[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to main content

Guidelines for Cyber Risk Management in Autonomous Shipping

  • Conference paper
  • First Online:
Applied Cryptography and Network Security Workshops (ACNS 2024)

Abstract

The emergence of autonomous ships represents a significant advancement in maritime technology, promising enhanced efficiency, reduced operating costs and reducing or even completely removing crews from hazardous environments. However, the progress is accompanied by a burgeoning concern on the cyber security of these autonomous ships due to their exposure to the “connected world”. The four key systems investigated in this study are: 1) Shore Control Centre (SCC); 2) Communication System; 3) Autonomous Ship Controller (ASC), and 4) Autonomous Navigation System (ANS). The paper highlights specific operational technology (OT) risks associated with MASS (Maritime Autonomous Surface Ship). For completeness, the study also drills down to cyber risks and impacts associated with sub-systems of these major OT systems. A comprehensive cyber risk assessment methodology employing the MITRE framework is provided to evaluate the severity of risks. Recommended mitigations include defence-in-depth cybersecurity protections for all systems, security-by-design approaches, personnel training and redundancy in certain critical systems (The full version of guidelines is accessible through this link for further reference). Taking into account all aspects, this paper functions as a case study examining cyber risks of the OT system of autonomous ships.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Subscribe and save

Springer+ Basic
£29.99 /Month
  • Get 10 units per month
  • Download Article/Chapter or eBook
  • 1 Unit = 1 Article or 1 Chapter
  • Cancel anytime
Subscribe now

Buy Now

Chapter
GBP 19.95
Price includes VAT (United Kingdom)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
GBP 47.99
Price includes VAT (United Kingdom)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
GBP 49.99
Price includes VAT (United Kingdom)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Similar content being viewed by others

References

  1. Tijan, E., Jović, M., Aksentijević, S., Pucihar, A.: Digital transformation in the maritime transport sector. Technol. Forecast. Soc. Chang. 170, 120879 (2021)

    Article  Google Scholar 

  2. Annex 2 framework for the regulatory scoping exercise for the use of maritime autonomous surface ships (mass). https://maiif.org/wp-content/uploads/2019/06/MSC-100_20-Annex-20-1.pdf. Accessed 06 Nov 2023

  3. Ahvenjärvi, S.: The human element and autonomous ships. TransNav: Int. J. Mar. Navig. Saf. Sea Transp. 10(3), 517–521 (2016)

    Google Scholar 

  4. Mallam, S.C., Nazir, S., Sharma, A.: The human element in future maritime operations-perceived impact of autonomous shipping. Ergonomics 63(3), 334–345 (2020)

    Article  Google Scholar 

  5. Kavallieratos, G., Spathoulas, G., Katsikas, S.: Cyber risk propagation and optimal selection of cybersecurity controls for complex cyberphysical systems. Sensors 21(5), 1691 (2021)

    Article  Google Scholar 

  6. Bolbot, V., Theotokatos, G., Boulougouris, E., Vassalos, D.: Safety related cyber-attacks identification and assessment for autonomous inland ships. In: International Seminar on Safety and Security of Autonomous Vessels (ISSAV) (2019)

    Google Scholar 

  7. Yoo, J., Jo, Y.: Formulating cybersecurity requirements for autonomous ships using the square methodology. Sensors 23(11), 5033 (2023)

    Article  Google Scholar 

  8. Cho, S., Orye, E., Visky, G., Prates, V.: Cybersecurity considerations in autonomous ships. NATO Cooperative Cyber Defence Centre of Excellence: Tallinn, Estonia (2022)

    Google Scholar 

  9. Guidance for autonomous ships. http://krs.westus.cloudapp.azure.com/Files/KRRules/KRRules2022/data/data_other/ENGLISH/gc28e000.pdf. Accessed 06 Nov 2023

  10. Mass uk industry conduct principles and code of practice 2022 (v6). https://www.maritimeuk.org/priorities/innovation/maritime-uk-autonomous-systems-regulatory-working-group/mass-uk-industry-conduct-principles-and-code-practice-2022-v6/. Accessed 06 Nov 2023

  11. Autonomous and remote control functions. https://safety4sea.com/wp-content/uploads/2021/07/ABS-Autonomous-and-Remote-Control-Functions-2021_07.pdf. Accessed 06 Nov 2023

  12. Guidelines on remotely operated vessels and autonomous surface vessels. http://www.irclass.org/media/5777/asv-guidelines_dec-2021_new.pdf. Accessed 06 Nov 2023

  13. Guidelines for automated/autonomous operation on ships (ver.1.0). https://maritimecyprus.com/wp-content/uploads/2020/01/classnk-autonomous.pdf. Accessed 06 Nov 2023

  14. Regulations for classification of maritime autonomous and remotely controlled surface ships (mass). https://lk.rs-class.org/regbook/getDocument2?type=rules3 &d=7CA5D1FA-BD6A-4DB0-A826-BC26E4219555 &f. Accessed 06 Nov 2023

  15. Guidelines for autonomous shipping. https://erules.veristar.com/dy/data/bv/pdf/641-NI_2019-10.pdf. Accessed 06 Nov 2023

  16. Guidelines for autonomous cargo ships. https://www.ccs.org.cn/ccswzen/articleDetail?id=201910000000003792. Accessed 06 Nov 2023

  17. Autonomous and remotely-operated ships. https://www.dnv.com/maritime/publications/remote-controlled-autonomous-ships-paper-download.html. Accessed 06 Nov 2023

  18. Cyber-enabled ships: Shipright procedure - autonomous ships. https://issuu.com/lr_marine/docs/lr_cyber-enabled_ships_shipright_pr. Accessed 06 Nov 2023

  19. Final report summary-munin (maritime unmanned navigation through intelligence in networks). https://www.semanticscholar.org/paper/Final-Report-Summary-MUNIN-%28-Maritime-Unmanned-in-%29-Munin-Grant/5aebf0ce4f2da30bc665f4745b069a8f6b6729b1. Accessed 06 Nov 2023

  20. The mayflower autonomous ship project. https://mas400.com. Accessed 06 Nov 2023

  21. The nippon foundation meguri2040 fully autonomous ship program. https://www.nippon-foundation.or.jp/en/news/articles/2022/20220111-67000.html. Accessed 06 Nov 2023

  22. Partnered with st engineering on sea trials of autonomous vessel technology on our harbour tug. https://posh.com.sg/partnered-with-st-engineering-on-sea-trials-of-autonomous-vessel-technology-on-our-harbour-tug-posh-harvest/. Accessed 06 Nov 2023

  23. Vessel review | zhi fei - chinese-built 300teu boxship boasts autonomous navigation features. https://www.bairdmaritime.com/ship-world/boxship-world/vessel-review-zhi-fei-chinese-built-300teu-boxship-boasts-autonomous-navigation-features/. Accessed 06 Nov 2023

  24. Samsung heavy industries succeeds autonomous vessel navigation. https://www.hellenicshippingnews.com/samsung-heavy-industries-succeeds-autonomous-vessel-navigation/. Accessed 06 Nov 2023

  25. Porathe, T., Prison, J., Man, Y.: Situation awareness in remote control centres for unmanned ships. In: Proceedings of Human Factors in Ship Design & Operation, 26–27 February 2014, London, UK, p. 93 (2014)

    Google Scholar 

  26. Kim, M., Joung, T.H., Jeong, B., Park, H.S.: Autonomous shipping and its impact on regulations, technologies, and industries. J. Int. Marit. Saf. Environ. Aff. Shipp. 4(2), 17–25 (2020)

    Google Scholar 

  27. Veitch, E., Alsos, O.A.: A systematic review of human-AI interaction in autonomous ship systems. Saf. Sci. 152, 105778 (2022)

    Article  Google Scholar 

  28. Lynch, K.M., Banks, V.A., Roberts, A.P., Radcliffe, S., Plant, K.L.: What factors may influence decision-making in the operation of maritime autonomous surface ships? A systematic review. Theor. Issues Ergon. Sci. 1–36 (2022)

    Google Scholar 

  29. Höyhtyä, M., Martio, J.: Integrated satellite-terrestrial connectivity for autonomous ships: survey and future research directions. Remote Sens. 12(15), 2507 (2020)

    Article  Google Scholar 

  30. Xu, Y.: Quality of service provisions for maritime communications based on cellular networks. IEEE Access 5, 23881–23890 (2017)

    Article  Google Scholar 

  31. Höyhtyä, M., Huusko, J., Kiviranta, M., Solberg, K., Rokka, J.: Connectivity for autonomous ships: Architecture, use cases, and research challenges. In: 2017 International Conference on Information and Communication Technology Convergence (ICTC), pp. 345–350. IEEE (2017)

    Google Scholar 

  32. Alqurashi, F.S., Trichili, A., Saeed, N., Ooi, B.S., Alouini, M.S.: Maritime communications: a survey on enabling technologies, opportunities, and challenges. IEEE Internet Things J. (2022)

    Google Scholar 

  33. Jovanović, I., Perčić, M., Vladimir, N.: Identifying differences between power system of conventional and autonomous ship with respect to their safety assessment. In: 2023 18th Conference on Electrical Machines, Drives and Power Systems (ELMA), pp. 1–5. IEEE (2023)

    Google Scholar 

  34. King, T., Van Welter, C., Svensen, T.E.: Stability barrier management for large passenger ships. Ocean Eng. 125, 342–348 (2016)

    Article  Google Scholar 

  35. Ship design and stability. https://www.imo.org/en/OurWork/Safety/Pages/ShipDesignAndStability-default.aspx. Accessed 06 Nov 2023

  36. Chaal, M., Banda, O.A.V., Glomsrud, J.A., Basnet, S., Hirdaris, S., Kujala, P.: A framework to model the STPA hierarchical control structure of an autonomous ship. Saf. Sci. 132, 104939 (2020)

    Article  Google Scholar 

  37. Thombre, S., et al.: Sensors and AI techniques for situational awareness in autonomous ships: a review. IEEE Trans. Intell. Transp. Syst. 23(1), 64–83 (2020)

    Article  Google Scholar 

  38. Wang, J., Xiao, Y., Li, T., Chen, C.P.: A survey of technologies for unmanned merchant ships. IEEE Access 8, 224461–224486 (2020)

    Article  Google Scholar 

  39. Ohn, S.W., Namgung, H.: Requirements for optimal local route planning of autonomous ships. J. Mar. Sci. Eng. 11(1), 17 (2022)

    Article  Google Scholar 

  40. Longo, G., Martelli, M., Russo, E., Zaccone, R., et al.: Collision-avoidance capabilities reduction after a cyber-attack to the navigation sensors. In: Conference Proceedings of the 2022 International Ship Control Systems Symposium (2022)

    Google Scholar 

  41. Ramos, M.A., Utne, I.B., Mosleh, A.: Collision avoidance on maritime autonomous surface ships: operators’ tasks and human failure events. Saf. Sci. 116, 33–44 (2019)

    Article  Google Scholar 

  42. Wu, Y., Pelot, R.P., Hilliard, C.: The influence of weather conditions on the relative incident rate of fishing vessels. Risk Anal. Int. J. 29(7), 985–999 (2009)

    Article  Google Scholar 

  43. Amro, A., Gkioulos, V., Katsikas, S.: Assessing cyber risk in cyber-physical systems using the ATT &CK framework. ACM Trans. Priv. Secur. 26(2), 1–33 (2023)

    Article  Google Scholar 

  44. Amro, A., Gkioulos, V.: Cyber risk management for autonomous passenger ships using threat-informed defense-in-depth. Int. J. Inf. Secur. 22(1), 249–288 (2023)

    Article  Google Scholar 

  45. Yousaf, A., Amro, A., Kwa, P., Li, M., Zhou, J.: Cyber risk assessment of cyber-enabled autonomous cargo vessel. In submission

    Google Scholar 

  46. Jun, L., Huibin, X.: Reliability analysis of aircraft equipment based on FMECA method. Phys. Procedia 25, 1816–1822 (2012). International Conference on Solid State Devices and Materials Science, April 1-2, 2012, Macao

    Google Scholar 

  47. Sulaman, S.M., Armin, B., Michael, F., Martin, H.: Comparison of the FMEA and STPA safety analysis methods-a case study. Softw. Qual. J. 27, 349–387 (2019)

    Article  Google Scholar 

  48. Rajaram, P., Goh, M., Zhou, J.: Guidelines for cyber risk management in shipboard operational technology systems. J. Phys. Conf. Ser. 2311, 012002. IOP Publishing (2022)

    Google Scholar 

Download references

Acknowledgments

First and foremost, the team wish to extend deepest thanks to Philip Kwa for his invaluable insights throughout the research process. The team are equally indebted to Dr Ahmed Amro from NTNU, whose expertise and collaborative efforts were fundamental in the risk assessment methodology. The team are also grateful to Dr Kimberly Tam from University of Plymouth, Dr Meriam Chaal and Dr Victor Bolbot both from Aalto University for their valuable discussions that enriched this research.

Author information

Authors and Affiliations

Authors

Corresponding author

Correspondence to Meixuan Li .

Editor information

Editors and Affiliations

Ethics declarations

Disclosure of Interests

The authors declare no conflict of interest. This research is supported by the National Research foundation, Singapore (NRF), Maritime and Port Authority of Singapore (MPA) and Singapore Maritime Institute (SMI) under its Maritime transportation Programme (Project No. SMI-2022-MTP-04). Any opinions, finds and conclusions or recommendations expressed in this material are those of the author(s) and do not reflect the views of NRF, MPA and SMI.

Rights and permissions

Reprints and permissions

Copyright information

© 2024 The Author(s), under exclusive license to Springer Nature Switzerland AG

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

Li, M., Yousaf, A., Goh, M., Zhou, J., Chattopadhyay, S. (2024). Guidelines for Cyber Risk Management in Autonomous Shipping. In: Andreoni, M. (eds) Applied Cryptography and Network Security Workshops. ACNS 2024. Lecture Notes in Computer Science, vol 14587. Springer, Cham. https://doi.org/10.1007/978-3-031-61489-7_9

Download citation

  • DOI: https://doi.org/10.1007/978-3-031-61489-7_9

  • Published:

  • Publisher Name: Springer, Cham

  • Print ISBN: 978-3-031-61488-0

  • Online ISBN: 978-3-031-61489-7

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics