Abstract:The integration of IT, OT, and human factor elements in maritime assets is critical for their efficient and safe operation and performance. This integration defines cyber physical systems and involves a number of IT and OT components, systems, and functions that involve multiple and diverse communication paths that are technologically and operationally evolving along with credible cyber security threats. These cyber security threats and risks as well as a number of known security breach scenarios are described in this paper to highlight the evolution of cyber physical systems in the maritime domain and their emerging cyber vulnerabilities. Current industry and governmental standards and directives related to cyber security in the maritime domain attempt to enforce the regulatory compliance and reinforce asset cyber security integrity for optimum and safe performance with limited focus, however, in the existing OT infrastructure and systems. The use of outside-of-the-maritime industry security risk assessment tools and processes, such the API STD 780 Security Risk Assessment (SRA) and the Bow Tie Analysis methodologies, can assist the asset owner to assess its IT and OT infrastructure for cyber and physical security vulnerabilities and allocate proper mitigation measures assuming their similarities to ICS infrastructure. The application of cyber security controls deriving from the adaptation of the NIST CSF and the MITRE ATT&CK Threat Model can further increase the cyber security integrity of maritime assets, assuming they are periodically evaluated for their effectiveness and applicability. Finally, the improvement in communication among stakeholders, the increase in operational and technical cyber and physical security resiliency, and the increase in operational cyber security awareness would be further increased for maritime assets by the convergence of the distinct physical and cyber security functions as well as onshore- and offshore-based cyber infrastructure of maritime companies and asset owners.

A Dynamic Visualization Platform for Operational Maritime Cybersecurity

Maritime Cybersecurity: A Comprehensive Review

Ship collision risk analysis: Modeling, visualization and prediction

Enhancing Maritime Cybersecurity through Operational Technology Sensor Data Fusion: A Comprehensive Survey and Analysis

Cyber Security in the Maritime Industry: A Systematic Survey of Recent Advances and Future Trends

Cyber Attacks on Maritime Assets and their Impacts on Health and Safety Aboard: A Holistic View

Enabling cyber resilient shipping through maritime security operation center adoption: A human factors perspective

Cyber Physical Systems Security for Maritime Assets

OCEANS: online collaborative explorative analysis on network security

Comprehensive Analysis of Maritime Cybersecurity Landscape Based on the NIST CSF v2.0

Maritime cybersecurity: protecting digital seas

Maritime Autonomous Surface Ships: A Review of Cybersecurity Challenges, Countermeasures, and Future Perspectives

STUDIES AND RESEARCH REGARDING VULNERABILITIES OF MARINE AUTONOMOUS SURFACE SYSTEMS (MASS) AND REMOTELY OPERATED VESSELS (ROVS) FROM POINT OF VIEW OF CYBERSECURITY

From sinking to saving: MITRE ATT &CK and D3FEND frameworks for maritime cybersecurity

Helping IT and OT Defenders Collaborate

Proposing the future skill requirements for maritime cyber security

Vessels Cybersecurity: Issues, Challenges, and the Road Ahead

Challenges in Maritime Cybersecurity Training and Compliance

A modular cyber security training programme for the maritime domain

A Survey on Cyber Security Threats in IoT-Enabled Maritime Industry