomous shipping and its impact on regulations, technologies, and industries. J. Int. Marit. Saf. Environ. Aff. Shipp. 4(2), 17–25 (2020)
Veitch, E., Alsos, O.A.: A systematic review of human-AI interaction in autonomous ship systems. Saf. Sci. 152, 105778 (2022)
Lynch, K.M., Banks, V.A., Roberts, A.P., Radcliffe, S., Plant, K.L.: What factors may influence decision-making in the operation of maritime autonomous surface ships? A systematic review. Theor. Issues Ergon. Sci. 1–36 (2022)
Höyhtyä, M., Martio, J.: Integrated satellite-terrestrial connectivity for autonomous ships: survey and future research directions. Remote Sens. 12(15), 2507 (2020)
Xu, Y.: Quality of service provisions for maritime communications based on cellular networks. IEEE Access 5, 23881–23890 (2017)
Höyhtyä, M., Huusko, J., Kiviranta, M., Solberg, K., Rokka, J.: Connectivity for autonomous ships: Architecture, use cases, and research challenges. In: 2017 International Conference on Information and Communication Technology Convergence (ICTC), pp. 345–350. IEEE (2017)
Alqurashi, F.S., Trichili, A., Saeed, N., Ooi, B.S., Alouini, M.S.: Maritime communications: a survey on enabling technologies, opportunities, and challenges. IEEE Internet Things J. (2022)
Jovanović, I., Perčić, M., Vladimir, N.: Identifying differences between power system of conventional and autonomous ship with respect to their safety assessment. In: 2023 18th Conference on Electrical Machines, Drives and Power Systems (ELMA), pp. 1–5. IEEE (2023)
King, T., Van Welter, C., Svensen, T.E.: Stability barrier management for large passenger ships. Ocean Eng. 125, 342–348 (2016)
Ship design and stability. https://www.imo.org/en/OurWork/Safety/Pages/ShipDesignAndStability-default.aspx. Accessed 06 Nov 2023
Chaal, M., Banda, O.A.V., Glomsrud, J.A., Basnet, S., Hirdaris, S., Kujala, P.: A framework to model the STPA hierarchical control structure of an autonomous ship. Saf. Sci. 132, 104939 (2020)
Thombre, S., et al.: Sensors and AI techniques for situational awareness in autonomous ships: a review. IEEE Trans. Intell. Transp. Syst. 23(1), 64–83 (2020)
Wang, J., Xiao, Y., Li, T., Chen, C.P.: A survey of technologies for unmanned merchant ships. IEEE Access 8, 224461–224486 (2020)
Ohn, S.W., Namgung, H.: Requirements for optimal local route planning of autonomous ships. J. Mar. Sci. Eng. 11(1), 17 (2022)
Longo, G., Martelli, M., Russo, E., Zaccone, R., et al.: Collision-avoidance capabilities reduction after a cyber-attack to the navigation sensors. In: Conference Proceedings of the 2022 International Ship Control Systems Symposium (2022)
Ramos, M.A., Utne, I.B., Mosleh, A.: Collision avoidance on maritime autonomous surface ships: operators’ tasks and human failure events. Saf. Sci. 116, 33–44 (2019)
Wu, Y., Pelot, R.P., Hilliard, C.: The influence of weather conditions on the relative incident rate of fishing vessels. Risk Anal. Int. J. 29(7), 985–999 (2009)
Amro, A., Gkioulos, V., Katsikas, S.: Assessing cyber risk in cyber-physical systems using the ATT &CK framework. ACM Trans. Priv. Secur. 26(2), 1–33 (2023)
Amro, A., Gkioulos, V.: Cyber risk management for autonomous passenger ships using threat-informed defense-in-depth. Int. J. Inf. Secur. 22(1), 249–288 (2023)
Yousaf, A., Amro, A., Kwa, P., Li, M., Zhou, J.: Cyber risk assessment of cyber-enabled autonomous cargo vessel. In submission
Jun, L., Huibin, X.: Reliability analysis of aircraft equipment based on FMECA method. Phys. Procedia 25, 1816–1822 (2012). International Conference on Solid State Devices and Materials Science, April 1-2, 2012, Macao
Sulaman, S.M., Armin, B., Michael, F., Martin, H.: Comparison of the FMEA and STPA safety analysis methods-a case study. Softw. Qual. J. 27, 349–387 (2019)
Rajaram, P., Goh, M., Zhou, J.: Guidelines for cyber risk management in shipboard operational technology systems. J. Phys. Conf. Ser. 2311, 012002. IOP Publishing (2022)
Acknowledgments
First and foremost, the team wish to extend deepest thanks to Philip Kwa for his invaluable insights throughout the research process. The team are equally indebted to Dr Ahmed Amro from NTNU, whose expertise and collaborative efforts were fundamental in the risk assessment methodology. The team are also grateful to Dr Kimberly Tam from University of Plymouth, Dr Meriam Chaal and Dr Victor Bolbot both from Aalto University for their valuable discussions that enriched this research.
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Ethics declarations
Disclosure of Interests
The authors declare no conflict of interest. This research is supported by the National Research foundation, Singapore (NRF), Maritime and Port Authority of Singapore (MPA) and Singapore Maritime Institute (SMI) under its Maritime transportation Programme (Project No. SMI-2022-MTP-04). Any opinions, finds and conclusions or recommendations expressed in this material are those of the author(s) and do not reflect the views of NRF, MPA and SMI.
Rights and permissions
Copyright information
© 2024 The Author(s), under exclusive license to Springer Nature Switzerland AG
About this paper
Cite this paper
Li, M., Yousaf, A., Goh, M., Zhou, J., Chattopadhyay, S. (2024). Guidelines for Cyber Risk Management in Autonomous Shipping. In: Andreoni, M. (eds) Applied Cryptography and Network Security Workshops. ACNS 2024. Lecture Notes in Computer Science, vol 14587. Springer, Cham. https://doi.org/10.1007/978-3-031-61489-7_9
Download citation
DOI: https://doi.org/10.1007/978-3-031-61489-7_9
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-031-61488-0
Online ISBN: 978-3-031-61489-7
eBook Packages: Computer ScienceComputer Science (R0)