Welcome
About
News
Anonymous Reporting
Tools
MCA Chatter
Library
V-ID Terminal
Support
My Account

News

Icon representing US Coast Guard Bulletin: Cyber Adversaries Targeting Commercial Vessels
US Coast Guard Bulletin: Cyber Adversaries Targeting Commercial Vessels

June 21st 2019
Icon representing Would you pay $1m for a laptop full of malware?
Would you pay $1m for a laptop full of malware?

May 23rd 2019
Icon representing Singapore Opens Maritime Cybersecurity Operations Centre (MSOC)
Singapore Opens Maritime Cybersecurity Operations Centre (MSOC)

May 22nd 2019
 
 
 

Simple steps to improve cyber security on ECDIS

 
November 20th 2017
The cyber security risks to ECDIS navigation systems, many of which run on old, and unsupported operating systems, are well known, and ABS director of cyber security Paul Walters offers some very simple advice on how to help keep them safe.
Speaking at the Singapore Registry of Ships Forum, Walters noted that when it comes to information exchange ECDIS is very critical. He outlined how an ECDIS system can be taken offline by the simple act of crew member plugging their phone into charge on the computer on which the ECDIS system is run.

“We’ve had a number of owners call us up and one person or another had plugged in their phone to charge it, the ECDIS goes and looks for the drivers for the phone, can’t find it, so its crashes. And they are very difficult to get back, and that has to do with software quality, a lot of them run XP which is very vulnerable because Microsoft is not supporting it.”

Walters offered a few simple measures to improve the security of ECDIS system.

        To stop crew members from charging their phones or either devices on the ECDIS

-       PC ABS recommends buying a system to block the ports. Walters said these are available cheaply from the likes of Alibaba or Amazon, and stop crew from charging their phones, or vendors from plugging in USB sticks and devices without checking with the crew.

        For ECDIS chart updates

-       Download, encrypted updates from the internet onto a dedicated USB stick

-       Check the USB stick for malware on viruses on a PC dedicated to the task

-       If all clear then upload onto the ECDIS
 
Source

Keywords