## 4 The Smart Shipping Use Case
### Overview of Assessments and Training Levels  
In the aforementioned context of risk awareness framework and signal identification, THREAT-ARREST develops an advanced training programme incorporating emulation, simulation, serious gaming and visualization capabilities to adequately train and evaluate crew users with different types of responsibility and levels of expertise in recognizing signals of possible cyber-attacks, raising awareness on impact and consequences of attacks while following the necessary corrective actions to defend high-risk cyber systems. This also includes the design of several cyber-ranges scenarios, as are illustrated in Figure 9.  
From the previous figure, Table 2 summarizes the four main cyber-ranges exercises that have been implemented so far. Notice that due to the model-driven approach of the THREAT-ARREST platform, we can easily produce a high volume of variations of these four scenarios and the related CTTP models (as depicted in Figure 9), supporting the dynamic adaptation features based on the pedagogical methods that were described in the previous sections. Moreover, the same models can be applied in other application domains (e.g., smart energy, healthcare, etc.) with slight changes. The smart shipping pilot is based on the system of the DANAOS shipping company. This mainly includes the backend system at the organization's premises, along with the DANAOS communication platform (DANAOSone), as well as the systems on the smart vessels and their communication with the main system. Figure 10 depicts the pilot's architecture and main components. For the deployment of the main Virtual Labs under THREAT-ARREST, the backend system and the system of smart vessels are emulated. The operational behavior of the vessels' on-board equipment (e.g., navigation modules, smart devices, etc.) is simulated. \begin{table}
\begin{tabular}{c c c c c} \hline \hline \# & **Description** & **Trainee Type** & **Security Expertise** & **Platform Tools** \\ \hline \multirow{3}{*}{1} & Navigation combo attack (phishing & \multirow{3}{*}{Captain} & Highly-privilege actuator with & \(\bullet\) & Emulation \\  & email and GPS spoofing) & & low/moderate security knowledge & \(\bullet\) & Simulation \\ \hline \multirow{3}{*}{2} & \multirow{3}{*}{Vishing (social engineering)} & \multirow{3}{*}{Crew/Offshore officers} & Non-security actuators with low & \(\bullet\) & Training \\  & & & access privileges & \(\bullet\) & Gamification \\ \hline \multirow{3}{*}{3} & \multirow{3}{*}{Attacks on the Offshore system} & IT Administrators of & Highly-privilege actuators with & \(\bullet\) & Emulation \\  & the shipping company & moderate/high security knowledge & \(\bullet\) & Assurance Tool \\ \hline \multirow{3}{*}{4} & \multirow{3}{*}{Digital Forensics} & The organization’s security engineers & Security experts & \(\bullet\) & Emulation \\  & & & security experts & \(\bullet\) & Simulation \\ \cline{1-1}  & & & security engineers & \(\bullet\) & Data Fabrication \\ \hline \hline \end{tabular}
\end{table} 
Table 2: Main Smart Shipping Scenarios. Figure 9: Scenarios overview. Application Example of the STRIDE Model and the Bloom Taxonomy  
In this subsection, we will describe the application of the STRIDE methodology for the modelling of the security aspects of the social engineering scenario. The trainee type is the captain of the vessel (valuable actuator with moderate security knowledge). He/she must start a (simulated) journey from the Heraklion port to Piraeus, which will be designated by the backend office via an email to the captain. All legitimate emails are digitally signed with PGP. The programme involves the security aspects of \"Tampering\" and \"Spoofing\". During the basic training, the trainee gets familiar with the main cryptographic primitives (Remembering), practices cryptography via related tools, i.e., CryptTool-2, (Understanding), and signs/verifies emails with PGP (Applying).