Abstract
The infrastructure in the maritime sector has evolved to integrate more and more connected systems. The maritime environment very much relies on modern technology to aid and optimize the daily operations of ships and harbour processes alike. The cyber protection of these systems is essential to prevent the disruption of their activity. While Security Operation Centre teams usually are aided in their tasks by Intrusion Detection Systems, the actual response to cyber attacks remains very much a human activity. In that regard, complex and realistic hands-on training is an excellent way to bolster the efficiency of the defensive actions; this type of exercise is usually performed on a cyber range. In that context, a federation of cyber range allows to generate more elaborate sector-specific scenarios. This paper presents a maritime-specific training delivered over a cyber range federation. The sector-specific aspects, as well as the technical issues of the federation, are discussed.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Similar content being viewed by others
Notes
- 1.
The automation system is described in an article entitled “Sly, a red teaming orchestration system” accepted for Digilience 2022.
- 2.
The Autumn School presentation and analysis of its impact will be published in the ECHO deliverable D2.8 in spring 2023.
References
NTT: 2021 Global Threat Intelligence Report. Technical report. https://services.global.ntt/en-gb/insights/2021-global-threat-intelligence-report
ENISA: ENISA Threat Landscape 2021. Technical report. https://www.enisa.europa.eu/publications/enisa-threat-landscape-2021
Endsley, M.: Situation awareness global assessment technique (SAGAT). In: Proceedings of the IEEE 1988 National Aerospace and Electronics Conference, pp. 789–795 (1988)
Endsley, M.: Toward a theory of situation awareness in dynamic systems. Hum. Factors 37(1), 32–64 (1995)
Aaltola, K., Taitto, P.: Utilising experiential and organizational learning theories to improve human performance in cyber training. Inf. Secur. 43(2), 123–133 (2019)
Davis, J., Magrath, S.: A survey of cyber ranges and testbeds. Technical Report Defence Science and Technology, Cyber and Electronic Warfare Division, Australia (2013)
Darwish, O., Stone, C.M., Karajeh, O., Alsinglawi, B.: Survey of educational cyber ranges. In: Barolli, L., Amato, F., Moscato, F., Enokido, T., Takizawa, M. (eds.) WAINA 2020. AISC, vol. 1150, pp. 1037–1045. Springer, Cham (2020). https://doi.org/10.1007/978-3-030-44038-1_96
Yamin, M.M., Katt, B., Gkioulos, V.: Cyber ranges and security testbeds: Scenarios, functions, tools and architecture. Comput. Secur. 88, 101636 (2020)
Chouliaras, N., Kittes, G., Kantzavelou, I., Maglaras, L., Pantziou, G., Ferrag, M.: Cyber ranges and TestBeds for education, training, and research. Appl. Sci. 11, 1809 (2021)
ECSO, WG5 paper: Understanding Cyber Ranges: From Hype to Reality, March 2020. https://www.ecs-org.eu/documents/uploads/understanding-cyber-ranges-from-hype-to-reality.pdf
Ukwandu, E., et al.: A review of cyber-ranges and test-beds: current and future trends. Sensors 20, 7148 (2020)
CyberSec4Europe: Cyber Range Federation - The Real Benefits (2021). https://cybersec4europe.eu/cyber-range-federation-the-real-benefits/
EDA: Cyber Ranges Federation Project reaches new milestone (2018). https://eda.europa.eu/news-and-events/news/2018/09/13/cyber-ranges-federation-project-reaches-new-milestone
Piispanen J.: Technical specification for federation of cyber ranges. Master thesis, JAMK University of Applied Sciences (2018)
Peratikou, A., Louca, C., Shiaeles, S., Stavrou, S.: On federated cyber range network interconnection. In: Ghita, B., Shiaeles, S. (eds.) INC 2020. LNNS, vol. 180, pp. 117–128. Springer, Cham (2021). https://doi.org/10.1007/978-3-030-64758-2_9
Nicodème, B.: Federated cyber range challenges. Master thesis, Université Libre de Bruxelles (2020)
Graziano, A.: About federation of cyber ranges, market places and technology innovation (2020). https://www.linkedin.com/pulse/federation-cyber-ranges-market-places-technology-almerindo-graziano
Varag, C., Cegan, J., Lieskovan, T., Merialdo, M.: The current state of the art and future of European Cyber Range Ecosystem. In: 2021 IEEE International Conference on Cyber Security and Resilience, pp. 390–395 (2021)
Oikonomou, N., et al.: ECHO federated cyber range: towards next-generation scalable cyber ranges. In: 2021 IEEE International Conference on Cyber Security and Resilience, pp. 403–408 (2021)
European Network of Cybersecurity Centres and Competence Hub for Innovation and Operations (ECHO). https://echonetwork.eu/
Fitton, O., Prince, D., Germond, B., Lacy, M.: The future of maritime cyber security. Lancaster University (2015). https://ssg.lancs.ac.uk/wp-content/uploads/oliver-the-maritime.pdf
Loomis, W., Singh, V., Kessler, G., Bellekens, X.: Signaling for cooperation on maritime cybersecurity. Atlantic Council, Cyber Statecraft Initiative (2021). https://www.atlanticcouncil.org/in-depth-research-reports/report/cooperation-on-maritime-cybersecurity-a-system-of-systems/
Meland, P.H., Bernsmed, K., Wille, E., Rødseth, Ø., Nesheim, D.A.: A retrospective analysis of maritime cyber security incidents. TransNav Int. J. Marine Navig. Saf. Sea Transp. 15, 519–530 (2021)
Teal, J.M., Howarth, R.W.: Oil spill studies: a review of ecological effects. Environ. Manag. 8, 27–43 (1984)
Galieriková, A., Dáivid, A., Materna, M., Mako, P.: Study of maritime accidents with hazardous substances involved: comparison of HNS and oil behaviours in marine environment. Transp. Res. Proc. 55, 1050–1064 (2021)
Deja, A., Ulewicz, R., Kyrychenko, Y.: Analysis and assessment of environmental threats in maritime transport. Transp. Res. Proc. 55, 1073–1080 (2021)
ENISA: Critical Infrastructures and Services - Maritime. https://www.enisa.europa.eu/topics/critical-information-infrastructures-and-services/maritime
International Maritime Organization: Maritime cyber risk management in safety management systems (2017). https://wwwcdn.imo.org/localresources/en/OurWork/Security/Documents/Resolution%20MSC.428(98).pdf
BIMCO et al.: Guidelines to cyber security onboard ships (2020). https://wwwcdn.imo.org/localresources/en/OurWork/Security/Documents/ANNEX%20Guidelines%20on%20Cyber%20Security%20Onboard%20Ships%20v.4.pdf
ISSA: The Life and Times of Cybersecurity Professionals 2021 (2021). https://www.issa.org/cybersecurity-skills-crisis-continues-for-fifth-year-perpetuated-by-lack-of-business-investment/
Fortinet: 2022 Cybersecurity Skills Gap (2022). https://www.fortinet.com/content/dam/fortinet/assets/reports/report-2022-skills-gap-survey.pdf?utm_source=pr&utm_campaign=report-2022-skills-gap-survey
ENISA: Addressing skills shortage and gap through higher education (2021). https://www.enisa.europa.eu/publications/addressing-skills-shortage-and-gap-through-higher-education/@@download/fullReport
Tam, K., Moara-Nkwe, K., Jones, K.: The use of cyber ranges in the maritime context: assessing maritime-cyber risks, raising awareness, and providing training. Maritime Technol. Res. 3(1), 16–30 (2021)
Potamos, G., Peratikou, A., Stavrou, S.: Towards a maritime cyber range training environment. In: 2021 IEEE International Conference on Cyber Security and Resilience (CSR), pp. 180–185 (2021)
Cyber-Mar: Cyber preparedness actions for a holistic approach and awareness raising in the MARitime logistics supply chain. https://www.cyber-mar.eu/
Echo Federated Autumn School. https://echonetwork.eu/echo-federated-autumn-school/
Iosifidis, G., Varbanov, P.: Detection of and response to an attack against the ECDIS on a passenger ship. Course Blueprint, ECHO internal deliverable D2.7 - Annex 3 (2021)
RHEA group. https://www.rheagroup.com/document/citef-pdf-brochure/
Varbanov, P., et al.: ECHO Cyberskill Framework (2021). https://echonetwork.eu/d2-6-hopp/
Bertram, V., Plowman, T.: Digital training solutions in the maritime context: options and costs. Maritime Technol. Res. 2(2), 52–68 (2020)
Acknowledgements
This work was supported by the ECHO project which has received funding from the European Union’s Horizon 2020 research and innovation program under the grant agreement no 830943.
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2022 The Author(s), under exclusive license to Springer Nature Switzerland AG
About this paper
Cite this paper
de La Vallée, P., Iosifidis, G., Rossi, A., Dri, M., Mees, W. (2022). Sector-Specific Training - A Federated Maritime Scenario. In: Dziech, A., Mees, W., Niemiec, M. (eds) Multimedia Communications, Services and Security. MCSS 2022. Communications in Computer and Information Science, vol 1689. Springer, Cham. https://doi.org/10.1007/978-3-031-20215-5_3
Download citation
DOI: https://doi.org/10.1007/978-3-031-20215-5_3
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-031-20214-8
Online ISBN: 978-3-031-20215-5
eBook Packages: Computer ScienceComputer Science (R0)