Enhancing Cybersecurity Measures for Critical Maritime Infrastructure in the Middle East
1.2 Significance of Cybersecurity in Maritime Infrastructure
In an age where information systems are integral to the operation of critical national infrastructure facilities, the safety and security of these systems is of primary concern. This is no different in the case of the maritime sector. In recent decades, the shipping industry has seen a rapid increase in its reliance on information systems. Navigation is now predominantly reliant on global positioning systems (GPS) and electronic sea charts. Many vessels are highly automated, and communications between ship and shore are largely conducted through satellite and high-frequency radio. At the shore side, the operational control of ports and harbors and the management of the logistics involved in moving cargo requires the exchange of large amounts of data. Meanwhile, in the offshore oil and gas industry, the exploration and production activities are controlled from land-based offices utilizing remote subsea technologies. All of the aforementioned activities are conducted using the internet and various wide area network connections and are thus vulnerable to a wide array of cyber threats. Despite this increased level of vulnerability, awareness of the issue of cyber security within the maritime sector is considered to be low. The problem is that maritime cyber security is very much an emergent area. There is a general lack of understanding of the risks involved, the extent to which the sector is vulnerable, and the potential consequences of a cyber attack. This is coupled with the fact that the maritime industry, in terms of both shipping and offshore activities, is highly diverse and thus the range of information systems used is vast. These factors make it difficult to define applicable regulation and guidance for the industry to follow.
1.3 Research Objectives
Costantino Padovano, a specialist voice on maritime operations technology, asserts the importance of proper communication and information sharing between ports and vessels, while conveying the complexity of the modern digital sea. It is here understood that the overarching principle of the ISPS Code, which deals with security of ships and port facilities, is dependent on good information communication. The same research outlines how an unidentified ship reported to be engaging in intelligence activities targeted a specific research facility. An executive with the research facility made a key point, stating that it was difficult to identify whether the ship was actually targeting their facility because there was not a baseline understanding of who actually uses the waters and for what purposes, i.e. there is inadequate domain awareness. These cases are classic examples of the potential threats to maritime infrastructure and the objectives of the culprit could have been easily mitigated if the information in question was properly protected and the understanding of the maritime domain was known.
Initial discussions with MICA and a review of the responses from C81MNC states China’s objective to become a global maritime power and extend the operation period of their sea forces. In line with this objective, China has laid out backbone strategies to revamp their naval forces to protect the sea and the Chinese government newly unveiled the “Maritime Power Promotion Plan,” which is a comprehensive plan to develop and maintain maritime power. Also, the US Navy has set a distance support for maritime forces strategy and explains that their forces will also be persistent and tailored to provide assured access and influence across the sea to support national and alliance interests. These global maritime power strategies are a paradigm shift in the objectives of maritime operations, moving towards more robust and potentially contentious activities at sea. A simple cost-benefit analysis states the cost of piracy has already begun to hinder the conduct of commercial maritime activities and conflicts of interest between global powers will have adverse effects on the safety and security of global maritime infrastructure. With maritime operations being an extension of activities on land and in an increasingly globalizing world, the threats to maritime infrastructure will continue to mirror those on other industries and it is clear there is a great necessity for cost-effective security measures.
