Abstract:The integration of IT, OT, and human factor elements in maritime assets is critical for their efficient and safe operation and performance. This integration defines cyber physical systems and involves a number of IT and OT components, systems, and functions that involve multiple and diverse communication paths that are technologically and operationally evolving along with credible cyber security threats. These cyber security threats and risks as well as a number of known security breach scenarios are described in this paper to highlight the evolution of cyber physical systems in the maritime domain and their emerging cyber vulnerabilities. Current industry and governmental standards and directives related to cyber security in the maritime domain attempt to enforce the regulatory compliance and reinforce asset cyber security integrity for optimum and safe performance with limited focus, however, in the existing OT infrastructure and systems. The use of outside-of-the-maritime industry security risk assessment tools and processes, such the API STD 780 Security Risk Assessment (SRA) and the Bow Tie Analysis methodologies, can assist the asset owner to assess its IT and OT infrastructure for cyber and physical security vulnerabilities and allocate proper mitigation measures assuming their similarities to ICS infrastructure. The application of cyber security controls deriving from the adaptation of the NIST CSF and the MITRE ATT&CK Threat Model can further increase the cyber security integrity of maritime assets, assuming they are periodically evaluated for their effectiveness and applicability. Finally, the improvement in communication among stakeholders, the increase in operational and technical cyber and physical security resiliency, and the increase in operational cyber security awareness would be further increased for maritime assets by the convergence of the distinct physical and cyber security functions as well as onshore- and offshore-based cyber infrastructure of maritime companies and asset owners.

A Cyber-HIL for Investigating Control Systems in Ship Cyber Physical Systems under Communication Issues and Cyber Attacks

Vulnerability Analysis of Electrical Cyber Physical Systems Using a Simulation Platform.

A Cyber-Physical Platform to Assess Power System Operation With Communication Network and Heterogeneous Controllers

Cyber Protection for Malware Attack Resistance in Cyber-Physical Power Systems

Demo Abstract: A HIL Emulator-Based Cyber Security Testbed for DC Microgrids

Real-time controller hardware-in-the-loop co-simulation testbed for cooperative control strategy for cyber-physical power system

Cyberattack Models for Ship Equipment Based on the MITRE ATT&CK Framework

Controller Hardware-in-the-Loop Testbed of a Distributed Consensus Multi-Agent System Control under Deception and Disruption Cyber-Attacks

Hardware in the Loop Simulation and Control Design for Autonomous Free Running Ship Models

Resilience-Oriented Control for Cyber-Physical Hybrid Energy Storage Systems Using a Semiconsensus Scheme: Design and Practice

Cyber Physical Systems Security for Maritime Assets

Cyber-Physical Testbed for Power System Wide-Area Measurement-Based Control Using Open-Source Software

Physics-aware targeted attacks against maritime industrial control systems

Hybrid Cloud Based Cyber-enabled Ship Control and Management System.

Design Hands-on Lab Exercises for Cyber-physical Systems Security Education

Design and Testing of a Computer Security Layer for the LIN Bus

Cyber Risk Propagation and Optimal Selection of Cybersecurity Controls for Complex Cyberphysical Systems

PLC Cybersecurity Test Platform Establishment and Cyberattack Practice

The system dynamics analysis, resilient and fault-tolerant control for cyber-physical systems

Digital Substation Cyber Security Analysis with Syn-Flood Attack As A Simulation Case

On the Use of Safety Critical Control for Cyber-Physical Security in the Smart Grid