Authors:
Yunpeng Zhang
1
;
Izzat Alsmadi
2
;
Yi Qi
3
and
Zhixia Li
4
Affiliations:
1
Information Science Technology Department, University of Houston, Houston, U.S.A.
;
2
Department of Computing and Cybersecurity Texas A & M University San Antonio, San Antonio, U.S.A.
;
3
Department of Transportation Studies, Texas Southern University, Houston, U.S.A.
;
4
Department of Civil and Architectural Engineering and Construction Management, University of Cincinnati, Cincinnati, U.S.A.
Keyword(s):
Security, Maritime Cyber Infrastructure, Attribute-Based Access Control, Framework.
Abstract:
The modern world depends on maritime supply chains to sustain flows of international commercial, industrial, and economic activities. As the maritime supply chain heavily utilizes cyber operations to manage communications and physical processes, maritime cybersecurity emerges as an imperative aspect for maritime safety and security. The maritime cyber infrastructure displays distributed, heterogeneous, networked, and volatile characteristics. This article first studies the effectiveness of the mechanism of traditional access control systems for maritime cyber infrastructure. The research also examines the shortcomings associated with the existing network wide access control and identity theories to develop solutions. In order to develop a suitable method for the maritime context, the paper presents an Attribute-Based Access Control (ABAC) framework which is adaptable and highly scalable for the complex maritime cyber space. The analytical results show that implementing the new framew
ork can enhance the access control of the maritime cyber infrastructure.
(More)