What is Cybersecurity in Seaports?

Seaports are the hub of global supply chain activities. With more than 90% of cargo around the world being transported by sea, it is no wonder that seaports play a significant role in global trade. Cargo ships take on board as well as discharge several hundreds of tons of cargo at seaports every day. From here, cargo is transported further inland by other modes of transport to reach their end customers.

A seaport is a centre of maritime facilities such as loading and unloading areas, warehouses, processing facilities, redistribution and transport facilities, customs, etc. Naturally, such hubs of activities are controlled and linked by computer systems and networks.

Most seaports depend heavily on information technology. They have integrated information technology into their activities to operate efficiently as well as to stay competitive. Such computer systems are managed and accessed through the internet making them vulnerable to cyberattacks.

Seaport information systems hold several thousands of gigabytes of sensitive information and other data. It can be catastrophic if this data falls into the wrong hands or is manipulated to reflect incorrect data. Cyberattacks can compromise a seaport systems network in the following ways:

• Block access to legitimate users
• Data theft and espionage
• Distortion and illegitimate distribution of data or deletion of data from the system
• Overload the system storage with useless data to the point of a system crash
• Unusually slow system speed, frequent system crashes, or system freezes

Cyberattacks can have severe and detrimental effects on seaport operations such as scheduling of vessels, traffic planning, loading and offloading of cargo, transport and labour arrangements, monitoring of storage space, communications, etc.

Such large-scale disruptions can affect the national economy and supply chain too. They have in the past caused several millions of dollars worth of loss to companies and economies and continue to pose a grave threat.

Cyberthreats and Cyberattacks

Threats to our computer systems and network are common these days. Hackers mainly access computer networks and information systems to gain access to sensitive data and sell it. They may also alter the data, destroy it completely, or corrupt the system, using malicious programs.

Cyberattacks lead to the disruption of an organization’s normal activities.

When it strikes organizations such as a seaport, the results can often be disastrous. Such attacks, if not addressed immediately can even lead to the collapse of the organization. Cyberattacks come in various forms such as malware, phishing and spoofing, code injection, etc. The idea is to create mayhem by breaching security systems, accessing sensitive information, selling such confidential data to competitors, distorting and distributing data, or deleting it.

Let us take a look at some of the tools that hackers use to breach and gain access to networks and information systems.

Malware

Malware is malicious software designed to disrupt computers or networks. It gets in through loopholes that may be present in a system. Worms, trojans, viruses, spyware, etc. are some of the malware that we commonly see today and they usually spread from one system to another.

Worms get into systems and spread across networks at an alarming rate. They overload the system to such an extent that the system is soon rendered unusable. Some of them can also alter or delete files.

Trojans are malware that often gets downloaded as innocent, normal programs. Once within a system or network, they are activated to create chaos. Viruses, on the other hand, execute themselves and spread rapidly to files and programs.

Spyware is a program that lodges itself onto computer systems and collects data and other information on the device as well as that of the users. Systems that are affected by spyware often have their data blocked or encrypted. Hackers then hold the legitimate owner to ransom for releasing or decrypting the data.

Code Injection

In code injection, codes are introduced into an application to alter the execution of a program. The newly introduced program then proceeds to corrupt the data and cause other vulnerabilities, leading to data leaks, or publishing of inaccurate information.

Phishing or Spoofing

Phishing is a method of deceiving computer users into revealing information. It is often designed in the form of simple system-generated questions and suggestions but, containing harmful links, sent through emails. They may look so innocent or genuine that users are prompted to answer or follow certain links.

Spoofing is the falsification of identity such that the user is trapped into believing that such questions and suggestions are from a trusted source. Clicking on fraudulent links often delivers malicious programs to the user’s system which then proceeds to extract sensitive data. Sometimes programs are designed to control a system remotely thereby compromising its security.

Cyber criminals gain access to data using such malicious tools. They then proceed to block data from authorized users, distort or delete the data, or hold the legitimate owner of the data to ransom by threatening to block, delete, or release their sensitive business information to competitors [ransomware].

Another motive of cybercriminals is to bring down a competing business organization as in the case of business rivalry, etc.

What is Cybersecurity in Seaports?

What is cybersecurity and why is it very important for seaports? A seaport information system may be especially vulnerable to cyber threats and attacks as it is a vast storehouse of valuable data. Seaports are also the gateway to a nation’s economy.

Different portals are exposed to several external individuals, agents, and organizations.

Seaport cybersecurity may be viewed holistically as a system comprising policies, procedures, concepts, guidelines, technologies, and tools. These have to be followed up through established best practices and training sessions.

A strong system of cybersecurity is essential to protect the systems, servers, network, programs, and data from malicious programs.

A dynamic and resilient disaster recovery plan is a must for any seaport. When most activities are designed to happen through the internet, vulnerabilities are more. Cybercriminals often target ageing software and network protocols of seaports.

Firewalls, Antivirus, Antimalware, and Other Measures

A firewall is a barrier used to block illegitimate access to a computer system or network. It also prevents the unauthorized flow of data from a network to outside servers.

Antivirus and Antimalware, on the other hand, are used to detect, sequester, and delete viruses from computer systems and networks. They provide real-time protection from known viruses and malware.

Most ports have dedicated cyber security teams to constantly monitor and track cyber threats. They conduct periodic risk assessments and audits and suggest appropriate measures to counter such risks. Cybersecurity teams are equipped to respond immediately to cyberattacks.

Modern seaports often have the latest and best firewalls that help filter and remove malicious software before they inflict severe harm to the system. Cross-border workshops addressing seaport cyber threats and security measures, and periodic information exchange with other seaports of the world help cyber security teams stay abreast of the latest happenings.

Most importantly, all seaport computer operating systems software should be kept updated to the latest versions. This will ensure that it is in line with the current and more strengthened built-in security features.

You might also like to read-

• Cybersecurity For Seafarers
• 11 Popular Books On Maritime Security
• What Are Smart Port Technologies?
• A New Seamanship Practice: Cyber-Discipline

About Author

Hari Menon is a Freelance writer with close to 20 years of professional experience in Logistics, Warehousing, Supply chain, and Contracts administration. An avid fitness freak, and bibliophile, he loves travelling too.

Read More Articles By This Author >

Related Articles

The National Maritime Centre: Providing Quality with Utility

Subsea Drilling: The What, Why and How

The Institute of Chartered Shipbrokers (ICS) Exams and What they Mean to an Average Shippy