Maritime Cyber Security: Navigation and Ships’ Systems Maritime Cyber Security Roundtable...

Maritime Cyber Security:Navigation and Ships’ Systems

Maritime Cyber Security Roundtable DiscussionPresented by

The Combined Joint Operations from the Sea Centre of Excellence

and

Old Dominion University

CAPT David B. Moskoff, USMSProfessor of Marine Transportation

United States Merchant Marine Academy

Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

Location, Technology and E-Navigation• “Location” through precise positioning more important than ever

due many new factors:• Larger ships more cargo more $ at risk• Faster ships less reaction time, more area• Crew Size watch standers, fatigue, solo, safety• W/O Load info+, technology – i.e. GMDSS• Deeper Draft less UKC, bottom surveys• Technology skillsets/instincts dependency



For Example: Largest Container Ship (in 2006)EMMA MAERSK 170,974 GT397 m (1,302 ft)56 m (184 ft)15.5 m (51 ft)

Ship’s E-Nav Bridge EquipmentTechnology Recently Much More Sophisticated

• ECDIS (Electronic Chart Display and Information System)• AIS (Automatic Identification System)• LRIT (Long Range Identification and Tracking)• Radar/ARPA (Automatic Radar Plotting Aid)• Compass (Gyro, Fluxgate, GPS and others)• Steering (Computerized Automatic Steering System)• VDR (Voyage Data Recorder –”Black Box”)• GMDSS (Global Maritime Distress and Safety System)• Numerous other advanced units and systems


ECDIS Definition

An Electronic Chart Display and Information System is:

• computer-based navigation system-complies with IMO

• can be used as an alternative to paper navigation charts

• integrates a variety of real-time information• automated decision aid - continuously

determining ship’s position in relation to land, charted objects, navigation aids and unseen hazards


ECDIS Definition•

An ECDIS includes electronic navigational charts (ENC) and integrates position information from the Global Positioning System (GPS) and other navigational sensors, such as radar, fathometer and automatic identification systems (AIS). It may also display additional navigation-related information, such as sailing directions.


ECDIS Electronic Chart Display and Information System


AIS (Automatic Identification System)


ECDIS with AIS Overlay


AIS Symbols and Information


Note TCPA and CPA Above – Based on GPS Position Input

Shipboard Radar/ARPA Unit


Marine Radar Display - Sperry


ECDIS with Radar Overlay


Combining All Three on One Display


The ECDIS becomes the ultimate “Magic Box” that is an extremely valuable tool for the well-trained navigator when position input is accurate.

AIS and Radar Overlay on ECDISIntegrated with Compass, Depth and other sensors


IBS (Integrated Bridge System)Solo Watchstanding


Recent Technology Onboard Ships• The Good• The Bad• The Ugly

• CSL Thames Grounding: Not Enough ECDIS Training • ttp://www.youtube.com/watch?feature=endscreen&v=2m4JGoJZESs&NR=1• http://www.ntsb.gov/news/events/2009/san_francisco_ca/animation.html


http://maritimeaccident.org/2012/03/csl-thames-grounding-not-enough-ecdis-training/

http://maritimeaccident.org/2012/03/csl-thames-grounding-not-enough-ecdis-training/

http://www.youtube.com/watch?feature=endscreen&v=2m4JGoJZESs&NR=1

http://www.youtube.com/watch?feature=endscreen&v=2m4JGoJZESs&NR=1

http://www.ntsb.gov/news/events/2009/san_francisco_ca/animation.html

Important E-Navigation Terms PNT – Positioning, Navigation and TimingGPS – NavStar (U.S. Air Force) – Universal useDGPS - Differential Global Positioning SystemGNSS – Global Navigation Satellite SystemRSNS - Regional Satellite Navigation Systems

GLONASS (Russia), Galileo (EU), Compass (China)Beidou (China), QZSS (Japan), IRNSS (India)Electronic Charts, ECDIS/ECS, Track Control, AIS,LRIT, IBS, LF, Loran C and Enhanced Loran (eLoran)


GPS/GNSS is an ENav ConcernECDIS [and AIS] Position Input

• Commercial Ships – C/A Code• Primary and Secondary Inputs• Typically from GPS/GLONASS Today• Galileo and Compass in Future• LF System - eLoran as Backup


THV GALATEA – Lighthouse Tender


THV GALATEA – Lighthouse Tender


http://upload.wikimedia.org/wikipedia/commons/1/11/THV-Galatea-1.jpg

…..from article by David Hambling on THV GALETEA

….When Last activated the jammer, the ship went haywire. According to the electronic display on the ship's bridge, the Galatea was suddenly flying at Mach speeds over northern Europe and Ireland.

The ship's navigation backup - its gyrocompass- crashed, because it uses GPS to provide corrections. The radar did the same. Even the ship's satellite communications failed, because GPS points the antenna in the right direction. "The crew were well trained and briefed, so they knew what was going on," says Last. "But, like us, they were surprised.“ http://www.gla-rrnav.org/radionavigation/gnss_dgnss/vulnerabilities.html


http://www.gla-rrnav.org/radionavigation/gnss_dgnss/vulnerabilities.html




GPS/NavStar – The U.S. Satellite SystemSome Known Vulnerabilities of GPS/GNSS Systems:1. Low power signal strength - inherent weakness2. Potential for unintentional interference3. Potential for intentional jamming or interference4. Potential for spoofing (hacking) and meaconing5. Potential for EMP to destroy receiver electronics6. Technical failure(s) of satellites (constellation) 7. Exposure of satellites to kinetic or laser attacks http://www.youtube.com/v/Uk7DVpCkgwQ&hl=en


http://www.youtube.com/v/Uk7DVpCkgwQ&hl=en

http://www.youtube.com/v/Uk7DVpCkgwQ&hl=en


http://www.alibaba.com/product-gs/386981063/EST_808LC_Portable_Military_blocker.html

High Power Mobile Phone & GPS(L1)/WiFi/Bluetooth Signal Jammer

Output power is 320 watt.The shielding radius is from 300-500 meters...Model Number: KTC-VU Jammer 2.0 Pelican Min. Order: 5 PiecesPort: Shenzhen Supply Ability: 50 Pieces per Day




http://www.alibaba.com/about/en/Common/index.html

Why Conduct Intentional Activities?A. PNT Signal is Critical to Infrastructure• Criminals – PNT regulates Banking and Finance• Hackers – Government, IT, Defense, Commercial• Terrorists - Defense, Government, Energy, IT, Communications,

Nuclear Industry, Banking, Transportation, Water, Chemical, Agriculture and Food, Emergency Services, Finance, more

• Extremists - ??????????????????????????• Military – Electronic Warfare (EW) & Cyber• Pirates – Hijack Ship, Ground Ship, Steal Cargo



Examples: Other ENav/GPS Concerns• ECDIS is a Computer Subject to Viruses, etc.

• IT Attacks Against Ship (i.e. Spearfishing) http://www.transas.com/support/chart_corrections/

http://www.transis.com/support/chart_corrections/

• Military Using Commercial GPS – C/A Code• http://www.youtube.com/watch?v=fVxDVUsiejQ&feature=related

• Lack of Low Frequency(LF) eLoran-Type Backup

• Electromagnetic Pulse Attack (EMP) Kills All?Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

http://www.transas.com/support/chart_corrections/





http://www.youtube.com/watch?v=fVxDVUsiejQ&feature=related

http://www.youtube.com/watch?v=fVxDVUsiejQ&feature=related


Quick Look at GPS and eLoranGPS: Weak Transmitting Signal Strength

High Frequency Bands – L1, L2, L5Satellite Based – High OrbitingFairly Easy to Jam/Spoof

eLoran: Powerful Transmitting Signal StrengthLow Frequency Band – 100 KHzTerrestrial Based – Secure StationsVirtually Impossible to Jam/Spoof

Both: Very High Accuracy Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED


eLoran – The Terrestrial SystemEnhanced Loran (eLoran)

What is it? How does it work? What are its benefits? How much would it cost? Why isn’t everyone funding it? What’s the current status?


What Can Ships Do? Options?• Use GPS/GNSS receivers (+$15) that detect spoofing and

jamming to warn users.• Provide as many inputs to navigation positioning as

possible – i.e. LF eLoran - especially in coastal/shallow areas.

• Use Parallel Indexing and Cross Indexing Radar Techniques routinely.

• Use ECDIS/ECS units with both a primary and a secondary input at all possible times in all available areas.


What Can Ships Do? Options?• Maintain Skillsets: Piloting, Celestial, Instruments

(fathometer, fathograph)• Audit and Test ships for jamming and other

vulnerabilities: test in open water areas under controlled conditions.

• Conduct ship drills (like fire drills) on regular basis: consider GNSS failure, GNSS jamming, GNSS spoofing, equipment failures, EMP attack, etc.


Just Don’t Put All Your Eggs in One Basket


United StatesMerchantMarine

Academy


CAPT David B. Moskoff, USMSProfessor of Marine Transportation

United States Merchant Marine AcademyMaster Mariner – USCG Unlimited

[email protected]


Questions? Comments? Discussion?

Maritime Cyber Security: Navigation and Ships’ Systems Maritime Cyber Security Roundtable...

Documents

Transcript of Maritime Cyber Security: Navigation and Ships’ Systems Maritime Cyber Security Roundtable...