# Cybersecurity Challenges in the Maritime Sector
## 6 Conclusions  
Although the maritime industry faces broadly the same cybersecurity challenges as other sectors, it is becoming increasingly apparent that it fits the profile of critical infrastructure being targeted by cybercriminals, and it also faces risks that might be considered unique to the nature of this industry. For instance, a successful cyberattack could shut down a ship, disclose valuable information, disable the vessel's AIS, and/or create false or misleading AIS reports facilitating cyberpiracy and criminal, terrorist, or even state actors. This paper reviewed the current security threats and vulnerabilities in the modern shipping industry. In this context, various types of cyberattacks, these ships could face, were discussed along with real-world incidents. From the numerous reported cyber incidents and their consequences, there is clear evidence that every ship, vessel, or even port is at risk of cyberattacks if key information systems are not adequately protected. Therefore, IT and OT systems in modern ships should be prepared with enhanced security measures due to their great vulnerability to cyber threats. In this paper, we discussed some possible countermeasures that can mitigate potential cyberattacks and make the shipping industry a hard target, such as the implementation of a new security standard that reduces the number and scope of cyberattacks. However, many security challenges remain unresolved, especially with the increasing use of autonomous and semi-autonomous vessels. \begin{table}
\begin{tabular}{l l} \hline \hline
**Systems** & **Mitigation Actions** \\ \hline \multirow{7}{*}{Industrial Control Systems (ICSs)} & - Use cryptography or other protected methods to shield passwords from unauthorised interception \\  & - To keep control systems safe, implement configuration management and patch management controls \\  & - As far as possible, communications between security zones should be guarded \\  & - Ensure that all Internet-connected ICS devices are protected and that passwords are updated regularly \\  & - ICS network administrators should use network segmentation and firewall rules that block access to \\  & - file-sharing ports \\  & - Protect password files adequately by making hashed passwords more difficult to obtain \\  & - System administrators should enforce strong passwords \\  & - Use concrete remote access policy \\  & - Audit remote access and related changes \\  & - Block unnecessary USB ports \\  & - Ensure cybersecurity awareness training has been conducted for all users \\ \hline \multirow{2}{*}{Propulsion and machinery management and power control systems} & - Information system backup \\  & - Denial of service protection \\  & - Monitoring physical access \\ \hline \multirow{7}{*}{Very Small Aperture Terminal (VSAT)} & - Encrypted communication systems should be considered \\  & - The service provider’s cyber defence mechanisms should be carefully considered, but they should not be \\  & relied on solely to protect every shipboard device and data \\  & - Authentication and access control management should be strictly complied with \\  & - Protection of information at rest \\ \hline \multirow{7}{*}{IT network systems} & - Information system backup \\  & - Authentication and access control \\  & - Segmentation of crew vs. business functions \\ \cline{1-1}  & - Ensure threat protection mechanisms \\ \cline{1-1}  & - Promote configuration/patch/update management system \\ \cline{1-1}  & - Ensure BYOD policy is in place \\ \cline{1-1}  & - Ensure cybersecurity awareness training has been conducted for all users \\ \hline \multirow{7}{*}{Human factor} & - Promote a cybersecurity culture within the organisation \\  & - Create relationships with the members of the operation chain \\ \cline{1-1}  & - Ensure cyber awareness training has been conducted \\ \cline{1-1}  & - Evaluate training effectiveness with cybersecurity drills \\ \cline{1-1}  & - Promote cyber hygiene within the operation parties \\ \hline \hline \end{tabular}
\end{table}