LONDON — Humans aren’t the only ones to have had their travel plans ruined by the coronavirus. A robot-powered boat that was due to cross the Atlantic this month has been forced to delay its voyage until next April after the virus caused complications in its development.

The autonomous 15-meter trimaran has been built to push the boundaries of autonomous shipping while gathering scientific data on the ocean. The Mayflower Autonomous Research Ship (MAS for short) is being led by marine research organization ProMare, while IBM is the main technology partner.

The solar-powered vessel is set to start trials off the south coast of England in the coming weeks and it will be officially unveiled on Sep. 16, the 400th anniversary of the Mayflower departure in 1620. After that, it will go on several voyages and missions over the next six months ahead of a transatlantic voyage in April 2021.

During that transatlantic crossing, the ultramodern ship will broadly retrace the Mayflower’s original route from Plymouth to Cape Cod’s Provincetown.

A computer-generated image of the new Mayflower vessel.
A computer-generated image of the new Mayflower vessel.
University of Birmingham’s Human Interface Technologies Team (HIT)

Andy Stanford-Clark, chief technology officer for IBM U.K. and Ireland, who’s leading the science on the ship, told CNBC that the vessel relies on an onboard AI Captain which uses computer vision, automation software and Watson technology — IBM’s most notable AI platform.

The ship’s operators tell the Mayflower where they want it to go and then it will figure out how to get there itself, considering the weather, ocean currents, collision regulations and other variables. The Mayflower can also react to ocean traffic in real time using a combination of radar, cameras, and the Automated Identification System (AIS), which transmits information such as the Mayflower’s latitude and longitude to other boats.

While AI does not control every aspect of the Mayflower, it does play a significant role in the ship’s operations.

Onboard experiments

Inside the boat, instead of there being crew, living quarters, a bathroom, a galley, beds and so on, there are science experiments.

Various organizations have pitched experiments that they’d like the Mayflower to carry out while at sea.

One of them is a water analysis experiment that samples the seawater every few hours and stores it in roughly 100 bottles that are capped and kept in a crate onboard ready for human inspection back on land. “Because we’ll know exactly where in the ocean we took the sample, we can say at this point, the salinity was this, the algal bloom quantity was this, the pH was this, and the oxygen levels were this,” said Stanford-Clark.

The Mayflower ship's main hull being transported to a wharf in Plymouth for final assembly.
The ship’s main hull being transported to a wharf in Plymouth for final assembly.
IBM

Scientists at the U.K.’s Plymouth University will analyze the same samples to determine microplastic levels at various points in the ocean.

IBM claims it has also developed a system that can identify whales and the pod they’re from based on their song, which is picked up by an onboard hydrophone. “We’re training an AI to listen for whale songs,” said Stanford-Clark. The same hydrophone is used to listen out for faults on the Mayflower.

There’s another project that will involve analyzing the shape of the Earth. “We’re going to use very accurate GPS to measure exactly the level of the ocean, and then subtract the tides and the weather and the wind and use that to get a unified model,” said Stanford-Clark.

Journey time

The original 30-meter Mayflower took 66 days to carry pilgrims from the U.K. to what is now the U.S. But the new one will take two to three weeks, depending on weather.

Director of the Mayflower project, Brett Phaneuf, told CNBC that the new Mayflower is packed full of technology the original pilgrims wouldn’t have been able to comprehend. But it’s important not to get carried away. “It’s not a Terminator,” he said. “It’s not going to take over the world and it’s not going to chase all our ships off the ocean. It’s a democratizing technology that will help us collect vast amounts of unfamiliar data about the ocean.”

“The interesting thing about Mayflower is there’s nobody to get tired or bored or lonely or injured,” said Phaneuf, pointing out that the vessel can go as fast or as slow as it likes for as long as it wants. “If something is interesting, or new, it can be diverted for next to no money.”

There’s every chance that the ship will encounter problems on the transatlantic trip but Phaneuf believes it’s robust enough to make it. He said it will take something idiotic and mundane to stop it, such as the rudder getting jammed by a log.

Covid-19 disruptions on manned research vessels

The new Mayflower could signify a change in the way ocean research is carried out in the future.

Coronavirus disruptions on manned research vessels are leading to a reduction in data about the weather and climate change, according to UNESCO’s Intergovernmental Oceanographic Commission.

Reduced air travel means there’s a dearth of weather data from the skies as well.

All these disruptions could result in less accurate weather forecasts and climate models, the Commission has said.

The future of autonomous shipping

In many ways, IBM is testing the water for the future of autonomous shipping with the Mayflower.

Allied Market Research thinks the autonomous shipping market could be a $135 billion industry by 2030 and IBM is weighing up where and how its technology can be used.

Stanford-Clark believes that AI captains could be used to “look over the shoulder” of a human captain.

“That same technology that we’re putting in Mayflower will also be able to operate in a guardian angel sort of mode,” he said, adding that there’s a huge amount of interest in this technology from big shipping companies.

He believes there’s a “big opportunity” for container ships to become autonomous in the future, adding that it would help to keep supply chains open during pandemics.

Autonomous cars get all the attention but autonomous shipping is potentially even more useful.

“Everyone wants to see what we’re doing with Mayflower first but people are lining up to have these kind of conversations,” said Stanford-Clark.

Source: cnbc


The British Ports Association (BPA) has opened a call for evidence from the wider maritime community on what ports should consider to prepare for receiving autonomous ships in the future.

This is part of its new initiative looking at the implications of autonomous shipping for UK ports. The call for evidence will feed into the BPA’s own MASS analysis as well as its discussion with industry partners through bodies such as the industry umbrella group Maritime UK. As part of the initiative, the BPA is also creating a new Autonomous Shipping in Ports Network.

Richard Ballantyne, chief executive of the BPA, said: “The prospect of seeing autonomous ships in UK ports is definitely on the horizon but there will be much to do to prepare ourselves. This includes the consideration for port and marine operations, regulatory frameworks, infrastructure and receptions facilities, land to vessel communications and vessel safety.

“Although we are at the early stages, a lot of work is taking place across the maritime community. Many UK ports are now starting to ask what they should be considering as they develop their ports and recruit the next generation.

“This will be an ongoing initiative for the BPA but initially we are inviting evidence from a cross section of maritime sector organisations. This will be in relation to issues that they see specific in to ports and harbours moving forward into autonomous maritime operations. It will also help us to support and participate in various government initiatives in the UK such as Maritime 2050, the work of the Maritime Skills Commission and other innovation, sustainability and infrastructure projects.”

The BPA’s new Network will be open to all its port members, but it will also be drawing on external expertise from specialists working in the marine and MASS sectors.

The BPA will accept submissions to the call for evidence until 12 October.

Source: portstrategy


InterManager – the international trade association for ship and crew managers – has today published an open letter addressed to Mr Kitack Lim, the Secretary-General of the International Maritime Organization, on behalf of its members and associates.

 

The letter urges Mr Lim to offer more support to the global maritime industry with regards to the Singaporean repatriation issue.

 

Several major seaports throughout Asia have tightened crew change restrictions and stepped up screening of seafarers in recent weeks as the coronavirus stages a global resurgence.

 

The Maritime and Port Authority of Singapore recently issued correspondence stating that “the MPA will be giving priority to crew change applications from Singapore-registered ships and applications for sign-off crew only, without signing-on new crew,” a release which has prompted InterManager to issue an open plea to the IMO’s Secretary-General.

 

Speaking of the situation, InterManager’s Secretary-General Capt. Kuba Szymanski said: “If the same rules issued by the MPA of Singapore were applied to all Flag States, it would pose a very dangerous narrative, as ships of other Flag States would not be allowed to perform crew changes anywhere in the world.

 

“We – ship managers – would be unable to change off-signing crew because they would immediately be in breach of safe manning regulations.

 

“We completely understand the concerns that Singapore has, and we support their efforts to look after their citizens. However, no ships means no supplies, so a collaboration between the shipping sector and local administration is of paramount importance, and needs to be a two-way street.”

 

The measures implemented by the MPA of Singapore follows a set of best practices issued on 24th July in light of a resurgence of coronavirus cases, which included isolation periods for on-boarding and off-boarding crews, as well as virus testing.

 

InterManager believes that the restrictions imposed on non-Singapore-registered vessels creates a myriad of issues to the safety of seafarers, and presents a significant breach of seafarers’ humanitarian rights.

 

“Their approach is everything but human-centric,” said Capt. Szymanski.

 

Capt. Szymanski said that officials in Singapore have less than concrete action to help crew repatriation in these troubling times. Recommendations suggested by the MPA are not practical, and InterManager is encouraging anyone who did manage to carry out crew changes in Singapore to get in touch in order to keep a good record of the scale of the problem.

 

“Presently, our records show zero crew changes for non-Singapore ships, for both on and off-signing crew changes,” said Capt. Szymanski.

Source: intermanager


There’s hardly anyone buying new ships, with orders plunging to a 20-year low due to a potent combination of uncertainty over environmental regulations, the economic fallout from the coronavirus pandemic and a lack of financing.

“The IMO has brought in significant, ambitious and important targets around emissions,” said Clarksons Research’s managing director Stephen Gordon. It remains unclear the exact policies and regulations that might be introduced and what technology will be adopted, he said. Ships are long-term investments, and buyers run the risk that their vessels will become obsolete.

Read more on the green fuel future of shipping

The global shipping industry is in the midst of one of its biggest changes in a generation after stricter environmental rules kicked in at the start of the year. Ship owners face paying more for cleaner fuel, retrofitting ships with pollution-reducing scrubbers or even ordering new vessels. Compounding the uncertainty has been Covid-19, which has upended supply chains and stalled trade flows.

“Covid-19 has become the most immediate issue,” Gordon said. While challenges due to lockdown measures are easing, “the economic uncertainty, disruption to trade, and volatility in freight rates” caused by the virus are driving orders lower.

Demand growth for containers is expected fall this year due to Covid-19, according to A.P. Moller-Maersk A/S, which predicts a return to 2019 volumes in the early part of 2021. The world’s largest container line ordered only eight vessels in the second quarter, putting its orderbook-to-fleet ratio at 9.4%. Globally, the rate is about 8%, meaning orders for new ships are at a two-decade low, according to Clarksons’ Gordon.

“The virus is a further hit to demand that’s already barely even there,” said Rahul Kapoor, head of commodity analytics & research, maritime & trade at IHS Markit. “With the pandemic’s hit to economic activity and supply chains, ordering new ships is now the lowest priority for companies. They’re concentrating on just trying to maintain profit margins.” The virus has also delayed the completion of shipbuilding projects, he said.

Finance Crunch

Shipowners are also lacking the finances to make purchases, according to Ralph Leszczynski, head of research at shipbroker Banchero Costa & Co.

“Most shipping markets are coming from a relatively poor decade, 2009 to 2019, in terms of earnings so most shipowners do not have that much cash in their pockets,” he said. “External finance is also in short supply as banks are now largely steering clear off shipping after the defaults they suffered after 2008.”

Still, fewer orders and slower fleet growth will likely bolster shipping rates. Lines are likely to continue to keep capacity in check into 2021 to minimize the impact from slowing global trade, said IHS Markit’s Kapoor.

The cost of moving goods by ship from Hong Kong to Los Angeles surged

That’s already translating to increasing costs for transporting goods by ocean liner, with one benchmark of trans-Pacific container rates more than doubling since late-May to a record. Bulk-carrier costs have also rebounded from a four-year low. Maersk, which idled about 20% of its capacity in April before gradually reinstating it in subsequent months, saw earnings beat estimates in part due to improved freight rates.

Big Ships, Small Ships

The offshore sector has seen demand for oil rigs and supply vessels hammered as energy prices remain low and there’s little interest in new exploration investments, said Leszczynski. It’s a “gamble” to purchase an oil tanker amid uncertainty over demand, he said. While oil consumption has grown in the past two decades, climate change mitigation efforts are spurring market expectations that appetite will decline.

While the coronavirus adds to short-term uncertainty, there’s a better medium-to-long term outlook. Qatar signed a deal in June worth around $19 billion with South Korean shipbuilders for more than 100 liquefied natural gas vessels, Maersk expects a progressive recovery in volumes and port operator DP World said it’s positive on fundamentals.

The shipbuilding sector is set to remain subdued for the next few years, with a revival possible eight to 10 years from now, said Leszczynski. Vessels built during the boom years of between 2007 and 2010 will require replacement, as most have a lifespan of about 20 to 25 years, he said.

— With assistance by Kyunghee Park
Source: bloomberg


To allow for the “speedy and safe travels” of seafarers during the coronavirus disease (Covid-19) pandemic, the Maritime Industry Authority (MARINA) said it has communicated the country’s guidelines for the establishment of a “green lane” for seafarers to the International Maritime Organization (IMO).

In a statement on Tuesday, the MARINA said the guidelines, made in response to the IMO’s recommendations for safe ship crew changes during the pandemic, would allow for the safe and swift disembarkation and crew change of seafarers in the country.

“These guidelines were formulated through an inter-agency effort in order to expedite the travels of seafarers involved in deployment, disembarkation, and crew changes by establishing a Philippines Green Lane,” the MARINA said.

The Department of Foreign Affairs and other government agencies in July signed the Philippine Green Lane Joint Circular that would facilitate the creation of controlled travel lanes to stimulate the country’s economy through the safe and efficient movement of seafarers.

In a message, Luisito “Lui” delos Santos, officer-in-charge at MARINA’s Management Information Systems Service, said the IMO will issue a circular to its member states in response to the Philippines’ new policy on the travels of seafarers and crew change.

“This will serve as guidance for seafarer-foreigners joining their ships docked in the Philippines, disembarking from a foreign ship docked in the Philippines to an international gateway for purposes of repatriation, and foreigners transiting in a Philippine international gateway,” delos Santos said.

He added that other member states of the IMO are also encouraged to communicate to the IMO their policies and practices relating to crew change and the movement of seafarers.

MARINA said it has issued Advisory 2020-60 and 2020-61 that both highlight various crew change protocols from other IMO member states for the use of licensed manning agencies, ship owners, ship operators, and other concerned entities in the Philippines’ maritime sector.

On August 22, MARINA launched the country’s third crew change hub at the Subic Bay Freeport Zone—after the Port of Manila and Port Capinpin in Orion, Bataan.

Late in July, MARINA released new protocols that limit crew change activities to crew change hubs or ports that have been adapted for health and safety procedures such as testing for Covid-19 upon disembarkation of seafarers and crew changes, among others.
Source: PNA


Further digitalisation in ports is increasing their vulnerability to hackers and cyber attacks. As more technology is linked to the internet, the frequency of these threats and chances of a successful breach increases.

Cyber security needs to be improved in ports before internet of things (IoT) is introduced into port infrastructureWith more automation in ports, some of these networks are overlooked by IT teams and could be vulnerable to hackers, said University of Plymouth, Faculty of Science and Engineering lecturer in cyber security Kimberly Tam.

She was speaking during Riviera Maritime Media’s Where port security meets cyber security webinar. This was held at the beginning of Riviera’s Maritime Cyber Security Webinar Week, in association with Maritime Transportation System – Information Sharing and Analysis Center (ISAC), on 4 August.

Dr Tam, who is also academic lead of the university’s Cyber-Ship Lab, said even having back-up systems may not be secure enough.

“Our world is changing. There is more technology and possibilities to create new crimes, which is increasing cyber attack risks,” she said. There have been “leaps in autonomy and information sharing” that is creating vulnerabilities.

“We have seen cyber attacks on infrastructure, energy networks, ports and on port cranes,” Dr Tam continued. “As there is more remote monitoring with sensors, there are new devices that can be hacked.”

Supervisory Control and Data Acquisition (SCADA) networks are particularly vulnerable to hackers due to their weak defence. “SCADA networks get overlooked by IT specialists,” said Dr Tam.

More worrying for port operators is their inability to detect if there has been an intrusion into their IT, SCADA or IoT networksDr Tam said would-be hackers could be snooping inside servers undetected. “Hackers would need a lot of reconnaissance of maritime and port servers,” she explained. “We are unable to see who is inside these networks.”

Port operators may not know the intentions of potential hackers or ransomware until it is too late. Hackers could be inside servers to steal information, feed misinformation about manifests, or to input ransomware. “It is not just smash and grab,” said Dr Tam.

With more IoT application in ports, vulnerability of operational technology (OT) to cyber threats is increasing, reducing the air gap between this technology and the connected network. Dr Tam warned these trends lower the security within OT to cyber threats.

If port operators introduce redundancy into IT and OT this could improve security and recovery after an intrusion. “But if this redundancy is too similar, they will have the same vulnerabilities,” said Dr Tam.

University of Plymouth is researching appropriate risk assessment for cyber and cyber-physical systems in maritime and in ports. It is looking at IT and OT systems, with the “aim of giving people information critical for cyber safety and cyber resilience in this sector”, said Dr Tam.

“We are looking at specific case studies for cyber security at ports and we are talking to many in the cruise, container and oil sectors.” The university is considering the plausibility of attacks, calculating realistic risks and the cost of a port cyber attack.

University gains US$3.9M funding for bridge system assessment platform

University of Plymouth’s maritime cyber threat research group’s Cyber-Ship Lab project has made significant progress since it secured £3M (US$3.9M) combined Research England and industry funding in January.

It is creating a unique platform to reproduce any ship’s bridge systems – in service or under development – to assess their cyber risk.

This project has 20 partners on board. More are expected to follow as the research group has gained 150 additional expressions of interest from shipbuilders, maritime IT and operational technology manufacturers, classification societies and insurers.

Named partners include BMT UK, BT Ventures, Eaton, Hensoldt UK (formerly Kelvin Hughes), Altran Group’s Information Risk Management and Lloyd’s Register’s Nettitude.

This project is in the design and build phase. This involves acquiring an extensive and comprehensive collection of in-service or under-development ships’ bridge equipment such as voyage data recorders, radars, automatic identification systems, ECDIS, firewalls, switches, and uninterruptable power supplies.

Various partners have committed to, or are in discussions about, providing their experts’ time or real-world datasets to populate the Cyber-Ship Lab platform.

The group has secured an additional £160,000 (US$207,843) MarRI-UK funding for its Maritime Cyber Risk Assessment framework (MaCRA) work. This has progressed to the market validation stage of the UK Government’s Department for Digital, Culture, Media & Sport’s cyber security academic start up accelerator funding competition, Cyber-ASAP.

Meanwhile, as part of its Cyber-MAR project involvement, the research group is progressing complementary cyberrange work with specialised European container port authorities, enabling them to assess cyber risk and build threat resilience.

Source: rivieramm


In the digital age, information security and data safety issues are critically important. Even large IT companies that are developing complex software and hardware solutions, Internet platforms and IoT (Internet of Things) devices often cannot provide the required level of cybersecurity. Everyone is aware of the latest cases of information leakage and hacking of the protection of such companies as Twitter, Garmin, Intel and other huge industrial players, which were attacked in 2020. And this has an impact on us all, because we or our friends and relatives can be users of any of these products.

Cybersecurity has a huge potential to affect the safety of the crew, vessel, cargo and even ports. Cybersecurity is concerned with the protection of IT systems, onboard hardware and sensors and data leak from unauthorised access, manipulation and disruption. Cybersecurity policies and plans cover different types of risks like information integrity, system and hardware availability on board and in the office of the shipping company. Different incidents can be as the result of:

  • Problems with data transfer from the shipping company to the vessel and vice versa. For example, incorrect transfer of charts from the shipping company to vessel’s ECDIS can cause delay in voyage or even possibility to reset all charts already installed on ECDIS
  • Problems with onboard equipment and hardware. Not every member of the crew knows what to do with every operational equipment installed on board in case of disruption or even disaster. That can lead to more heavy consequences with vessel operations
  • Loss of or manipulation of external sensor data, critical for the operation of a ship. Not to tell about the problems that may occur if vessel systems or shipping company systems will be attacked by hackers.

These are just examples of what can happen with the systems of the ship and the shipping company. With the development of information technologies in maritime logistics, such problems will arise more often if measures are not taken to prevent them in advance.

Cyber Risk Management should:

  • Define the roles and responsibilities of users, key personnel and management both ashore and aboard
  • Identify systems, assets, data and capabilities that, if breached, could pose a threat to the operations and safety of the ship
  • Implement technical and procedural measures to protect against cyber incidents and ensure business continuity
  • Carry out activities to prepare for and respond to cyber incidents.

The company’s Cyber Risk Management plans and procedures should complement the existing security risk management requirements of the ISM Code and the ISPS Code. Cybersecurity should be seen at all levels of the company, from top management onshore to onboard personnel, as an integral part of the safety culture required for the safe and efficient operation of a ship.

Vessels are increasingly integrated with onshore operations as digital communications are used to conduct business, manage operations, and keep in touch with office managers. In addition, critical vessel systems required for the safety of navigation, power supply and cargo management are increasingly digitized and connected to the Internet to perform a wide range of legitimate functions, such as:

  • Monitoring of engine operation
  • Service and management of spare parts
  • Loading, handling, crane, pump control and laying planning
  • vessel performance monitoring.

It is important to protect critical systems and data with multiple layers of safeguards that address the role of people, procedures, and technology to:

  • Increase the likelihood of detecting a cyber incident
  • Increase the effort and resources required to protect information, data or the availability of IT hardware.

Connected hardware on board should require more than one technical and / or procedural protection. Perimeter defenses such as firewalls are important to prevent unwanted intrusion into systems, but may not be sufficient to combat internal threats.
This defense in depth approach encourages a combination of:

  • Physical safety of the vessel in accordance with the ship security plan (SSP)
  • Network protection, including efficient segmentation
  • Intrusion detection
  • Periodic scanning and testing of vulnerabilities
  • Software whitelist
  • Access and user controls
  • Appropriate procedures regarding the use of removable media and password policies
  • Staff awareness of the risks and familiarity with the relevant procedures.

But how important is cybersecurity in the maritime industry?

cyber risk management approach

Marine Digital Fuel Optimization System is a cloud-based system hosted at Amazon facilities in compliance with cybersecurity requirements.

AWS IoT Core provides automated configuration and authentication upon a device’s first connection to AWS IoT Core, as well as end-to-end encryption throughout all points of connection so that data is never exchanged between devices and AWS IoT Core without a proven identity.

AWS IoT Device Defender audits device-related resources (such as X.509 certificates, IoT policies, and Client IDs) against AWS IoT security best practices (e.g., the principle of least privilege or unique identity per device), continuously monitors our device fleets to detect any abnormal device behavior that may be indicative of a compromise by continuously monitoring high-value security metrics from the device and AWS IoT Core (e.g., the number of listening TCP ports on your devices or authorization failure counts).

Case study of data protection and cyber security by Marine Digital

Cyber risk management approach in shipping

The importance of cybersecurity in the maritime industry

Marine Digital FOS box (hardware part, which installed on a vessel) consists of a Data Collection Unit (DCU), a power supply, and a GSM modem, all-in-one robust enclosure, interfacing with the sources of input signals via a read-only NMEA connection, that pulls in data integrated sources, encodes and records it to the integrated storage, and then uploads the collected data to the cloud data lake when a GSM connection is available, autonomously from the shipboard systems. So there is no way to access the equipment on board.

Source: marine-digital


Development of Autonomous ship technologies in Korea compared to Europe.

It is undeniable that Korea is a leading country in the shipbuilding industry. After Hyundai Heavy industries entered shipbuilding in 1968, Korea got ahead of Japan becoming the 1st in the global shipbuilding industry and rose to the number five spot as a maritime powerhouse. Nonetheless, it is said that the technology development of autonomous ships in Korea is about 5 years behind compared to Europe.

Many companies around the world are working on maritime autonomous surface ships, among which Kongsberg and Rolls-Royce seem to be more ahead of others. As Norway’s Kongsberg Maritime acquired Rolls-Royce Commercial Marine in April 2019, they are now fully integrated and the autonomous shipping projects are being conducted under a new organization.

Korean technological innovation toward autonomous ships

Recently, the Korean government announced $132 million will be spent on developing autonomous sailing technology for six years, to achieve the goal of commercializing oceangoing ships that meet level 3 autonomous navigation defined by the International Maritime Organization (IMO).

To realize a fully unmanned autonomous ship soon, the technology development of autonomous vessels such as intelligent navigation system, instrumental automation systems, communication systems, and land operation management system is required and best combined to allow a vessel to operate safely.

Three big shipbuilders in Korea – Hyundai Heavy Industries, Samsung Heavy Industries, and Daewoo Shipbuilding and Marine Engineering – have already set out to the sector, and their current autonomous ship solutions can reach the first stage of ship autonomy.

However, none of them have yet to reach the stage of remotely controlled ships. Most important about autonomous ships is how to combine maritime ship equipment with information, communication technologies with operational technology ensuring cyber-security and establishing massive infrastructure, where autonomous ships will operate with smart docking systems at ports, other maritime facilities.

Smart docking at a port ©Roll-Royce

What technology is needed and how can it be best combined to allow a vessel to operate autonomously?

The technology needed to make a vessel operate autonomously consists of three main parts, ship control systems, digital connectivity from ships to shores, and onshore infrastructures. The first one concerns what the vessels run autonomously. Subsystems such as sensors, positioning systems, other technologies can detect obstacles on a voyage should reliably, securely function. The data gathered from sensors are jointly collected, what is called sensor fusion, and goes back into the vessels’ autonomous navigation system to make decisions based on it. This is a part of the integration occurring of information, communication technologies and operation technology. Many experts worry that autonomous ships can be hijacked as this system is vulnerable to hacking, putting stakeholders at risk.

The autonomous navigation of vessels is similar to self-driving cars in terms of scanning surrounding and detecting obstacles using vehicle sensors like camera, radar, and lidar. However, it is also different than a self-driving vehicle in that every vessel in a certain size is tracked. monitored under the Automatic Identification System (AIS), an automatic system using transceivers on ships, which provides much more information for ship autonomous navigation systems than is available to cars. Vessels sailing on the open oceans also go slower than cars.

For an autonomous ship to auto berth and cross, many sensors on the ships which interact with the main system can allow the ship to dock without crews on board. Even when a ship on this technology, however, is fully operated without crews, it should be connected to a control station, where humans would remotely monitor the ships and their sensors and should be able to take control manually for security as well. Moreover, full autonomy is not the first stage, we would reach middle levels of automation before going fully unmanned.

The Korean government is supporting the project for maritime transport, where a vessel can be controlled remotely when the crew on board first. Even this partial automation can help reduce costs and ease the burden of maritime companies in shortage of laborers. The labor shortage has been a known issue in the shipping industry as it is hard to find qualified employees. So, automation, whether full or partial, can help fill the gap of shortage.

However, this probably means that the technology requires new workers to become more qualified. Although a study of the social impact shows that workers could lose their jobs in several maritime areas due to automation, new jobs can simultaneously be created such as controlling MASS remotely due to there being a control center.

What will be the potential threats for owners and operators of autonomous vessel in the future?

As the benefits of autonomous vessels are multiple and tempting, a variety of organizations, private or public, within the maritime industry have turned toward autonomy to address impediments associated with ship transportation. Progresses in machine learning, ship sensors, and related technologies are not only making the autonomy of ships increasingly feasible but economically attractive. Autonomous vessels are expected to reduce operating expenditures since costs with their crews, all human support facilities, systems, and storage removed.

However, despite these cost-effective advantages, potential threats associated with cyber-attacks must not be neglected. The risks and vulnerabilities linked to autonomous shipping should be anticipated and properly managed with the related technologies advancing. Increased interconnectivity between vessels and onshore infrastructure also increases potential cyber-attacks on ships. Therefore, it is essential to weigh the cyber-risk contours to rank and mitigate any vulnerabilities. As Operational Technology (OT) systems are increasingly automated, the maritime industry has already witnessed cyber-security incidents which led to ships going off their course.

While the existing ships rely on separate systems for managing OT functionality such as bridge, propulsion, and power control, these systems seem to reach the end of life with new technologies adopted. Maritime company owners and operators have been getting OT systems locally and remotely connected via satellite communications and the internet, leading ultimately to a convergence of IT and OT. Sensors on equipment onboard ships transfer data through communication technology (CT). These new integrated technologies are a double-edged sword, which can enable autonomous systems to operate smoothly but put also the growing automation at a greater risk.

To tackle growing concerns about security threats, IMO has a deadline of 1st January 2021 for Maritime Cyber Risk Management to be addressed in ships’ Safety Management Systems. The main focus of the cyber-security program is to put measures in place to protect both OT and IT. It is estimated that cyber-attacks on the maritime industry operation technology (OT) systems have dramatically increased over the last three years.

As these cyber-attacks can have economic impacts and ripple effects on port infrastructures, it might not be easy for vulnerable ports to be fully recovered through insurance policies after OT systems are attacked. The network connecting traffic controls, cranes, vessel berth systems, and cargo handling systems are currently under threat and will be more venerable to cyberattacks especially after fully or partially autonomous vessels emerge in ports. To make matters worse, unlike IT systems, OT systems are more vulnerable to threat as they don’t have a dashboard which allows operators to monitor the condition of all connected systems. The maritime industry progressing towards more digitalization and increasing the reliance on networked and autonomous systems, more numerous vulnerabilities will keep emerging

Unless systems on vessels are properly managed, a large loophole of new cyber-security for hackers to break into can spring up intimidating. With the maritime industry and its digital exposure getting similar to industrial systems and OT, maritime companies must go faster into the direction of protecting their systems and provide a reliable and safe operating environment from a security perspective. Proactive measures must be developed and applied to OT systems since maintaining effective cybersecurity isn’t just an IT issue but is a fundamental operational imperative.

The headquarters of the KR in Busan ©the Korean Register

How Korea respond to maritime security challenges

In preparation for IMO’s Maritime Safety Committee’s resolution “Cyber Risk Management in Safety Management System (MSC.428 (98))” to come into effect, Korean Register of Shipping (KR) has been working together with major shipbuilders to enhance and support the application and verification of ship cybersecurity rules. KR signed a memorandum of understating (MoU) with Hyundai LNG Shipping to conduct joint research on the application, verification, and development of Guideline for Maritime Cyber Security last year. It also signed MoU with Samsung Heavy Industries (SHI) to conduct a joint study on the “Ship Cyber Security Network Construction and Design Safety Evaluation this year.

KR seems to be leading a maritime digital transformation in Korea. It established its own maritime cyber security certification system providing a cyber security certification service for maritime companies. KR has been known for its extensive work on cyber security measures working on big data platforms and e-certificate systems with industry. Moreover, the Korean Register aims to deliver 10 practical digital technologies before the end of 2020.

Source: maritimekr


Cyber security is a major concern for vessels at sea today. The impact of unauthorized, and even authorized, access to ships’ systems can be catastrophic, potentially resulting in reputational, financial and environmental damage, robbery, piracy or simply malicious interference. These are all distinct risks for an unprotected vessel.

 

Consider potential cyber risks

Not all threats, of course, may be immediately obvious. While an attack on the main propulsion system that causes the vessel to drift without control will be picked up immediately, navigation and positioning systems can be manipulated to show misleading information, inadvertently guiding the ship into trouble.

As the industry slowly approaches truly autonomous shipping, increased reliance on automated systems heightens concerns about security. Vital systems need to be accessible by authorized personnel but protected against any interference. For this reason, type approval processes for systems designed to protect potentially vulnerable components and systems need to consider how the risks of access, both authorized and unauthorized, can be alleviated.

In its type approval process DNV GL identifies four different security level capabilities in line with the IEC 62443 standard. Security Level (SL) 1, the most basic one, provides protection against casual or coincidental violations. Levels 2 to 4 cover increasingly strict protection levels against intentional violation, depending on sophistication of means and the likely level of resources, motivation and skills of potential offenders. Security Level 4 protects against a highly motivated, highly sophisticated attack.

Maritime cyber security specialist Naval Dome has been working with DNV GL, with both organizations sharing knowledge and expertise to improve security requirements for the maritime industry in general and Naval Dome’s own systems in particular. One of the problems identified was that technicians and manufacturers were able to access on-board systems without the knowledge and approval of the crew, which meant they could potentially infect the systems unintentionally.

Therefore a two-step authorization process was needed for which new algorithms had to be developed to prevent remote access without authorization by a vessel’s senior leadership team. To protect the system it is imperative to verify that the person trying to gain access has the necessary authorization and that every action this person takes is recorded in a secure log to mitigate the risk of an internal attack.

Ram Krishnan, CTO at Naval Dome, explains: “In order to protect against marine cyber threats, Naval Dome has developed a solution that is unique among all other cyber threat solutions, because it is designed to protect from the inside-out. We use our software to protect the system itself, thus blocking the two main vectors of attack – external and internal, since the protection is done on the endpoint (PC/HMI).”

One of DNV GL’s original type approval requirements was that once security logs were saved to disk, they could no longer be changed. However, Naval Dome and DNV GL found that this was not necessarily the most secure way of keeping this data safe. Naval Dome therefore devised a new cloud-based solution in which files and logs can be encrypted and saved for 15 years.

Attack on machinery - DNV GL

Machinery connected to communication networks is especially susceptible to cyber threats. Text image 1 – foto-dock.com, DNV GL

The type approval process

The type approval process starts with an assessment of the equipment and its documentation, including installation and operation manuals, applying DNV GL’s stringent and challenging evaluation principles. This often results in revisions before the next phase, product evaluation and test procedure, can begin.

This first phase can be quite a challenge for vendors. Documentation typically requires revision, which can mean it has to go back and forth a number of times until both parties are satisfied with the outcome. This phase also requires vendors to draft test procedure documents which are then sent to the classification society for revision and approval.

Once all of these files have been assessed and revised as necessary, the process moves on to physical testing. If the vendor opts to have systems tested at DNV GL facilities, the vendor will set up the equipment and test protocols before the testing is carried out. In the case of Naval Dome, software was set up on an ECDIS system at the DNV GL facility in Trondheim. However, vendors also have the option to have independent third-party testing performed by DNV GL experts at their own premises.

In order to protect against marine cyber threats, Naval Dome has developed a solution that is unique among all other cyber threat solutions, because it is designed to protect from the inside-out.
Ram Krishnan ,CTO

The tests

DNV GL’s test procedures are based on marinized versions of the international standards ISA/IEC 62443-4-2 and IEC 61162-460 which comprise seven chapters and cover increasingly stringent levels of security requirements. The tests ensure that cyber security equipment is sufficiently robust to prevent penetration attempts while also assessing aspects such as encryption strength. The process covers:

• Human user identification and authentication
• Unique identification and authentication
• Multifactor authentication for all interfaces
• Access privileges
• Software process and device identification and authentication
• User control and functionality
• System integrity
• Data confidentiality
• Restriction to data flows
• Response time to cyber events
• Network/system segmentation
• Monitoring of events
• Resource availability
• The cyber security software must allow the protected application to run without interference

“The tests are important as they can reveal outdated encryption algorithms which the vendor would need to update,” says Dr Mate J Csorba, Global Service Line Leader at DNV GL Digital Solutions.

The tests include remote access, ensuring that ship systems are accessible to vendors’ technicians and authorized on-board staff, but that protocols are in place to prevent malicious access.

“What we are assessing is the security capability of the product. We check the capability and integrity of features such as firewalling and the configuration of the system,” says Csorba.

Depending on the level of security a system is being type-approved for, the number of requirements in each of the seven chapters will differ. The higher the level, the stricter and greater the number of requirements.

The Naval Dome system proved highly effective in DNV GL’s one-week type approval tests. The testing covered the security of the operational system protected by the Naval Dome solution as well as potential interference with vessel systems. “During testing it was not possible to hack, or take control of, vessel systems, and ultimately the ship. The two-step authorization process as well as network and Wi-Fi access security were tested without being able to compromise the protected marine system,” said Ram.

Security concerns

According to DNV GL, few ships are sailing with adequate security systems. “If all ships were sailing with SL1, that would be better than having no security at all, but sadly they are not,” says Csorba.

Without adequate protection, systems on existing vessels are exposed to threats every time data is transferred from shore to ship, or even when crews or technicians do something as straightforward and routine as updating software, including charts and notices to mariners, directly from a CD, a USB drive or technician’s device.

Systems on older ships can be upgraded but will be difficult to bring fully up to date without retrofitting new systems. DNV GL believes that at least SL3 should be specified for newbuilds. According to the definition, SL3 provides “protection against intentional violation using sophisticated means, extended resources, IACS specific skills and moderate motivation”.

To achieve this level of cyber security protection ‒ or the optimum SL4, which offers similar safeguards to those under SL3 with the addition of high offender motivation equipment ‒ vendors need to fully understand the international standards and participate in appropriate workshops with the type approval organization. These help the vendor gain a full understanding of the type approval regulations and requirements, and the approval authority to understand the equipment. Then both parties can jointly determine the security level the vendor or supplier should achieve.

DNV GL and Naval Dome, currently the only specialists capable of offering an SL4 cyber security solution, were able to demonstrate how relatively simple it is to attack live ship systems. The demonstrations have shown that in the absence of adequate cyber protection, the reported ship position can be shifted and the radar display misled. Similarly, the testing experts were able to turn machinery on and off or disable it, and to override fuel control, steering and ballast systems.

These penetration tests allowed Naval Dome to develop a cyber security product that can protect against all kinds of attacks and meet the SL4 standard. The critical factor in certifying cyber security software at this level is to enable shipping and off-shore facilities to implement cyber security quickly and easily without having to re-certify hardware currently in place. Naval Dome’s cyber security software is loaded onto the existing equipment providing cyber security protection immediately.

DNV GL was one of the first classification societies to recognize the growing threat resulting from increased digitalization in shipping and other industries. Its cyber security type approval was introduced in 2017, with the cyber security class notation “Cyber Secure” added the following year.

Attack on the navigation system. A hacker manipulating the navigation system to indicate an incorrect position could cause a severe accident, such as grounding, with potential loss of life and cargo. Text image 2 – Mariusz Bugno – Shutterstock.com, DNV GL

The Cyber Secure notation has three qualifiers: Cyber Secure (Basic), corresponding to SL1 and intended primarily for existing ships; Cyber Secure (Advanced) for newbuilds, which corresponds to SL3 with specific adaptations for maritime systems; and Cyber Secure (+), which covers additional systems not included in the scope of the other two qualifiers but which can be combined with either of them.

Cyber Secure notations by default cover ten systems: propulsion, steering, watertight integrity, fire safety, ballast, thrusters (other than main propulsion), auxiliary systems, communications, navigation and power generation. Other systems can be addressed under the “+” qualifier subject to risk assessments. Under all parts of the notation, a cyber security management system is required for every ship.
Source: DNV GL


Materials & Preprocessing Methods

Materials

Data preprocessing

Results

Data analysis process

Bright target segmentation

Dark target segmentation

Data fusion

Discussion

Role of data fusion

Different segmentation methods for bright and dark targets

Comparison with other bright target segmentation methods for shipborne radar images

Comparison with other dark target segmentation methods for shipborne radar images

Guarantee of navigation safety using the data fusion of an ENC and shipborne radar

Lack of AIS data

Conclusions

Source: peerj


Company DETAILS

SHIP IP LTD
VAT:BG 202572176
Rakovski STR.145
Sofia,
Bulgaria
Phone ( +359) 24929284
E-mail: sales(at)shipip.com

ISO 9001:2015 CERTIFIED