Skip to main content

Sector-Specific Training - A Federated Maritime Scenario

  • Conference paper
  • First Online:
Multimedia Communications, Services and Security (MCSS 2022)

Abstract

The infrastructure in the maritime sector has evolved to integrate more and more connected systems. The maritime environment very much relies on modern technology to aid and optimize the daily operations of ships and harbour processes alike. The cyber protection of these systems is essential to prevent the disruption of their activity. While Security Operation Centre teams usually are aided in their tasks by Intrusion Detection Systems, the actual response to cyber attacks remains very much a human activity. In that regard, complex and realistic hands-on training is an excellent way to bolster the efficiency of the defensive actions; this type of exercise is usually performed on a cyber range. In that context, a federation of cyber range allows to generate more elaborate sector-specific scenarios. This paper presents a maritime-specific training delivered over a cyber range federation. The sector-specific aspects, as well as the technical issues of the federation, are discussed.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Subscribe and save

Springer+ Basic
$34.99 /Month
  • Get 10 units per month
  • Download Article/Chapter or eBook
  • 1 Unit = 1 Article or 1 Chapter
  • Cancel anytime
Subscribe now

Buy Now

Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Similar content being viewed by others

Notes

  1. 1.

    The automation system is described in an article entitled “Sly, a red teaming orchestration system” accepted for Digilience 2022.

  2. 2.

    The Autumn School presentation and analysis of its impact will be published in the ECHO deliverable D2.8 in spring 2023.

References

  1. NTT: 2021 Global Threat Intelligence Report. Technical report. https://services.global.ntt/en-gb/insights/2021-global-threat-intelligence-report

  2. ENISA: ENISA Threat Landscape 2021. Technical report. https://www.enisa.europa.eu/publications/enisa-threat-landscape-2021

  3. Endsley, M.: Situation awareness global assessment technique (SAGAT). In: Proceedings of the IEEE 1988 National Aerospace and Electronics Conference, pp. 789–795 (1988)

    Google Scholar 

  4. Endsley, M.: Toward a theory of situation awareness in dynamic systems. Hum. Factors 37(1), 32–64 (1995)

    Article  Google Scholar 

  5. Aaltola, K., Taitto, P.: Utilising experiential and organizational learning theories to improve human performance in cyber training. Inf. Secur. 43(2), 123–133 (2019)

    Google Scholar 

  6. Davis, J., Magrath, S.: A survey of cyber ranges and testbeds. Technical Report Defence Science and Technology, Cyber and Electronic Warfare Division, Australia (2013)

    Google Scholar 

  7. Darwish, O., Stone, C.M., Karajeh, O., Alsinglawi, B.: Survey of educational cyber ranges. In: Barolli, L., Amato, F., Moscato, F., Enokido, T., Takizawa, M. (eds.) WAINA 2020. AISC, vol. 1150, pp. 1037–1045. Springer, Cham (2020). https://doi.org/10.1007/978-3-030-44038-1_96

    Chapter  Google Scholar 

  8. Yamin, M.M., Katt, B., Gkioulos, V.: Cyber ranges and security testbeds: Scenarios, functions, tools and architecture. Comput. Secur. 88, 101636 (2020)

    Google Scholar 

  9. Chouliaras, N., Kittes, G., Kantzavelou, I., Maglaras, L., Pantziou, G., Ferrag, M.: Cyber ranges and TestBeds for education, training, and research. Appl. Sci. 11, 1809 (2021)

    Google Scholar 

  10. ECSO, WG5 paper: Understanding Cyber Ranges: From Hype to Reality, March 2020. https://www.ecs-org.eu/documents/uploads/understanding-cyber-ranges-from-hype-to-reality.pdf

  11. Ukwandu, E., et al.: A review of cyber-ranges and test-beds: current and future trends. Sensors 20, 7148 (2020)

    Article  Google Scholar 

  12. CyberSec4Europe: Cyber Range Federation - The Real Benefits (2021). https://cybersec4europe.eu/cyber-range-federation-the-real-benefits/

  13. EDA: Cyber Ranges Federation Project reaches new milestone (2018). https://eda.europa.eu/news-and-events/news/2018/09/13/cyber-ranges-federation-project-reaches-new-milestone

  14. Piispanen J.: Technical specification for federation of cyber ranges. Master thesis, JAMK University of Applied Sciences (2018)

    Google Scholar 

  15. Peratikou, A., Louca, C., Shiaeles, S., Stavrou, S.: On federated cyber range network interconnection. In: Ghita, B., Shiaeles, S. (eds.) INC 2020. LNNS, vol. 180, pp. 117–128. Springer, Cham (2021). https://doi.org/10.1007/978-3-030-64758-2_9

    Chapter  Google Scholar 

  16. Nicodème, B.: Federated cyber range challenges. Master thesis, Université Libre de Bruxelles (2020)

    Google Scholar 

  17. Graziano, A.: About federation of cyber ranges, market places and technology innovation (2020). https://www.linkedin.com/pulse/federation-cyber-ranges-market-places-technology-almerindo-graziano

  18. Varag, C., Cegan, J., Lieskovan, T., Merialdo, M.: The current state of the art and future of European Cyber Range Ecosystem. In: 2021 IEEE International Conference on Cyber Security and Resilience, pp. 390–395 (2021)

    Google Scholar 

  19. Oikonomou, N., et al.: ECHO federated cyber range: towards next-generation scalable cyber ranges. In: 2021 IEEE International Conference on Cyber Security and Resilience, pp. 403–408 (2021)

    Google Scholar 

  20. European Network of Cybersecurity Centres and Competence Hub for Innovation and Operations (ECHO). https://echonetwork.eu/

  21. Fitton, O., Prince, D., Germond, B., Lacy, M.: The future of maritime cyber security. Lancaster University (2015). https://ssg.lancs.ac.uk/wp-content/uploads/oliver-the-maritime.pdf

  22. Loomis, W., Singh, V., Kessler, G., Bellekens, X.: Signaling for cooperation on maritime cybersecurity. Atlantic Council, Cyber Statecraft Initiative (2021). https://www.atlanticcouncil.org/in-depth-research-reports/report/cooperation-on-maritime-cybersecurity-a-system-of-systems/

  23. Meland, P.H., Bernsmed, K., Wille, E., Rødseth, Ø., Nesheim, D.A.: A retrospective analysis of maritime cyber security incidents. TransNav Int. J. Marine Navig. Saf. Sea Transp. 15, 519–530 (2021)

    Google Scholar 

  24. Teal, J.M., Howarth, R.W.: Oil spill studies: a review of ecological effects. Environ. Manag. 8, 27–43 (1984)

    Article  Google Scholar 

  25. Galieriková, A., Dáivid, A., Materna, M., Mako, P.: Study of maritime accidents with hazardous substances involved: comparison of HNS and oil behaviours in marine environment. Transp. Res. Proc. 55, 1050–1064 (2021)

    Google Scholar 

  26. Deja, A., Ulewicz, R., Kyrychenko, Y.: Analysis and assessment of environmental threats in maritime transport. Transp. Res. Proc. 55, 1073–1080 (2021)

    Google Scholar 

  27. ENISA: Critical Infrastructures and Services - Maritime. https://www.enisa.europa.eu/topics/critical-information-infrastructures-and-services/maritime

  28. International Maritime Organization: Maritime cyber risk management in safety management systems (2017). https://wwwcdn.imo.org/localresources/en/OurWork/Security/Documents/Resolution%20MSC.428(98).pdf

  29. BIMCO et al.: Guidelines to cyber security onboard ships (2020). https://wwwcdn.imo.org/localresources/en/OurWork/Security/Documents/ANNEX%20Guidelines%20on%20Cyber%20Security%20Onboard%20Ships%20v.4.pdf

  30. ISSA: The Life and Times of Cybersecurity Professionals 2021 (2021). https://www.issa.org/cybersecurity-skills-crisis-continues-for-fifth-year-perpetuated-by-lack-of-business-investment/

  31. Fortinet: 2022 Cybersecurity Skills Gap (2022). https://www.fortinet.com/content/dam/fortinet/assets/reports/report-2022-skills-gap-survey.pdf?utm_source=pr&utm_campaign=report-2022-skills-gap-survey

  32. ENISA: Addressing skills shortage and gap through higher education (2021). https://www.enisa.europa.eu/publications/addressing-skills-shortage-and-gap-through-higher-education/@@download/fullReport

  33. Tam, K., Moara-Nkwe, K., Jones, K.: The use of cyber ranges in the maritime context: assessing maritime-cyber risks, raising awareness, and providing training. Maritime Technol. Res. 3(1), 16–30 (2021)

    Google Scholar 

  34. Potamos, G., Peratikou, A., Stavrou, S.: Towards a maritime cyber range training environment. In: 2021 IEEE International Conference on Cyber Security and Resilience (CSR), pp. 180–185 (2021)

    Google Scholar 

  35. Cyber-Mar: Cyber preparedness actions for a holistic approach and awareness raising in the MARitime logistics supply chain. https://www.cyber-mar.eu/

  36. Echo Federated Autumn School. https://echonetwork.eu/echo-federated-autumn-school/

  37. Iosifidis, G., Varbanov, P.: Detection of and response to an attack against the ECDIS on a passenger ship. Course Blueprint, ECHO internal deliverable D2.7 - Annex 3 (2021)

    Google Scholar 

  38. RHEA group. https://www.rheagroup.com/document/citef-pdf-brochure/

  39. Varbanov, P., et al.: ECHO Cyberskill Framework (2021). https://echonetwork.eu/d2-6-hopp/

  40. Bertram, V., Plowman, T.: Digital training solutions in the maritime context: options and costs. Maritime Technol. Res. 2(2), 52–68 (2020)

    Article  Google Scholar 

Download references

Acknowledgements

This work was supported by the ECHO project which has received funding from the European Union’s Horizon 2020 research and innovation program under the grant agreement no 830943.

Author information

Authors and Affiliations

Authors

Corresponding author

Correspondence to Paloma de La Vallée .

Editor information

Editors and Affiliations

Rights and permissions

Reprints and permissions

Copyright information

© 2022 The Author(s), under exclusive license to Springer Nature Switzerland AG

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

de La Vallée, P., Iosifidis, G., Rossi, A., Dri, M., Mees, W. (2022). Sector-Specific Training - A Federated Maritime Scenario. In: Dziech, A., Mees, W., Niemiec, M. (eds) Multimedia Communications, Services and Security. MCSS 2022. Communications in Computer and Information Science, vol 1689. Springer, Cham. https://doi.org/10.1007/978-3-031-20215-5_3

Download citation

  • DOI: https://doi.org/10.1007/978-3-031-20215-5_3

  • Published:

  • Publisher Name: Springer, Cham

  • Print ISBN: 978-3-031-20214-8

  • Online ISBN: 978-3-031-20215-5

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics