# Assessing Cyber Challenges of Maritime Navigation
## 1 Introduction  
Today's global maritime sector depends increasingly on digitalization, integration of operations, and automation. New opportunities arise--and cyber threats emerge. Cyber technologies have become essential, even critical, not just to the operation and management of numerous systems and processes onboard ships and in ports, but also for the safety, security, and protection of the ship, the crew, the cargo, and the marine environment. These technologies have integrated IT (Information Technology) and OT (Operational Technology) onboard ships through networking and connectivity to the internet [1; 2; 3; 4; 5; 6]. In the World Economic Forum's Global Risks Report 2020, cyberattacks on critical infrastructure with a reference to shipping are rated the fifth top risk in 2020 [1]. According to [PERSON] [2]: \"Cyber-attacks on the maritime industry's OT systems have increased by 900% over the last three years. There were 50 significant OT hacks reported in 2017, rising to 120 in 2018 and more than 300 in the previous year. This year will probably end with more than 500 major cybersecurity breaches, with substantially more going unreported\". When deliberate disruptions are discovered, there are many incentives to keep that information quiet, mainly because of the maritime industry not being eager to reveal the weaknesses and vulnerabilities of their products or services. Safety has always been a critical driver in regulations of maritime operations; and now that navigation systems have been increasingly reliant on cyber technologies to improve the effectivenessand safety of navigation, a need for safeguarding shipping from cyber threats has arisen [3; 4; 5; 6; 7; 8; 9; 10; 11; 12; 13; 14; 15; 16; 17; 18; 19; 20; 21]. Therefore, the International Maritime Organization (IMO) has already taken action and given ship owners and executives until 2021 to include cyber risk management into ship safety protocols. Owners run the risk of having ships detained if they have not included cybersecurity in the International Safety Management Code (ISM Code) on safety management onboard ships by 1 January 2021 [22; 23]. The IT security system is known as cybersecurity. In contrast, the security system of the OT system is known as cyber safety, although both form part of the concept of cybersecurity [22]. Cybersecurity can be defined in brief as the \"preservation of confidentiality, integrity and availability of information in the Cyberspace\" [24]. However, the longer definition by the International Telecommunication Union (ITU) better reflects the wide scope: \"Cybersecurity is the collection of tools, policies, security concepts, security safeguards, guidelines, risk management approaches, actions, training, best practices, assurance and technologies that can be used to protect the cyber environment and organization and user's assets. Organization and user's assets include connected computing devices, personnel, infrastructure, applications, services, telecommunications systems, and the totality of transmitted and/or stored information in the cyber environment\" [25]. Indeed, \"cybersecurity combines a multiplicity of disciplines from the technical to behavioural and cultural\" [26]. Within this definition, 'cyber environment' comprises the interconnected networks of both IT and cyber-physical systems utilizing electronic, computer-based, and wireless systems, including the information, services, social, and business functions that exist only in cyberspace. On a ship, the computer-based systems will comprise a range of information technology components (for example, personal computers (PCs), laptops, tablet devices, servers, and networking components such as routers and switches) and operational technology (for example, control systems, sensors, actuators, radar) [27; 28; 29]. Current shipboard control systems contain significant levels of automation to perform complex functions such as navigation and propulsion control. The purpose of employing automated systems has been to reduce cost and improve performance.